adding VLAN 0 to HW filter on device bond0 [ 206.936192][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.959722][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.985009][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.004843][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 207.033143][ T8296] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.119678][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.129413][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.137839][ T8299] device bridge_slave_0 entered promiscuous mode [ 207.150964][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.158481][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state 11:43:57 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x704f, 0x1f, 0x80000000, 0x10000, 0x9}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x0, 0x6, 0xffffffffffffffff}, &(0x7f0000000180)=0x10) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r2, 0xee, "7bda0233aad327e264a4b609c585c748cab15a5c5e130f7376ee69ecc010cc8b1b338fd775b1fb24997065960d44411180dafbea33d8a1eac8064aa3cf15faab56c012ebb7514a344b35fa955ea5d181aaad2a7da710fffd6fbff86c11e5cf9fc6beabbf2ef3f8b8544d12ec276f94797026955147f871540df84e88e600602da24b4f20c70e1cc94242afc6c2cd495f3d1356b4c263022c812b659b837fcfc61a562cb82ebc3cdacac5eff4132617a2d58e1e649b36bda91fd0eef863f2d08bb35201f88112d043bb463cb9df853eff016e83e24133efd284be16ebe3f83dfb2c045fd0a2aaf67646c2acdb734b"}, &(0x7f0000000340)=0xf6) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000380)={0x3000, 0x1000}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000004c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1, @ipv4={[], [], @broadcast}, 0x8}, r3}}, 0x30) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000500)={0x3, [0x101, 0x0, 0x10001]}, 0xa) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r1, &(0x7f0000000540)="beaedb826cda8421aa74a56bdf46656a1832183b09dbff7a9632668d3931ee760e2db60b98a681b7210d7df031b192bb324b774e00f93d88092c725770cedf367caf4bb8bbd58cb89ebd17e1ed4915d98d7a4ce0da34ba93d795a3f749de1bff676d4dc780a393dde34cc8f8c41752a132aa9b716328f1300f165bd477b80ae3cbc9a6f3bf7735217f6c00f9e622e4b1b532a2a95084fef30db5d1c21a9b30b77d76779a460231334b84b2bbcaf20e49b12dea6be90a2d559c1b5f918802f7375166a7d2a7630c377bbdc4ddd87f5842475efce6", &(0x7f0000000640)=""/36}, 0x18) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000006c0)={0x4, 0x0, 0x7, 0x7, 0x46d3, 0x3}) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000900)=0x7, 0x4) seccomp(0x0, 0x0, &(0x7f00000009c0)={0x9, &(0x7f0000000940)=[{0xf00, 0xfffffffffffff000, 0x9ae, 0xf21}, {0x4, 0x7fff, 0x29, 0x2}, {0x8, 0x401, 0x1, 0x3}, {0x3, 0xe2a, 0x8, 0xffffffffffffffff}, {0xff, 0x5, 0x7, 0x7ff}, {0x7, 0x1ff, 0x100000000, 0xffff}, {0x8, 0x1, 0x7, 0x5}, {0x0, 0x8, 0x6, 0x8001}, {0x7, 0x5, 0x0, 0xfffffffffffffffd}]}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000a00)={'rose0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000a40)) bind$inet6(r1, &(0x7f0000000a80)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xc}, 0x20}, 0x1c) getegid() socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0xa, 0x2, 0x7, &(0x7f0000000ac0)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000b00)={0x40, 0xf, 0x3, "b105a6e4139871082774a03b78de1a3a6fd79c52d86fb9aea7d43efb7e9ed4c2", 0x34324d59}) timer_create(0x4, &(0x7f0000000c40)={0x0, 0x40, 0x0, @thr={&(0x7f0000000b40)="9586204e10f4cd17aadd1eb4c6727571d0ea215bd734db67f5439182a525c807683a5bc5a791aff5aff2e6d12343e13c616c3c777268f7737076c2b7296bf808d7429f599dda9933f8c44e8dbe4a6b350572f53a57a913a14cb92542a73b29fbdef5db8ee7747ed48f807dacd9de9b", &(0x7f0000000bc0)="3edb87bcdae10814230d936152f0d8b2eddb5b5e40e5555ab705a5c394ff530516e9a567c5dbe9e480c937c57506a319d8097cce067423775d35fd9c0fcf65646042292d37e41d51612e727706f9033d2dbea67844e294822e400b80c30b49b2b3fb98723c3c612e8c559bd6f5de"}}, &(0x7f0000000c80)) r6 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000cc0)={0x5, 0x70, 0x9, 0x9, 0x8, 0x3, 0x0, 0x8, 0x8040c, 0x1, 0x37, 0xff, 0x81, 0xe98, 0x6, 0x2, 0x1, 0x1, 0x4, 0x80, 0x100000001, 0xf71, 0x0, 0xfffffffffffeffff, 0x227, 0x5, 0x1, 0x6, 0xad, 0x100000000, 0x0, 0x7, 0x3000000000000000, 0x7, 0x3ff, 0x2, 0xffffffffffffff6b, 0xcd6, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x77733810}, 0x2, 0x7, 0xae91, 0x0, 0x88, 0x6, 0xffff}, r6, 0x1, 0xffffffffffffff9c, 0x8) [ 207.159516][ T8308] IPVS: ftp: loaded support on port[0] = 21 [ 207.178632][ T8299] device bridge_slave_1 entered promiscuous mode [ 207.201168][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.210503][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.220988][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.228118][ T8306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.238639][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.247389][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.257926][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.265029][ T8306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.301990][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 207.315152][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.328765][ T8304] chnl_net:caif_netlink_parms(): no params data found [ 207.343031][ T8299] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.360507][ T8312] IPVS: ftp: loaded support on port[0] = 21 [ 207.373917][ T8299] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.396661][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.438857][ T8299] team0: Port device team_slave_0 added [ 207.446107][ T8299] team0: Port device team_slave_1 added [ 207.527232][ T8299] device hsr_slave_0 entered promiscuous mode [ 207.585057][ T8299] device hsr_slave_1 entered promiscuous mode [ 207.658847][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.667478][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.677599][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.686095][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.694316][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.713931][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.721728][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.729767][ T8301] device bridge_slave_0 entered promiscuous mode [ 207.739109][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.747751][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.756421][ T8301] device bridge_slave_1 entered promiscuous mode [ 207.778835][ T8301] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.798800][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.807285][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.815389][ T8304] device bridge_slave_0 entered promiscuous mode [ 207.826612][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.833766][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.841934][ T8304] device bridge_slave_1 entered promiscuous mode [ 207.861728][ T8301] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.878512][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.886913][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.898965][ T8296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.910064][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.922925][ T8304] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.941879][ T8304] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.950748][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.959416][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.998919][ T8301] team0: Port device team_slave_0 added [ 208.030129][ T8304] team0: Port device team_slave_0 added [ 208.039093][ T8304] team0: Port device team_slave_1 added [ 208.046061][ T8301] team0: Port device team_slave_1 added [ 208.058217][ T8296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.112589][ T8312] chnl_net:caif_netlink_parms(): no params data found [ 208.129453][ T26] audit: type=1400 audit(1553255038.160:38): avc: denied { associate } for pid=8296 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 208.237529][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.259096][ T8308] chnl_net:caif_netlink_parms(): no params data found [ 208.271220][ T26] audit: type=1400 audit(1553255038.300:39): avc: denied { create } for pid=8318 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:43:58 executing program 0: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x800000003, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="24000000010907041dfffd946fa2830020200a0003000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', r2, r3) [ 208.357342][ T8301] device hsr_slave_0 entered promiscuous mode [ 208.374788][ T8301] device hsr_slave_1 entered promiscuous mode [ 208.424990][ T26] audit: type=1400 audit(1553255038.450:40): avc: denied { write } for pid=8325 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 208.445184][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.463815][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 11:43:58 executing program 0: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053b000/0x2000)=nil, 0x2000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) [ 208.480905][ T8304] device hsr_slave_0 entered promiscuous mode 11:43:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000000)=0x99c, 0x4) [ 208.524899][ T8304] device hsr_slave_1 entered promiscuous mode 11:43:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), 0x4) fcntl$dupfd(r0, 0x0, r0) [ 208.571503][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.599934][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.613328][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state 11:43:58 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x8000400000000002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r0}) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x31c, 0x2, 0xf, 0x200, 0x70bd26, 0x25dfdbff, {0x3, 0x0, 0x4}, [@typed={0x8, 0x17, @fd=r1}, @generic, @generic="e24beb470556ad02e4ca856b08a87820ab4b39e4ea0a5b3d51ab76595d308cedacaecb27a1fea674a42d4ec6296d31f0c8cd78214199585cd449838945e14b05a740336b4cde496c8aff494a2291de546c1a38d2b4d0d231399425293194d0eff1a357a66227051254d324c823252e7d31168a9592a092d99e51b2082e204c17c9787cd1474041010c540d843214bd060639592b705798b4ee6b2d484855b0e7136c63d1862ed85eff2edf44fceed0c80956f7a69450c994c3c3d28ae5f2cf259002519199d103621e9d745308cdb4c2389dba", @typed={0x100, 0x45, @binary="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"}, @generic="6ae3", @typed={0xc, 0x7c, @u64=0x80000000}, @generic="2c0d2e06f8388c82167a1e6c16a3295f23cbceceb5ed611a8eeecfae8b81c46b452df198090872232c8079d277e680fc29e474d9a52293e49185730ac911eb402c60c7e4f2dfef3f9985061c485f246d388ea72355e3f4b8b962f2d6128e53f8998dee4505a5754a74375c39c74c3e44702737b7b4e9907f5f784fd085cb70445452f9b2b373f694dbf0e43535d303251d8c0acd9206002010a038e60597642b34595bb49905ead61f7ff4907b5a8169bca7124a2f75804a5aa107ee2b7abe96aa1f6969cf15ef", @typed={0x4, 0xd}, @typed={0x8, 0x5e, @u32=0x6}, @generic="5b7e86fb65e0becb6a6baad55cef69d4ece62972d5cea4eb7909711dab1cb6fe88d14988f363d7d2a223e37c21552ff5056b2d35d87d8871e74228c20e4abdafec6092918777460d5d1460b0"]}, 0x31c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 208.621370][ T8312] device bridge_slave_0 entered promiscuous mode [ 208.679152][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.693121][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.707361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.716724][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.728559][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.735660][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.744211][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.751511][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.759307][ T8312] device bridge_slave_1 entered promiscuous mode [ 208.792604][ T8308] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.800492][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.808295][ T8308] device bridge_slave_0 entered promiscuous mode [ 208.816479][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.833110][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.841565][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.850800][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.857892][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state 11:43:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000200)=""/167, 0xa7}], 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x2, 0x9, 0x6}, 0xa) [ 208.891759][ T8308] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.900459][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.925453][ T8308] device bridge_slave_1 entered promiscuous mode 11:43:59 executing program 0: r0 = socket(0x1b, 0x6, 0xe0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socket$kcm(0xa, 0x5, 0x11) [ 208.944618][ T8312] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 208.953527][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.962393][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.979011][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.988250][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.012844][ T8299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.023956][ T8299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.047392][ T8312] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.067052][ T26] audit: type=1400 audit(1553255039.100:41): avc: denied { create } for pid=8350 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 209.091895][ T26] audit: type=1400 audit(1553255039.100:42): avc: denied { write } for pid=8350 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 209.093872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.123372][ T26] audit: type=1400 audit(1553255039.100:43): avc: denied { read } for pid=8350 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 209.131015][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.157771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.166810][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.185599][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.193997][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.202312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.210829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.220814][ T8308] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.254950][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.265333][ T8308] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.280451][ T8312] team0: Port device team_slave_0 added [ 209.300104][ T8308] team0: Port device team_slave_0 added [ 209.307592][ T8312] team0: Port device team_slave_1 added [ 209.320960][ T8304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.352022][ T8308] team0: Port device team_slave_1 added [ 209.392570][ T8304] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.426836][ T8362] mmap: syz-executor.1 (8362) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 209.459131][ T8362] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 209.497565][ T8312] device hsr_slave_0 entered promiscuous mode 11:43:59 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x400000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000e40)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x14) mkdir(&(0x7f0000000140)='./file0\x00', 0x28) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='cgroup\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x400001, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x4e2d}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000d80)={r3, @in6={{0xa, 0x4e22, 0x3ff, @local, 0x200}}, 0x67c, 0x5, 0x7, 0x2, 0x9}, &(0x7f0000000280)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x800000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x1, 0x0, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x42, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB=',\x00']) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000002c0)={'teql0\x00', 0x9}) mount(&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000d00)=ANY=[@ANYBLOB="3800c62029d7ab1024b0e8ba39bcb3d62754787cfd2293c9304dc1002428ea0c22dc0000000000df4150"], 0x0, 0x0, 0x100000, 0x0) write$UHID_CREATE(r2, &(0x7f0000001000)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000f40)=""/176, 0xb0, 0x21, 0x7, 0x10000, 0x101, 0x747a}, 0x120) mount(&(0x7f00000012c0)=ANY=[@ANYBLOB="559e6a11fad71b747d0be14405d162c393a24521ed415bf7f421df4b87dfe6f8325e5bb5c61c962e88589793d7ff431efd3bb552d28e4e9c7f5a0c8f51f0507bf4919dda01d891066de01d92784adffe01079890516d3b44ab2a85d92c274e3f9086cde240be6cd774c17bd69b9a99ba65925b1a4cb556f5763745d8087acf25b4090edeb24def0a8c0e24b6a6a7fc5b1706ab3d0210da3a6b22d9674bb6123430e74062fc12414867e4d21b8ff91db4b0486e592ee59d92341d6a7d28e6c8ce297f51da82e21cc26ab3"], 0x0, 0x0, 0x80010, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x1) mount(&(0x7f0000001580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 209.534836][ T8312] device hsr_slave_1 entered promiscuous mode [ 209.582374][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.590302][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.605717][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.615119][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.623513][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.630649][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.670652][ C1] hrtimer: interrupt took 26445 ns [ 209.677925][ T8370] input: syz1 as /devices/virtual/input/input5 [ 209.687181][ T8308] device hsr_slave_0 entered promiscuous mode [ 209.722639][ T8308] device hsr_slave_1 entered promiscuous mode [ 209.795721][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.827931][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.846271][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.862330][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.871207][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.878308][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.920003][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.936264][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.949341][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.958039][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.967104][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.975570][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.983079][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.990861][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.999455][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.009689][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.022997][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.032188][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.046065][ T8312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.058696][ T8304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.069840][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.087611][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.095874][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.103897][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.113121][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.121501][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.128610][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.136515][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.161939][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.170489][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.180009][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.187102][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.195160][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.203557][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.212230][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.220718][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.228938][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.237758][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.246799][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.256069][ T8304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.271509][ T8312] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.285618][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.293827][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.302633][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.310578][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.318232][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.326785][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.336526][ T8301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.355422][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.364463][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.372750][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.379862][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.388207][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.398242][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.407199][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.414251][ T8313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.424217][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.478273][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.495407][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.510631][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.519379][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.527829][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.536528][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.545054][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.553163][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.562214][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.573992][ T8312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.586248][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.597813][ T8308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.610563][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.618999][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.636135][ T8301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.651168][ T8312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.662301][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.672392][ T8306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.682245][ T8308] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.722365][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.738006][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.763499][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.770675][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.811650][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.830414][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 11:44:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000001440)=""/185, 0xb9}], 0x1, 0x0) [ 210.860773][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.890816][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.897954][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.938482][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.967129][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.975915][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.984301][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.996330][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.004114][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.013467][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.038975][ T8308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.060896][ T8308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.074122][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.082586][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.091000][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.099287][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.107779][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.136814][ T8308] 8021q: adding VLAN 0 to HW filter on device batadv0 11:44:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) 11:44:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000100)="040000002e12a41d225086") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 11:44:01 executing program 0: epoll_create1(0x0) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000480)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f00000007c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="c6fb2871e4b3e0f2ca794ecc639838eb24fd2d7ebde89bd3f51ee68d4c6f87c1d7e1471fb0d6c3fc35b924af95fbc683909ad1d644235a8242cb8a7e01d060dd7835eff4d3caf9d4c63b9ed74fb57b528c866efd6f35200c9169b29a936618832d9a8c02b9cfa2113af795dc6035b78572ecae8c905ec5df4ab815d8e0143a51a58393b7947a23a95e5667bc3f216069027f2a5cf5c8", 0x96, 0xfffffffffffffff8) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2) openat$cgroup_type(r1, 0x0, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000440)={0x9, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000840)={r2, 0x5, &(0x7f0000000500)=[0x5, 0x1c, 0xffffffff, 0x302c19e1, 0x6], &(0x7f0000000700)=[0x401, 0x1ff], 0x0, 0x2, 0x101, &(0x7f0000000740)=[0x7, 0x2], &(0x7f0000000800)=[0x3f, 0x8, 0x400, 0x101, 0x40]}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) fallocate(r1, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000400)=0x8, 0x4) 11:44:01 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80), 0x1000029f}}], 0x4000000000000e8, 0x0, 0x0) getpgid(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x202, 0x4, 0xffffffffffff5516, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x101, @empty, 0x20}}}, &(0x7f0000000240)=0x84) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x103000, 0x10e000}) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x2, {0x4}}, 0x18) 11:44:01 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f00000006c0)=""/4096, &(0x7f00000000c0)=0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000000100)}, 0x10) sendto$inet(r0, 0x0, 0x223, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0xb800, 0x18, 0xfa00, {0x64, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 11:44:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140)=0x6, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0xfff9) sendto(r1, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/38, 0x26, 0x0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x1, 0x0, {0xa, 0x4e20, 0x1fbf, @ipv4={[], [], @rand_addr=0x3}, 0x20}}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x18c, &(0x7f00000002c0)={&(0x7f0000000080)=@deltaction={0x18, 0x31, 0xc19, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xf869, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={r3, &(0x7f0000000240)=""/47}) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000001c0)={0x1, 0x320000, "53d78f613aab2767abde800a18a724ab7375712958068f4c", {0x39, 0x9}, 0xffffffff}) 11:44:01 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r2 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r3 = fcntl$getown(r0, 0x9) setsockopt$inet6_tcp_buf(r2, 0x6, 0x2b, &(0x7f00000008c0)="d0c46cce5ab87081ef18a38fb6fe79dcbf9ee605982e671751464b41e040f38eed71b347f34aa0cb136c486c6119feb3c96f23bd02a202433c3a162b6441b24f6625db32104b62d57c3fe51f87a28eab31c0c34b545dd873185f38cd66644bd12eb78d35e8b8e1b5b80308120d7b93ae760d90afc8e8e1758705f60c19ce4999ab1cf3dfbb891336ffa7f9530604536326be9673c9c4939d5c733ec52495106ae7a3b2fe779ce984e1e797b8eddcfea05a1d7a9f3d3b6451", 0xb8) fsetxattr$security_smack_transmute(r1, &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000600)='TRUE', 0x4, 0x3) ptrace$pokeuser(0x6, r3, 0x7fe, 0x2) ioctl(r2, 0x8912, &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x74f, 0x1000) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x4) rmdir(&(0x7f0000000580)='./bus\x00') setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x1000000000001a, &(0x7f0000000140)=0xe78, 0xfe90) r5 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[]}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) fcntl$setownex(r4, 0xf, &(0x7f0000000180)={0x2, r3}) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x2, 0x0, 0xfe, 0x8, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x7ff, 0x8001) clock_nanosleep(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f00000000c0)=0x202, 0x8) 11:44:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'caif0\x00\x00\x00\x03\x00'}, 0xfffffffffffffe2e) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x60a0, 0x4) 11:44:01 executing program 4: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, r0}, 0x2c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r1) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000140), 0x10) ioctl$KVM_SMI(r0, 0xaeb7) setsockopt(r3, 0x65, 0x1, &(0x7f0000000700)="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", 0x258) ioctl$KVM_RUN(r2, 0xae80, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/214, 0x484) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x0, r4, 0x3c, 0x0, @ib={0x1b, 0xfffffffffffffffb, 0x100000001, {"7810ba35f578b90ba973bf06ae3eb3f9"}, 0x1000, 0x1ff}}}, 0xa0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x7ff) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x0) close(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x200, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r6 = dup(r5) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xfffffffffffffffa}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0) unshare(0x40000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 11:44:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "cbb4f3b1095bfe46d0ab2c9c5e93b20a5e0bbcfd39ee10960ff5b1e63ee0a382", "015841f3bdbc967595876b123f15e3a681ad11dc75c94d24f8a98898b9bf61f5", "9ced4a159b96e4b3ff862f76224d8a53ade38839980d113e22e68953df29dea5", "bb80312ea31ae56ccfc81551310b3dccdad6b4758c9b7607432307a871b4c286", "98d9dfdcfcd285f313528ddb3a3a2d2f22962917af2533afabb2d1dcaf49c6ca", "4e08694ce631aa72afadb9be"}}) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000180)={0x2, 0x9, 0x8, 0x7}) [ 211.530306][ T26] audit: type=1400 audit(1553255041.560:44): avc: denied { map } for pid=8416 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29857 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 211.693309][ T26] audit: type=1800 audit(1553255041.600:45): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16544 res=0 11:44:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='B\x00\x00@\a']}) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x14) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x8, 0x6}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000001c0)={@mcast2, 0x29, r4}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x1000, "245de58bdcb41ac66da0d5229d28aee4c5a0204b257a74722de936f4238115"}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1000, &(0x7f0000001380)) 11:44:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f00000001c0)={0x0, 0x12, 0x6}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES16=r2]], 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) r6 = socket(0x8, 0x4, 0x0) bind$tipc(r6, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4}}, 0x10) r7 = dup3(r3, r3, 0x80000) bind$x25(r7, &(0x7f0000000140)={0x9, @remote={[], 0x0}}, 0x12) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000200)=0x4) [ 211.832621][ T8462] sched: DL replenish lagged too much [ 211.840276][ T8462] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 211.877165][ T26] audit: type=1804 audit(1553255041.670:46): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir172749176/syzkaller.l1eZKY/2/bus" dev="sda1" ino=16544 res=1 [ 211.991781][ T8462] Unknown ioctl 35096 [ 212.011459][ T26] audit: type=1400 audit(1553255041.760:47): avc: denied { map_create } for pid=8452 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 212.105717][ T8462] Unknown ioctl 35096 11:44:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x20200, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000200)={0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) [ 212.174798][ T26] audit: type=1804 audit(1553255041.820:48): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir172749176/syzkaller.l1eZKY/2/bus" dev="sda1" ino=16544 res=1 11:44:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x102, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000240)={0x0, 0x80000000, 0xff, 0xffffffffffffffff}) mount$9p_tcp(&(0x7f00000008c0)='-27.0.0.1\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d7463701a07af06a0babc21cbe7efa7e4f7629cc1f2c059318c4af2a11c9fde410ee736e950a7642adc012c30463cc3f37edd31757c512250a413687e205d3a1661a7bfab82862c55b1aa7a238aff7fabfbecd0a5a471d5ce61e73b4ef41d8f3b47db97f733607d9851e366621a2f900d94ee367ce8e41b51f79b507d47f1e8a09600864182ce208b664f9c1d70954f06d3f436c5355a9358f7644e26857f3ca0327268cbf2542988ba8860ff06a9ada545b353b9cfe3ba5144fbd888a120bcfe5a208d737a97f097fb8892f7cb1c2945825cf10000"]) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'irlan0\x00', 0x2}, 0x18) [ 212.245607][ T8454] IPVS: ftp: loaded support on port[0] = 21 [ 212.245798][ T26] audit: type=1800 audit(1553255041.840:49): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16544 res=0 11:44:02 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) [ 212.253668][ T26] audit: type=1804 audit(1553255041.860:50): pid=8456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir172749176/syzkaller.l1eZKY/2/bus" dev="sda1" ino=16544 res=1 [ 212.376761][ T8479] Unknown ioctl -1070573808 11:44:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x800, 0x8000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x2, 0x5, [0x2, 0x5, 0x1c, 0x46, 0xffff]}, &(0x7f00000002c0)=0x12) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e21, 0x100000000, @mcast2, 0x8}}}, 0x84) r3 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x800) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0x91) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180), 0x4) 11:44:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'syz_tun\x00', 0xa}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000280)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="1a0000000000005e000000000000000000000000000000000000000000000000000000000000000000000000fbd2fbe2734f9000e5355f1d25dfe9489f5c5f2856b2c4c6b98e868ff6a0b5637628cebe20bf105955ad32b2146c8238a94689463b52a93407bb3e512268f8e806486b2269a22b8ca46778bdb53a659ac6ef03a9"]}) [ 212.409991][ T8479] 9pnet: Could not find request transport: tcp¯ º¼!Ëçï§ä÷bœÁòÀY1ŒJò¡ŸÞAç6éP§d*Ü [ 212.485427][ T8479] Unknown ioctl -1070573808 11:44:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x5, {0x3, 0x0, 0x1, 0xffffffffffffede2}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 212.513670][ T8484] 9pnet: Could not find request transport: tcp¯ º¼!Ëçï§ä÷bœÁòÀY1ŒJò¡ŸÞAç6éP§d*Ü 11:44:02 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x89e9, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x10000, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '/dev/ashmem\x00'}) 11:44:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='erspan0\x00', 0x1024d) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x30, 0x10, 0x0, 0x120) 11:44:04 executing program 4: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, r0}, 0x2c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r1) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000140), 0x10) ioctl$KVM_SMI(r0, 0xaeb7) setsockopt(r3, 0x65, 0x1, &(0x7f0000000700)="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", 0x258) ioctl$KVM_RUN(r2, 0xae80, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/214, 0x484) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x0, r4, 0x3c, 0x0, @ib={0x1b, 0xfffffffffffffffb, 0x100000001, {"7810ba35f578b90ba973bf06ae3eb3f9"}, 0x1000, 0x1ff}}}, 0xa0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x7ff) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x0) close(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x200, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r6 = dup(r5) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xfffffffffffffffa}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0) unshare(0x40000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 11:44:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0xa3c10fee1e0bf87b) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x0, 0x0, 0x17b]}) 11:44:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)={0x21, 0x3, 0x0, {0x3}}, 0x21) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 214.472120][ T26] audit: type=1400 audit(1553255044.500:51): avc: denied { map_read map_write } for pid=8515 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 214.645151][ T8520] IPVS: ftp: loaded support on port[0] = 21 11:44:04 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x84440, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xb, "31faa655fda20311a46c71"}, &(0x7f00000000c0)=0x13) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) r3 = dup(r0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000001180), 0xc) 11:44:04 executing program 1: clock_getres(0xeb0bbdd5a7387e47, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x228000) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2}, 0x4) 11:44:04 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x200002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) memfd_create(&(0x7f00000000c0)='\x00', 0x4) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) fallocate(r0, 0x4a, 0x100000000000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e24, 0x100, @local, 0x8}, r1}}, 0x38) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000200)=[0x8, 0x4]) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 11:44:04 executing program 5: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, r0}, 0x2c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r1) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000140), 0x10) ioctl$KVM_SMI(r0, 0xaeb7) setsockopt(r3, 0x65, 0x1, &(0x7f0000000700)="3b3561ac00814a4548c78d250bdd795fd74ffc69a3565b45f64e53148f3f1ba2f9ef4cd9bc9accca5a9e66aa66083c540e1c390ef3733d2d4aa8d18ac54b2a11459a84cd69778e626bf2180598cf27123f9e627bf4e0467e04f91dd4c9824be1fec0ce58dd168688e6c45a2d8381f4c9a4dfa0fdbb9c9f9e0ffe482aabc46830685fd52c4413cd4d9929999530dec36e01bfcd34099fbe33339b575ff07af0ec8c1a3c4470c103362070b6230923b6a576f83bd964cdafeaeec9e341d82f90054773b4bb1886feeab2b03ec217b9c7e1caba03da6c718f16cbf30431abe8bb25295fb02cdf4fe3a04f89cf9cc5152d48d92b3f8c9e53beb90474488822da8c6ff25760c06fa435f9d0854024945f872c2d61c78c2db8a5d40e8acbd8c00e008aa50d36c09ac673fb47850a7bf8c3394a2e8112c10c10b5c9a7ee6d364ca52a1e1422e433bb020f2e74eb600033d1af7f5e2bd98ba21417e6daa73284c958ac353dc9add51e9b3ce7558cd3f47417d148444ac3a4012a393f87f3edfe83a68f9c5c80fa3e3605150e199f0443b908f11934f96745dcdf9079b275908bdfa7f470c6583c2f17d00f865afa83a0161d65624de63dfa09e359e1eb0000000100000000b8726651fba34a330eb4d117571008a9634576a1d3e245355788c524a072e1dd361370769a3250291fbb1c0015bbe190d93320e4cf2bfe640f9082a4a33524291403c723ff866b37e651eb32b16803511b5e4ca7afa48ff5dba1559deb21413bee6d818b648d60e299d9ef9e39846d771f4eb6e2fbefac6290fc2cbb1af648451675a870b77b956db74420005e9393520c971741bb4529", 0x258) ioctl$KVM_RUN(r2, 0xae80, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/214, 0x484) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x0, r4, 0x3c, 0x0, @ib={0x1b, 0xfffffffffffffffb, 0x100000001, {"7810ba35f578b90ba973bf06ae3eb3f9"}, 0x1000, 0x1ff}}}, 0xa0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x7ff) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x0) close(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x200, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r6 = dup(r5) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xfffffffffffffffa}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0) unshare(0x40000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 11:44:04 executing program 2: prctl$PR_SET_TSC(0x1a, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffc88) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000001680)="31545d76560d07e946ae7955a10cb6dae75ed5db9d49eead197d3e186638751db384333541dcbee2ef03461ca3256c278cd8dae7416f43d4a6e24c7bc0aae91214f98a871eb5a0568c837cde19db62d5d73d72316d5cb6be63cce818b7a9925fd9c389038fa181a506473e1468a7969e1ac85de7a1a58e14d6adee8a49789590af8cbb51775992596c8250f877be7490122ccc4d30d72a92c2f6f9e75be5092d5c3a40f151b8a1a66d374ed6400a5a889f5ee315d4c769a5acddf5bb08ab8fba858195bbf3caaf9d6d1076710c9438ca59d4f79cdf039039652637a24d499eab5009aa6da70a43b4f36553a354b713a30ad1f28719194c543c2e21c6a12774b0539a329c6cd702cd2781a5a2f14667ad05f8dd962304b6bfed8892dd1f5d66c80537c1847b005fd5b2aff5e5b4147ef4f3bd3466b11eea2b22c84c2303bdfc8fd2388a88a44bd9904d5c6307766ff6c4f3c37e33d8988dea59d8e9939bf899fb296f72d198308bfe89754eb218bdfcd1e47b4a7c80f0db115fb9d3043ce4ac62ef8fcf5f50d14c03d08c734567cf41ad3f540d880d3c810d00399fcf23e16c4c39577eef37d5c48f1d62b1c1c943377a39febee76a04a9d94990c977da70ee1b108b0ee1bd2371557de1582d3c19d90bd28f58c4afa1d6609b7318b3a7e492364baf4283e4e6cfb5b98a259fb8c606dae48d3ace781a9ddfbde3dbdfa1b4456b20a46cd9f928d3ea80a2e2fc621d6e454e49a9dc7a8936e54841b661deed5450e15f7dbf7f4bb52ef060896ee2a0d0e24c077341ce00e220c0288c0a6489a7b8766220932639519d3b00e146621ecda99386ab6c3eaff55d8d97c1cba6116e27185139d441e082d498d22e8ba051d3805aff4a0f1a86dea57bc88db4eb8ddbb05618b08c593ed3ca15a6d5772aa80b393aca7611ce93a5f3e61c0734f051e155a6c9dc2b3dae920d917d17b9ab86b6438aac88ec4bee94275b057a686b5ba3113dc2014d88eca9b02188a4321f700f08e46d72b0864c3848026b6ba1a5d2a988978ee0d01e41fb42e3eb6c8f711b74a46217fd735b0e7992acb3728084c1f46215247f8c871ac10a160cb91be9fb3de5ca04ba40a163ce80c8765deba7f1d8f3c7e3049da62926a3f6bfb3c3f517b7ad24d8fc5cc210841a552702d7b7804b21ebf7741b4b12b4d68614cce1c2772cb18968e939ac728d8dcb5dc7836ed6cf2144c6231744417c1dde3339b3120ebf7420f5e85dd9f7a06f5c2bb04ee8061ad9b81b83c6107a5c905471ae42c86982ce6e8a7e62aa4369f59262cad9352638dd72c5531b5ca724f35049247ea4e615d51924fcb4c4cb98ece67a10b2b24482e0b3fc7d211cd7ec1e9daab89226672d888d883e813e64fe0969f48ce016cbd3fe98b3ccc381d35009d475b1d370e77fe8dda416ee0c9f4ffc7c83bb8f71de68adfbe1073449209e96f45d753bc4bc3c2d61d30ce99031f30b9be083938cd8164d70d8e5786412b84b6120a39a0480fcab821fa8b33e7d8ac2170e725aa7874e035d675ce14392c53ea57ac7ba9dbd5b30af26c6ed35e9f171b961f36d9507e34c56f642e362805c0d30ad5929a1dc1c1e6aeea39da17b27c55f959418a0665ea0d39eb568a88e2690d0e69993eeb9e866e02b5c52c6f39a1cb8e07c12cb7022f8318e1da59bfbe1a5f674a82cf802d0cc641d3292ca5204b18b1114ca8f120e2e2752f83e9447a031be1506b00485c5dcdffd0c98a8fa7c68e72b5ea320011784a03d1498c0112e13b03f6bb68922050ec90fc49a5727c63725dca9a124523c26b2b9d0549d9face079933c66162822f25a84cd5322dd47fa9c6ec6e09768ce7aef632195d53ae115933f12a2049be0fabbe2886cc49d5bbab7cdc1496dad09943963efc6f43ac06dad839ee4751b2cb11b5adab8f0bc2472f117fb4c7c912071552eb24d08f6f4077e727ddc68d2ecad511136e347300025848d98011b79cfe3016e8b49c6c81e1d851258893057138379d0fa78782ca97bb7d2bd50143adbd45d5547a8647ac9213085c13e8af722ab611bc8ca172889ac03bdf71603c8231593883576d3476fe3e5c4c427d84e862f240fafd13534b7fd5c6f63efb71e5e7df863c31c13048bd0da956d270da3d0850e1f9fbedb2a06c1767a19a0ddc10077d31c2a21427b1a16804a5a4e883927554aaf6d951f368b935b8a46eeab9808d5efd8a5ea2a0ffce5a45401ec48c5f05b022ee560f9d3444b091f20296ed79a79ae87a5093f15a62f3068a03230ed96e6395052fc6544363cf169130fc2ddc82892228f24d88e5319cf6653c008b8be81446117437ffc018fe8010609b57f205c8636899bf6ff7b624527279c8118255202a922cac7518a362cf76cff117e5a70ead5b13e0a3e6b4ef57e8d5b0e6f6a8afb24437c9156ec838223f257456d4379a1a3ff2a4a7436b95a5de798f21fe68d033625d6f1fb0dcf7879dd648d37ef5acdd97758605bc487e3f60352a89f853fa955b68a10ae2044b156a838972f9c01132cc53bbabcd0fc351ea711a3ae8e649505aef573472da5289514ea6097684ea843ed02dcc0674aa8623a4a747075e8d3fc714de5a678e31003f822ee5f49919916c6a57127e7f48a75d6a94c73e563887322fc31064ccc0bda0ac4846d1349a009a4ef9b1224b0d02ed02a37e4d023ac6076b2022088ef879647ea28d632aee566f6ed7d601195cffba40aa5957adb3f0ea34e3851ba322f0770954a8bac5eb6f270170487be38bacadbe21a3d3075cbc58da1fb2fb05c65f1ca0aec2ee0bfb8ad714b73855e6bf5ff005b29321b958ad887465a4b99ba47f25e0212c202e8fc8f80ec9e101992e1d0030dbca1ba692ac851f08509d77c5aa146178d8374e394f0fd1b05d9cf51c973943230badbfd1ddbf6dc634469d3ba2c35aad9c6c321ecca7b823de32a126aecbced39e7c68c5e5815223693bdc4b90c51f169d3ee6d4c97198452707752787d2a06c5bfe558b138d5a2cf78e95d6ea316b46b4cebb980b29464784b1ccc16662893feabc35ef80d9ec42526a5803a161c7bc340bac0fb524aa0c1fe052d4389828faf183235dccac6efc0c1ab1bb4ef2412e23f0e2862e518e263df81ea9bcf39a182e172e5af08eed55b3bc3b0a1cdda9ec0e365c2985aea662f4e4880c3b8b1d3c3abb02521cff1f1477515466cfc08b5da4a8ea1cb14737e45d6addfe26f8fe01a371405921e59473d2947458a4ed0148c1612a43fdb075c2ef057ccfbe8fc5587f80e6f07d76d8f71f25c5175bbcbdaa074337ca11c0641519afdc330a1c527c9c054c75712a16d7e4bb2a38c47514a2429419465d6b0757efb1ba0babd5ffa91ee1297c20321293273b429a820b6c23561c1f98476738f5fa0751f7c16b5ba63f9b180be2fa808aba5f145622b50892a66fa6ba2e50f7b848d714ee2756191ec38288dbc6ca030473ae115313cab71eff9a9cb4ba36f3817a8b536918b997186c7a3979c85e249e9afab8dc5a594bd0e952a12ef53f78ae780eb94de72f81183900612230e0cec86b83ed0160ba3d9aaf65a958b17bd6e51590ae4411107ad4b5425ceb06f62acd0ff09dde65304d96bc796caf702355ecffc6101106630ea52bc8cdd6acc7c028bde4dbdbec6f2e98367b7c61d7923e014cf5d52517516f50cbb09be552962618ceb5545b68ea4d7eacca95056d7ff407d98de94748f550debdf926c5cb7c6357f5577754201d4ec7e06d1a688c01e260302c47d9d3d53e67d115fded57a53d7d3c8732f4cb1c08f80261a9e4b3ab2e5ecd6b85c311f188a70f1f258c3b708460e41512b5a3367cb64daa67524d6f1f2a1bf8c59935c427030d4515a0420453fb0010624daa74005bd7280234931e95a95067cc2f3ee389369d1f422208e171db18d0025abfbedbb513d5102646eaeceea8be68159999a53f1dc2b375f52077e30fd74bfd46623e9ed5a7d88b3c852c58c51eaa5ad1ff486baddad45d3e6d8919993ad02ceea05f1ceb87f24375432ac51d45f10766f99b595348dd9960e6a6a562a16ca4e5a2bf13f9b5dd5d2c9a7a7383acb37b4456ebf0effd13b6eaf1f3d69c4de68e244a4e124fd83d1476313f426d622725d3f565be48c76d87df54f90195f533a396817f45ab08e00fadbbca472d18ca3d111d98a50d4ed72b0eda730309e7a44a483693db3b285582e742d874129e20ce8b92df8b97671687845ff246555e8357a491f78d2f2ced6d078afa5df2520823b8f61a3fe6ef33f53f23995ff874bdfed447763f9633d9608300a9caa22dbe39a0c8cd9f37aca0d6f049ef608cba017be050b894c9ba876dacf8a1e26e634054b6dd7aab090f1190d95123b7537dfb04b41dd031ce4f09d99cb70bf1185278b74c6fc8882d4caa2324440b8658fa4761b194944abefca19f0537dbcc3600e58db5508764565690d44347678a74118b18bb81fda87a5c9c83da40dee3acac5eecf132ff69db0daee9ec4669ed37393e0385028dac39c529451a0d5646076b2a5af505d23b0636ee32a5c3d4990c716423176e8c456f925434ab02d25c80e33eed3f991551c451ee10ff5aaacdcb89f240ebca6abff8b1cf928976c02262ad38672ce309c8931d0a351234f836e53556c34fb1fe2c9190c3e7905d8256cb7e37cfe06cee855ecbc004d107619ddfb4d361701d8f1b399f0efe460f73fb59425347301763c5e9ef6ac97200f3a202c0a0ead8b72951d31b43b4af7efa841f1f9d29e84d446d51007112cb0e8214d12aad28662824dc6d3d72f10e1122b444c11fe0fb66c3b21d726296bf8d1adba3820e2beff3ff5d0c3ed1cd696fa02ca92e7c5d17f3fd9b734ea9daf1636a781e7cd94d9d404fdae1dd51243d071b77232840950d206be0f5075e8a2bc0b2c8e764001ffdb419dbe0d3841acd20475835bffcb87a035f6c3283494f369ee97eaa677153377dab552a016664523e9d083ff2bfd6464188a3875649aee782786627a640dee8ac38a4c1732ca7f0dc8c255faf6277d0e866fb7b78cbd2c213608c4e6fb88006844829ada45eb757b97b842bf0835ef45fa916725026835e3845d959ecaa07d9279482e2c74c72447c5ef6040af459e0f2f71031070072d848def2f8cd1e71716e7cea912a60f41364c924328f645df133c75c890e14634afd81af7e463d0031a40b8d6c94d01f9f617f893ee3d6c5096aaef86c1dcfbb1e8d16f3aa9433206ae835bbea8d283681fd5482ca872425bd55d86d279bf07568389d64717a8a0239a16b2add96a663c2078cf8d9cce1c5707518702271a7d75234aacb69b0d8a84a67abc9b8df0723900572861b0954729636e78662d8fb42aabc1bd4417e0634d8d3fdb268a09b63bc4dc87fc141f145d4cad73eebbfb5c27bc5659896b3d289d65d2dd68dcfbd66e5946fe17f8d5cf8191bd60c7b8bc55e01f287471e2e416f196f1fa1d841f2b00a2e6ab8769243c6fae2f037afed0c5eb74ca3342b6ace441bef1f98b104fea0c05aaf9a61309cfede6fe3cbb6613f420b84f2a8e905f0d47b704f00fb880c5a72bee8daf1d18d7d179569f57cd76e521093037249efdebf7c32bc7213afc27f3a1911361337ce1b6dbf4586bc5b9fe345041235ad77bf9a4dd222359a9a9d0e969afce225915b8568fd53789d403d55e0dcd3207ad7f8d1b96fc224aef44f0136f25143f9e61de0ac38032f1862aa0886fa8d90f2f446e1c2d601c963b40d2859c6334f0c8213035534b4e2c9c73ac7247f16afe3d151eef9fe96c8027fca8", 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000001c0)=0x90, 0x4) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) mknod(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e24, @loopback}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x34, 0x3a, 0xe, 0xa, 0x4, 0x81, 0x6, 0x69, 0xffffffffffffffff}) r3 = eventfd(0x0) flistxattr(r3, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) getcwd(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) waitid(0x0, r4, 0x0, 0x40002003, &(0x7f00000004c0)) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:04 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$iso9660(&(0x7f0000000640)='iso9660\x00', &(0x7f0000000680)='./file1\x00', 0x9, 0x1, &(0x7f0000000740)=[{&(0x7f00000006c0)="c6813edade83544d77ac0534fe8d356d522ebfbad318854ff342a324b3baea8d5486e7b3a9856d406773d5cb945b381e7a40f3691f4d413c38fd030d7b4511acfe776289f26fd76a42e50283c900ec089f313d14fe77b0aca348083c05", 0x5d, 0x6}], 0x3000, &(0x7f0000000780)={[{@nocompress='nocompress'}], [{@smackfshat={'smackfshat', 0x3d, 'context'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@uid_lt={'uid<', r3}}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'umask'}}, {@uid_lt={'uid<', r3}}]}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="ebb30779380c62443591985c83c05ce9ad30b544668f04a4188b90a575139bdd71a3f959053fac17355fb27bab6f562f5f947903", 0x34, 0xffffffffffff0001}, {&(0x7f0000000140)="a7e883a189aac6231976fe8f58cec7748f766cdde53ac6428b875a751ca67187f7c61dc3cbbaa4bd9ef5c7370ebfbf203e4ae7b0d814aafadd76c6815093ec", 0x3f, 0x5e5b}], 0x0, &(0x7f0000000500)={[{@resize_size={'resize', 0x3d, 0x80}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@discard_size={'discard', 0x3d, 0x9}}, {@uid={'uid', 0x3d, r3}}, {@umask={'umask', 0x3d, 0xfffffffffffffffa}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', r4}}, {@uid_gt={'uid>', r5}}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'system:'}}, {@smackfstransmute={'smackfstransmute'}}, {@euid_eq={'euid', 0x3d, r6}}]}) 11:44:05 executing program 1: mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x1000000000000000) socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffffffffffff0302, &(0x7f0000000000)) 11:44:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x807, 0x8) write(r1, &(0x7f0000000000)="2400000020002551075c0165ff0ffc0202000000001008000000000c0800100000b4cf71450000008f3943793a5ea67658cb22", 0x33) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0xffdc) 11:44:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000860000000000000000000000000000000000000000000000000000000000"], &(0x7f00000000c0)='RPg\xc9'}, 0x48) r0 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) write$P9_RFLUSH(r0, &(0x7f00000005c0)={0x7, 0x6d, 0x2}, 0x7) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x8}, 0x1) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c0100001b00100028bd7000fedbdf25fe880000000000000000000000000001000000000000000000000000000000004e2369194e23fffb0a00a08022000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xa25}, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/video36\x00', 0x2, 0x0) [ 215.109407][ T8556] JFS: discard option not supported on device 11:44:05 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) inotify_init1(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 215.164639][ T26] audit: type=1400 audit(1553255045.190:52): avc: denied { prog_load } for pid=8568 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 11:44:05 executing program 3: setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x4, 0x4) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @netrom}, [@null, @rose, @netrom, @netrom, @default, @bcast, @null, @netrom]}, &(0x7f0000000100)=0x48) [ 215.204192][ T8566] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:44:05 executing program 2: prctl$PR_SET_TSC(0x1a, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffc88) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000001680)="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", 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000001c0)=0x90, 0x4) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) mknod(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e24, @loopback}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x34, 0x3a, 0xe, 0xa, 0x4, 0x81, 0x6, 0x69, 0xffffffffffffffff}) r3 = eventfd(0x0) flistxattr(r3, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) getcwd(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) waitid(0x0, r4, 0x0, 0x40002003, &(0x7f00000004c0)) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 215.297054][ T8556] JFS: discard option not supported on device 11:44:05 executing program 4: symlink(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file1\x00') mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x7ff, 0x4) 11:44:05 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000300)={0x80000001, 0x3, 0x8000}) mount$overlay(0x400000, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000040)='overlay\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB='index=off,workdir=./file1,xino=on,lowerdir=./file0,uid<', @ANYRESDEC=r3, @ANYBLOB=',ob\x00']) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x80, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x50020400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000f78618800fedbdf25010000000c0005002e00000000000000f28250a9f122141d76602583af33fd030210882d364d8027b8fb78e31e290a86c6"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000005) 11:44:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)="dd"}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) setuid(r1) r2 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x3, 0x3, 0x10000, 0x2, 0x151110cc00000000}) [ 215.586115][ T8595] overlayfs: unrecognized mount option "uid<00000000004294967295" or missing value [ 215.593569][ T8596] overlayfs: workdir and upperdir must be separate subtrees [ 215.618457][ T8595] overlayfs: unrecognized mount option "uid<00000000004294967295" or missing value [ 215.659357][ T8604] overlayfs: workdir and upperdir must be separate subtrees 11:44:06 executing program 5: clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) finit_module(r1, &(0x7f0000000040)='md5sum\x00', 0x3) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x4, 0x0, 0x200000, 0x20000004, 0x97, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:44:06 executing program 2: prctl$PR_SET_TSC(0x1a, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffc88) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000001680)="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", 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000001c0)=0x90, 0x4) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) mknod(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e24, @loopback}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x34, 0x3a, 0xe, 0xa, 0x4, 0x81, 0x6, 0x69, 0xffffffffffffffff}) r3 = eventfd(0x0) flistxattr(r3, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) getcwd(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) waitid(0x0, r4, 0x0, 0x40002003, &(0x7f00000004c0)) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:06 executing program 0: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000100)='syz1\x00') r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x200, 0xfe61) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="050300000200000000000100c52cf7c21975e697b02f08066b2b2ff0dac8897c6b11876d886b6621d8d217ccd51cc5471d130a6632a88161a6fd8f24286a07d057c3be25", 0x44, 0x0, 0x0, 0x0) 11:44:06 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x830, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x81) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r0, r0}) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x0, 0x0) 11:44:06 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2000, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000002c0)=""/99, 0x63}, 0x4}, {{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/202, 0xca}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/171, 0xab}], 0x5, &(0x7f0000000780)=""/128, 0x80}, 0x3}, {{&(0x7f0000000800)=@rc, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/107, 0x6b}, {&(0x7f0000000900)=""/207, 0xcf}], 0x2, &(0x7f0000000a40)=""/4096, 0x1000}, 0xfffffffffffffff8}], 0x3, 0x1, &(0x7f0000001b00)) setsockopt$inet_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000100)="d05dd3d23ccae98847b1b833ced52432bccae16b4b979a0b329f8624aa5ab88c29d2a27f667baca84803d36298a0145f7be6c66274cdd9d31c116af5135375e3680ab9bc5a723204eeccdc9863d4ff98328f80c17f70811a45ad5233aaa7eb3356d84b5d471e7d172ecf7cb7d44f315183", 0x71) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000150000000000000000000000010018000000000008001200000003000000000400000000f7ff000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa8}}, 0x0) 11:44:06 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x24010, r0, 0x80000001) mbind(&(0x7f00008ec000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000040)=0x3, 0x8, 0x4) 11:44:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) r2 = shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x6000) mremap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000040)={0x8, "371e8be6d898fb39559b583c37c6d7639c6e02213bf7fb69ba5ecad6b573691a", 0x204, 0x3, 0x3, 0x8, 0x7}) shmdt(r2) [ 216.912855][ T8617] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:44:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600400, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) sync() ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x0, 0x1}}) 11:44:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000140)=0x3) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x31) fcntl$getown(r1, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x4000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) accept$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) [ 217.061226][ T26] audit: type=1400 audit(1553255047.070:53): avc: denied { prog_run } for pid=8615 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 11:44:07 executing program 2: prctl$PR_SET_TSC(0x1a, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffc88) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000001680)="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", 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000001c0)=0x90, 0x4) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) mknod(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e24, @loopback}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x34, 0x3a, 0xe, 0xa, 0x4, 0x81, 0x6, 0x69, 0xffffffffffffffff}) r3 = eventfd(0x0) flistxattr(r3, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000240)=""/246) getcwd(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) waitid(0x0, r4, 0x0, 0x40002003, &(0x7f00000004c0)) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:44:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140f00005a000100000000000000391b18b900bd908d433cdde3ff46000000000000"], 0x14}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x101800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x58, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x158, @rand_addr="4ffa51a70630ab0ace809bfa2c653ab2", 0xc0000000000000}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x6}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={r2, 0x401, 0x5, 0x9}, 0x10) ioctl$TIOCSBRK(r1, 0x5427) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000400)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1050048}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_getneigh={0x58, 0x1e, 0x400, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x4000, 0x2014}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_PORT_SELF={0x1c, 0x19, [@IFLA_PORT_PROFILE={0x10, 0x2, 'vboxnet0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x100000000}]}, @IFLA_AF_SPEC={0x10, 0x1a, [{0x4}, {0x4, 0x1e}, {0x4, 0x2}]}, @IFLA_IFALIASn={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) 11:44:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000040)="585ccbc4ed83b836c1c4474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80040, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000001c0)={0x8, 0x5, 0x3f}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240)) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000140)={&(0x7f0000000580)={'sha3-384\x00'}}) 11:44:07 executing program 1: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'gre0\x02\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) prctl$PR_CAPBSET_READ(0x17, 0xd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000100)='/dev/dmmidi#\x00', r1}, 0x30) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="e3fd7a71add36edf4d997895ff6d9294732136acc1934bc8512e2cc62aa4823408275cc2347d2d34bb58b9eb66105635e5f42c36849d215f476021a1b2b5d96a2035a81f3a7f310c23cbd35ceef8cd18", 0x50}, {&(0x7f00000001c0)="de9ceddf55c58153fb977d01a7539452e4395082704f5526623801de1cdf682b5b1c38575c322ea0a7355145680326ab5b73136b4d93329c9495580bddd261dcb0bb19097a83282b1eb0f4969875ca82", 0x50}, {&(0x7f0000000240)="085e29da60f37ae28f925b68608838483d8b4c1464d19e111640b6ea9d6513be16a38d2f349f885fe6d0ebce8298362d3f18d7da540696478a49f9c0732a0e9d1c7199687da33384886b1e42889b4017a5f3dfbfdaee4fd3f0ba0c14155761e6f9aed0eabb17785af65bb05844e6b8baf8b66a46bf4c963c84f34268e69b0cfdb1dbbc83e7fe908a483fa630218e15f052af8003a1b3cbcd75b06d8056ff86523af0d0b97e14c8c7b38b321faed4333aed03999c7a5a5e0def83d1c6bf56ade84dba78a6255979a2561ddc714218c3c11f1f67", 0xd3}, {&(0x7f0000000080)="66933bcb2f6647e6bda88f5049c0285b50844b960f0956566641940648bf97d64778b0b9744c2e190cb88e37f278848dcafd1199", 0x34}], 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="2000000000004b4b000008000000fe800000000000000000236692747aebb8963034a00edb26ec93a5b7c1170739e86ca2d74a33fc5fca6400648b8fccc7997a31002cd9ce41d97b2a8c27951433eed25fc8e6c2639a5959a32dbdac27179689ad905ca7a21a3b9d12317ac8f1a163a4087280e9f9b19fe8a56d50fefbd65e4438347795f0f6db7721ff3f45bcc921bf5c00000000"], 0x20, 0x800}, 0x4000000) 11:44:07 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x100) socket$key(0xf, 0x3, 0x2) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0xffffffffffffff1e) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x44815) getresuid(0x0, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x80880, &(0x7f0000000300)=ANY=[@ANYBLOB="3629fef78eef60ca1a2c93cbb865f1a2f67dd8e314f3fb4db489ddeb6e550d8d6f47eec1127af22b9a627e312a78027936bc24b44210f21f184a1b8a2022930a3eb9918d6a50b4879d1161154818f4e013c0981ad5d64343a93975e3f5900c2956b03d07f9af7c2c08eaee937a960b27a47f7e205c042efc555d445d305f80ac39a4806d657d52854bbcef7f682986c853bfb92a8abd3dceb7ea23fd0375afa4709900000000000000000000000000000000000000000000000000"]) ioctl$NBD_DISCONNECT(r1, 0xab08) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(r0) unlink(&(0x7f00000002c0)='./bus\x00') kexec_load(0x176, 0x3, &(0x7f0000000440)=[{&(0x7f0000000100)="d78415bdb562cc77b70046436f8e1ff6bd362791b2f92fe50e4a9fa64519db7be25db197f0c4ef154aa49ee956cef61ccca9152c0d6b7326ea4ee3e7394e439266033e2194c10c7de7f9595a1c4bf57840c39002cf12d97b1bec7771aabca7f967b5aa0f98cc5edc806a201d", 0x6c, 0x5, 0x80000001}, {&(0x7f00000003c0)="53b615e01d7c93bc7719c49f43fefc88d6136e1e8391b765bc17df0ed4dab6c335fe15a72661107e2ac377c416426e747b08c17c52ffdf1a0f5c7a716bfb487ac76f4df6cb2ece9ca2777be21e2e79cb5f86a6235718f0f234bc2da1d7574d909ddebf09586be0303757510cb2d375", 0x6f, 0x1, 0x5}, {&(0x7f0000000280)="9ed067fa5637694a509ab8694ef71296ab910d939405316af4dbe1bb512292118f2aa2ed2b", 0x25, 0xfffffffffffffff9, 0x7f}], 0x150000) syz_open_dev$video4linux(0x0, 0x9, 0x224900) sendfile(r1, r1, &(0x7f00000000c0), 0x808100000000) [ 217.772006][ T8676] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 217.789173][ T8671] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF 11:44:07 executing program 3: r0 = epoll_create(0x6) r1 = epoll_create(0x8) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) getrusage(0xffffffffffffffff, &(0x7f00000000c0)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000200) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000c7f000)) r6 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) r7 = accept(r2, &(0x7f0000000000)=@tipc, &(0x7f0000000180)=0x80) connect$x25(r7, &(0x7f00000001c0)={0x9, @remote={[], 0x2}}, 0x12) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) 11:44:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000b00)=@routing, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) r1 = getpgrp(0x0) ptrace$cont(0x27, r1, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x10000, 0x4) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={[], [], @remote}, 0x27}}, [0x3, 0x9, 0x2, 0x800, 0x1b, 0x0, 0x80, 0x101, 0x8000, 0x80000001, 0x1, 0x59, 0x7, 0x2, 0xffffffffffff0001]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r3, 0x86, "e443014e8834fa071b51e8c567037ccfc849ece70e21df5e7d20950df7f71b8e6efc117e6c0257d3d4cbba345b10ef131578362a482da6c7fe07651c2ca3ff1f086725d497eed81c19f93e65e92b30933c1f7a9f54b32fbac7357b17ca3e426b95322f5a1017c5aef7b6fad932db987b3172bf37f25be89d07d2856236a6211bc6af4b9bd9e2"}, &(0x7f00000002c0)=0x8e) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x28000000000000, 0x10000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000380)={r5, 0x8, 0x1, 0x4, 0x3, 0xffffffff, 0x2}) write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0x0, 0x1, {0x0, 0x3}}, 0x20) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x0) 11:44:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001000)={"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"}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0x0, &(0x7f0000001400)="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", 0x1000) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11:44:07 executing program 4: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x123, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='ipddp0\x00', 0x8, 0x10000}) close(r0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f0000000080)=0x5, 0x4) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000140)) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 217.827147][ T8671] FAT-fs (loop5): Filesystem has been set read-only 11:44:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0xffffffffffffff1e) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde8b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92c4d332d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d52243883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0xfffffffffffffd14}, 0x10a9) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x44815) getresuid(0x0, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x80880, &(0x7f0000000300)=ANY=[@ANYBLOB="3629fef78eef60ca1a2c93cbb865f1a2f67dd8e314f3fb4db489ddeb6e550d8d6f47eec1127af22b9a627e312a78027936bc24b44210f21f184a1b8a2022930a3eb9918d6a50b4879d1161154818f4e013c0981ad5d64343a93975e3f5900c2956b03d07f9af7c2c08eaee937a960b27a47f7e205c042efc555d445d305f80ac39a4806d657d52854bbcef7f682986c853bfb92a8abd3dceb7ea23fd0375afa4709900000000000000000000000000000000000000000000000000"]) ioctl$NBD_DISCONNECT(r1, 0xab08) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(r0) unlink(&(0x7f00000002c0)='./bus\x00') kexec_load(0x176, 0x3, &(0x7f0000000440)=[{&(0x7f0000000100)="d78415bdb562cc77b70046436f8e1ff6bd362791b2f92fe50e4a9fa64519db7be25db197f0c4ef154aa49ee956cef61ccca9152c0d6b7326ea4ee3e7394e439266033e2194c10c7de7f9595a1c4bf57840c39002cf12d97b1bec7771aabca7f967b5aa0f98cc5edc806a201d", 0x6c, 0x5, 0x80000001}, {&(0x7f00000003c0)="53b615e01d7c93bc7719c49f43fefc88d6136e1e8391b765bc17df0ed4dab6c335fe15a72661107e2ac377c416426e747b08c17c52ffdf1a0f5c7a716bfb487ac76f4df6cb2ece9ca2777be21e2e79cb5f86a6235718f0f234bc2da1d7574d909ddebf09586be0303757510cb2d375", 0x6f, 0x1, 0x5}, {&(0x7f0000000280)="9ed067fa5637694a509ab8694ef71296ab910d939405316af4dbe1bb512292118f2aa2ed2b", 0x25, 0xfffffffffffffff9, 0x7f}], 0x150000) syz_open_dev$video4linux(0x0, 0x9, 0x224900) sendfile(r1, r1, &(0x7f00000000c0), 0x808100000000) 11:44:08 executing program 4: socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x10, 0x0, 0x0, 0x18}, {0x0, "556c144eb738aed20a341158e866e372e7eb25b109"}}, 0x0, 0x2f}, 0x20) 11:44:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000500000000000800030000000000"], 0x24}}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x10000, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14c, r3, 0x202, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5bc3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffb1b5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x5}, 0x14) 11:44:08 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x100) socket$key(0xf, 0x3, 0x2) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 218.162754][ T8699] syz-executor.0 (8699) used greatest stack depth: 23672 bytes left 11:44:08 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x100) socket$key(0xf, 0x3, 0x2) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:08 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0xffffffffffffffcc) 11:44:08 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x20000, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r1, 0x1, 0xffffffffffffffff, r1}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x100, 0x0) fcntl$dupfd(r0, 0x0, r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10080, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x80) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0xfffffdac, 0x0}, 0x10001) 11:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x780f, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000200)={{0x3, @addr=0x8}, 0x8, 0x100000000, 0x7f}) get_mempolicy(&(0x7f0000000240), &(0x7f0000000280), 0xffffffffffffffe0, &(0x7f0000ffa000/0x3000)=nil, 0x1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2a9, 0x10100) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f00000003c0)="55632236b6ce8147ea95e0d22828654965cf661401682f29ce86b9dcfff32454ced730f3a98571618c81784afddd53e379af96ec9c04ca086d30599209ccb4efc8d5c0054e35ad0f3250c547166fe78f8c6c0ddc8857fad45b30e8e1e406af0697c8057f1faf81459d7eb67693697ee2257c25d90e19ac9fe5bd557770e25bc947e11fb46c13e6cabc2e83443499e5f66eb7d45615601276d7e01800ef4e2f915a08cd9b6d3452483fe2fe765bf7640f333eb4646ad66667125cc459aa8df67ef51a4346") 11:44:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x10000001) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000180), 0x4) 11:44:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[]}}, 0x0) 11:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x780f, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000200)={{0x3, @addr=0x8}, 0x8, 0x100000000, 0x7f}) get_mempolicy(&(0x7f0000000240), &(0x7f0000000280), 0xffffffffffffffe0, &(0x7f0000ffa000/0x3000)=nil, 0x1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2a9, 0x10100) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f00000003c0)="55632236b6ce8147ea95e0d22828654965cf661401682f29ce86b9dcfff32454ced730f3a98571618c81784afddd53e379af96ec9c04ca086d30599209ccb4efc8d5c0054e35ad0f3250c547166fe78f8c6c0ddc8857fad45b30e8e1e406af0697c8057f1faf81459d7eb67693697ee2257c25d90e19ac9fe5bd557770e25bc947e11fb46c13e6cabc2e83443499e5f66eb7d45615601276d7e01800ef4e2f915a08cd9b6d3452483fe2fe765bf7640f333eb4646ad66667125cc459aa8df67ef51a4346") [ 218.833920][ T8727] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:44:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r2, 0x8}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @local}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffd8, &(0x7f00000000c0)={&(0x7f0000000280)=@newneigh={0x4c, 0x1c, 0x400, 0x70bd25, 0x25dfdbff, {0x1e, 0x0, 0x0, r3, 0x51, 0x2, 0xf}, [@NDA_MASTER={0x8, 0x9, 0x8}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_IFINDEX={0x8, 0x8, r4}, @NDA_DST_MAC={0xc}]}, 0x4c}}, 0x0) 11:44:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000000)=0x7) splice(r0, 0x0, r1, 0x0, 0x1000000000000003, 0x0) 11:44:09 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$apparmor_current(r0, &(0x7f0000000340)=@hat={'changehat ', 0x0, 0x5e, ['/dev/sg#\x00', 'posix_acl_accesseth1eth1(,vmnet1eth1\'\x00']}, 0x4c) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000100)=""/191, 0xbf}, &(0x7f0000000000), 0x23}, 0x20) 11:44:09 executing program 1: fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0xff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22}, {0x2, 0x4e1d, @remote}, {0x2, 0x4e25, @loopback}, 0x45, 0x8, 0x5, 0x46a, 0x0, 0x0, 0x0, 0x2000000000003}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80, 0x210200) bind$ax25(r1, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc0\x00', 0x50000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in=@broadcast}}, {{@in6=@local}, 0x0, @in=@multicast2}}, 0x0) setxattr$security_capability(&(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000c00)={'filter\x00'}, &(0x7f0000000480)=0x78) creat(&(0x7f0000000140)='./file0/file0\x00', 0x100) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f00000003c0)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6, 0xffffffff) write$nbd(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="6744669801000000040002000400000087a7fd4d47c2de5a2d1d482707008cdd814de0bb"], 0x1) mprotect(&(0x7f00003a3000/0x3000)=nil, 0x3000, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) pipe2(&(0x7f0000000400), 0x4000) [ 219.093015][ T8717] syz-executor.5 (8717) used greatest stack depth: 23000 bytes left [ 219.129828][ T26] audit: type=1400 audit(1553255049.160:54): avc: denied { map } for pid=8787 comm="syz-executor.3" path="/dev/sg0" dev="devtmpfs" ino=17788 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:scsi_generic_device_t:s0 tclass=chr_file permissive=1 11:44:09 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x100) socket$key(0xf, 0x3, 0x2) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = accept(r0, &(0x7f0000000000)=@pppol2tpin6, &(0x7f0000000080)=0x80) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x19, "42a3ebcdfc8b84940aca0261a47c73e00f787450ddbeea9673"}, &(0x7f0000000100)=0x3d) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000003340)=@default) 11:44:09 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) ftruncate(r0, 0x80000000) 11:44:09 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x9, 0x40) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r3 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x3f, 0x20, r2, 0x0, r3, 0x0, 0x400, 0x5}) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xbb?\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xc4\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) 11:44:09 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101800, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) linkat(r0, &(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1400) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) socket$packet(0x11, 0x3, 0x300) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 11:44:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) 11:44:09 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$TIOCCONS(r0, 0x541d) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x48}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="580000000000000014010000030000000000000000000000000000000000000000c700000000000000000000000000000011cb93e16db7ee951a9a1a0a00000000000000000000000000000000000000000000000000000000"], 0x58}, 0x0) 11:44:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) write(r0, &(0x7f0000000240)="2300000014000707030f00c0f635c63f280f550b00120f0a0811000100f5fe0012ff00", 0x23) [ 219.784622][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 219.790682][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:44:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x400000008, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:44:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0/file0\x00', 0x0) syz_open_dev$mice(0x0, 0x0, 0x410201) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) setreuid(0x0, 0x0) memfd_create(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 11:44:10 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x100) socket$key(0xf, 0x3, 0x2) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 220.344591][ T8853] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:44:11 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e000000260005000000e0713c444d000300fc001000024003000000053582c137153e370900040001ff0000d1bd", 0x2e}], 0x1}, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xf}}, 0x37) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x2, {0x8e9, 0x1, "19806a4882850a7f6075ef022132a775f453bb9d1cb000b8f0b2b4f9e8be0a309c4425c73703f123f7808588edf8f5b6da4d11cdb0b9960b29b765c54edf11c9621d518a811401fd3547d9ef0cf874e50e756a59e41310e2ab194ff06852d3e7108a16d6e9278564abd82e63fc0fcb221d294552f2341909292360f3f30ee1131a1d202513c4258e4ba4a772a39c3acee6e5f81ff2e2fd82e900d6a638adb23bc1a374b568318e4efccb35fa298df34b2a7aed7cd67df1dd04244a4a8c1cf4e9c71a0f00a5e7df542c55c8a792ed359e6b71f64a8591620e09dc03e8b8e39dcec6602996a60a246d56e2392c46bb896f11f14d40964c856d92e6e5e102691524", 0x1a, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1}, r2}}, 0x128) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x202) 11:44:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x4000003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) accept4$tipc(r2, &(0x7f0000000040)=@name, &(0x7f0000000100)=0x10, 0x80000) ioctl$SG_SCSI_RESET(r0, 0x2289, 0x713000) 11:44:11 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5144, 0x4000) 11:44:11 executing program 3: r0 = socket$inet6(0xa, 0xa00000000001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="7b0000001540bb26f39d348920cb21b338b84f800736ce9eb1d117ac51904cdfe9a99eea8652b5866eb818766a2b1d508c03cbffda08a6bd7af1e86f15e7aa0745708454c2eb4ffc48272d907624228f7e21d5863e232a3d35558f68a7f7cbf197e191ff3c1f615503e674dac7c44e8adefe"], &(0x7f00000000c0)=0x83) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x2, 0x1, 0x1, 0x3ecd707a, 0x6, 0x400, 0x9, 0x8b, r1}, &(0x7f0000000140)=0x20) 11:44:11 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x12\xd5>oJ\x02u\x9b\x94a\xac', 0x0) fallocate(r1, 0x0, 0x0, 0xbc47) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) 11:44:11 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x100) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x6bea, 0x4) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1c7c) 11:44:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000000c0)={0x1, 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100040, 0x0, 0x0, 0xfffffffffffffffd}, {0x80000006}]}, 0x10) 11:44:11 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x20, 0x400000) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000600)) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xbaf, 0x7, 0x7ff, 0x8000, 0x0, 0x79c, 0x2041, 0x6, 0x8, 0x7, 0x8000, 0x7, 0x81, 0x10000, 0x2, 0x8, 0x7, 0x4060, 0xffffffff, 0x400, 0x7, 0x1f, 0x3, 0x4, 0x1000, 0x3000000, 0x2, 0x0, 0x6, 0x7fffffff, 0x3, 0xff, 0x1, 0x20, 0x6, 0xfff, 0x0, 0x1, 0x4, @perf_config_ext={0x100, 0x4}, 0x4800, 0x945, 0x3ea4, 0x6, 0x8, 0x400, 0xbc}, r0, 0xe, r1, 0x2) ptrace$getregs(0xe, r0, 0x6, &(0x7f0000000040)=""/103) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) prctl$PR_SET_TSC(0x1a, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x6, &(0x7f0000000180)=0x1000000000000204, 0x19c) sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="e1c8", 0x2}, {&(0x7f0000000280)="8e5f01585cfeddaeb64d3d551ec373668fb364906f9f80ee07c1d83dabd89e4fcd6965c74742bebddcd2591f315760f5e86ab7ae7974a9488c644fe9b0d0e869bb9fe328243d906d5bb86e1e7a0774c201a33d83ac9ae082aebae91ec59dcd22bc54e2eaf22035937f3b361bc71a3c2a595afa99ffa9a0cb691102a6c82f55b9a25c1b2ab7dbad5111e60655", 0x8c}, {&(0x7f0000000340)="8359c81c1ba6726e4e22480fbbc74e8319437f5496a773b995dabfc3202251c8ab9718ea3a95bd20c907cf471d96fff09c40dcd6eb02e1307b2dc64327f3628200c97c6525f4d2f3a6adfe06893881c7e04985d841ace44d2797fcf2830286fa53897e22b3cd137bc19620dd5efc9295e6730e63d0a9087a34fc1db42227619fed1480d2556f622dbcae9e3f272639c2e5e9f6eca6b5509d6e40ce1ede853f67945319e9540efbfd15667a2a06e1e8a85e2cd486eb622735a6c8842c76c304b1952e52586d4f6ac24f5db40afc97b70834db6798ef87c524b17de7417872884e43", 0xe1}, {&(0x7f0000000440)="15a80b1429997217c4d42a1571439c6378f8c3a4a20d49e4cfa6790857ce032030247e2c4152d97ed49db2eefb51cb836abc92d4a3caaf27c7a8e8a2c2d7b5e01b0dcec6ff0811e3cb0cd2f1a762c2d82b142e94d8aa967ead5d5a7713df5474d992743fdac8251bc8c5bcd953d4c29fce02addf80518e9e273367266d8032d6c1", 0x81}, {&(0x7f0000000500)="cd6d67ef9611dadc6d7c54c28ba1bf0bfd1864f6865ffe", 0x17}], 0x5, 0x0, 0x0, 0x40}, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000640)={'mangle\x00'}, &(0x7f00000006c0)=0x54) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0)) 11:44:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = dup2(r0, 0xffffffffffffffff) stat(0x0, 0x0) write$P9_RGETATTR(r2, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200f700", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000400)={0x7fffffff, 0x202, 0x7}, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) semget$private(0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) write$selinux_validatetrans(r3, &(0x7f00000000c0)={'system_u:object_r:hwdata_t:s0', 0x20, 'system_u:object_r:fsadm_exec_t:s0', 0x20, 0x333, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x6c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000c00)) r4 = fcntl$getown(r1, 0x9) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x7918c8795fe9f6de, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) waitid(0x0, r4, &(0x7f0000000200), 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:44:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x100) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x6bea, 0x4) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1c7c) [ 221.831622][ T8872] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:44:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x3, 0x2, 0x8000000001, 0xfffffffffffffffc, 0xffffffffffffff9c, 0xfffffffffffffffc}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x20000000000002, 0x77ffff, 0x0, 0x1001ffffffc, 0x0, 0x4}, 0x2c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x23, 0x7, 0x2, {{0x16, 'selinuxvboxnet0&vmnet0'}, 0x6}}, 0x23) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x4085, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x4, 0x82f}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 11:44:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000007c0)='/dev/dri/card#\x00', 0x1f, 0x0) r1 = dup(r0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/247, 0xf7}], 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x401, @rand_addr="2c735625ec5011d81bad0484c85767c8", 0x3ff}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r2, 0xf44, 0x6}, 0x8) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000380)={@initdev, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', r3}) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000180)="66f30f06f466b9800000c00f326635000400000f300f01ca0f22920f01c866f0829fb50000360fc71e0000f083b60000d8de880800", 0x35}], 0x1, 0x49, &(0x7f0000000340)=[@efer={0x2, 0x100}], 0x1) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000000)) 11:44:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x100) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x6bea, 0x4) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1c7c) 11:44:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) dup2(r0, r1) 11:44:12 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:12 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x6f1f, 0x40000008001}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 11:44:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x100) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x6bea, 0x4) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1c7c) 11:44:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x100) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x6bea, 0x4) [ 222.705266][ T26] audit: type=1400 audit(1553255052.740:55): avc: denied { map } for pid=8931 comm="syz-executor.3" path="/dev/binder0" dev="devtmpfs" ino=17931 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 222.783862][ T8946] binder: 8931:8946 unknown command 0 [ 222.792127][ T26] audit: type=1400 audit(1553255052.760:56): avc: denied { set_context_mgr } for pid=8931 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 222.823462][ T8946] binder: 8931:8946 ioctl c0306201 20000200 returned -22 [ 222.867399][ T26] audit: type=1400 audit(1553255052.810:57): avc: denied { call } for pid=8931 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 11:44:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x100) 11:44:13 executing program 1: r0 = semget(0x1, 0x0, 0x200) semctl$IPC_INFO(r0, 0x7, 0x3, &(0x7f0000000000)=""/63) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x81, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) time(&(0x7f0000000340)) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, &(0x7f0000000400)=0x80) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000540)={0x7fffffff, 0x0, 0x6df, 0x3}) write$cgroup_subtree(r1, &(0x7f0000000780)={[{0x2f, 'memory'}, {0x0, 'rdma'}, {0x2d, 'pids'}, {0x2f, 'pids'}, {0x0, 'io'}, {0x2d, 'rdma'}]}, 0x24) 11:44:13 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:44:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:13 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000080)) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2000000000e00}, 0x98) 11:44:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:13 executing program 0: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x97dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) pause() read(r1, &(0x7f00000000c0)=""/250, 0xfa) 11:44:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:13 executing program 1: [ 223.641615][ T2998] binder: undelivered transaction 2, process died. [ 223.653781][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 223.723658][ T9017] binder: 9006:9017 unknown command 0 [ 223.740282][ T9017] binder: 9006:9017 ioctl c0306201 20000200 returned -22 11:44:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:44:14 executing program 1: 11:44:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:14 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:14 executing program 1: 11:44:14 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 224.425532][ T8306] binder: undelivered TRANSACTION_COMPLETE 11:44:14 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:14 executing program 1: 11:44:14 executing program 0: 11:44:14 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 224.484608][ T2998] binder: undelivered transaction 4, process died. 11:44:14 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 224.637926][ T9064] binder: 9057:9064 unknown command 0 [ 224.643358][ T9064] binder: 9057:9064 ioctl c0306201 20000200 returned -22 11:44:14 executing program 1: 11:44:14 executing program 0: 11:44:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:44:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:14 executing program 0: 11:44:14 executing program 1: [ 224.877513][ T9065] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:44:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:15 executing program 0: 11:44:15 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:15 executing program 1: [ 225.325701][ T9100] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:44:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:15 executing program 0: [ 225.373352][ T8306] binder: undelivered TRANSACTION_COMPLETE [ 225.445324][ T2998] binder: undelivered transaction 6, process died. [ 225.507419][ T9119] binder: 9115:9119 unknown command 0 [ 225.516229][ T9119] binder: 9115:9119 ioctl c0306201 20000200 returned -22 11:44:15 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:44:15 executing program 1: 11:44:15 executing program 0: 11:44:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:15 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:15 executing program 0: 11:44:15 executing program 1: 11:44:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:16 executing program 0: [ 226.098232][ T9147] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:44:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:16 executing program 1: 11:44:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 226.247569][ T8306] binder: undelivered TRANSACTION_COMPLETE [ 226.299294][ T9164] binder: 9163:9164 unknown command 0 [ 226.308959][ T2998] binder: undelivered transaction 8, process died. [ 226.322039][ T9164] binder: 9163:9164 ioctl c0306201 20000200 returned -22 [ 226.347101][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 226.376531][ T8306] binder: undelivered transaction 10, process died. 11:44:16 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) 11:44:16 executing program 0: 11:44:16 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:16 executing program 1: 11:44:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:16 executing program 0: [ 226.725055][ T9175] binder: 9168:9175 unknown command 0 11:44:16 executing program 1: 11:44:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 226.769850][ T9175] binder: 9168:9175 ioctl c0306201 20000200 returned -22 [ 226.787906][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 226.804676][ T2998] binder: undelivered transaction 12, process died. 11:44:17 executing program 0: [ 226.920701][ T9195] binder: 9192:9195 unknown command 0 [ 226.950218][ T9195] binder: 9192:9195 ioctl c0306201 20000200 returned -22 11:44:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 226.978180][ T8306] binder: undelivered TRANSACTION_COMPLETE [ 227.030905][ T8306] binder: undelivered transaction 14, process died. 11:44:17 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) 11:44:17 executing program 1: 11:44:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x00\x00@G\xd0\x06\x00\x04\x00', @ifru_names='bond_slave_1\x00\x00\x03/'}) 11:44:17 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:17 executing program 1: stat(0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~IyM\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xecM.\x8dD<\x82\xfc45\xbe\xd4\xde]i@\x9ax\x1c\x86>\x0f\xd8\xa6\xf8h\x92[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\x1a,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xcf\x81i0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4Nc\xe1\x16\n\xf1\xac\xf4]\xb1\xcd\xf4\xbc\xbb\xed\xe7\x95\xdby\x8ca\xdba\xe2?') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2101}) [ 227.664620][ T9210] bond0: Releasing backup interface bond_slave_1 11:44:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 227.740519][ T9230] binder: 9212:9230 unknown command 0 [ 227.756817][ T9230] binder: 9212:9230 ioctl c0306201 20000200 returned -22 11:44:17 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:17 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:18 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 228.387389][ T9264] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:44:18 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) 11:44:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x101a, r1, 0x0) fanotify_mark(r2, 0x80, 0x0, 0xffffffffffffffff, 0x0) 11:44:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 11:44:18 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 11:44:18 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 228.434736][ T8306] binder: undelivered TRANSACTION_COMPLETE [ 228.495251][ T8306] binder: undelivered transaction 16, process died. 11:44:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 228.536862][ T9272] bond0: Releasing backup interface bond_slave_1 11:44:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x101a, r1, 0x0) fanotify_mark(r2, 0x80, 0x0, 0xffffffffffffffff, 0x0) [ 228.656553][ T9294] binder: 9283:9294 unknown command 0 [ 228.674046][ T9294] binder: 9283:9294 ioctl c0306201 20000200 returned -22 11:44:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 11:44:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 11:44:18 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) [ 229.059513][ T26] audit: type=1400 audit(1553255059.090:58): avc: denied { map } for pid=9315 comm="syz-executor.1" path="/dev/dsp" dev="devtmpfs" ino=17972 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 11:44:19 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)) tkill(r15, 0x15) 11:44:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 11:44:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:19 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) 11:44:19 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 229.364622][ T2998] binder: undelivered TRANSACTION_COMPLETE 11:44:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) [ 229.437111][ T2998] binder: undelivered transaction 18, process died. 11:44:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) [ 229.524955][ T9353] binder: 9344:9353 unknown command 0 [ 229.541879][ T9353] binder: 9344:9353 ioctl c0306201 20000200 returned -22 11:44:19 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:19 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:20 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 230.054140][ T9369] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:44:20 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 230.256636][ T8306] binder: undelivered TRANSACTION_COMPLETE [ 230.314713][ T2998] binder: undelivered transaction 20, process died. 11:44:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:44:28 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:28 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:28 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:28 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)) tkill(r15, 0x15) [ 238.616046][ T9435] binder: 9424:9435 transaction failed 29189/-22, size 0-0 line 2994 [ 238.862324][ T9428] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 238.895788][ T9422] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:44:29 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:29 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:29 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:29 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 239.354921][ T2998] binder: undelivered TRANSACTION_ERROR: 29189 11:44:29 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 239.529815][ T9500] binder: 9496:9500 transaction failed 29189/-22, size 0-0 line 2994 [ 239.931972][ T9507] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 240.271489][ T2998] binder: undelivered TRANSACTION_ERROR: 29189 11:44:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:44:36 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:36 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)) tkill(r15, 0x15) [ 246.849071][ T9549] binder: 9539:9549 transaction failed 29189/-22, size 0-0 line 2994 11:44:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:37 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:37 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 247.578319][ T2998] binder: undelivered TRANSACTION_ERROR: 29189 11:44:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 247.671844][ T9587] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:44:37 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 247.770362][ T9615] binder_alloc: 9609: binder_alloc_buf, no vma [ 247.779859][ T9615] binder: 9609:9615 transaction failed 29189/-3, size 0-0 line 3147 [ 248.544594][ T8306] binder: undelivered TRANSACTION_ERROR: 29189 11:44:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:44:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:45 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:45 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}}, 0x0) tkill(r15, 0x15) [ 255.117231][ T9654] binder_alloc: 9641: binder_alloc_buf, no vma [ 255.126332][ T9654] binder: 9641:9654 transaction failed 29189/-3, size 0-0 line 3147 11:44:45 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 255.276147][ T9664] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:44:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 255.351606][ T9673] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:44:45 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:45 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 255.732608][ T9698] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:44:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 255.914771][ T2998] binder: undelivered TRANSACTION_ERROR: 29189 [ 256.012598][ T9727] binder_alloc: 9720: binder_alloc_buf, no vma [ 256.025386][ T9727] binder: 9720:9727 transaction failed 29189/-3, size 0-0 line 3147 [ 256.795456][ T3483] binder: undelivered TRANSACTION_ERROR: 29189 11:44:53 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) 11:44:53 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:53 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:53 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:44:53 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}}, 0x0) tkill(r15, 0x15) [ 263.338605][ T9758] binder: 9748:9758 unknown command 0 [ 263.344021][ T9758] binder: 9748:9758 ioctl c0306201 20000200 returned -22 11:44:53 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:53 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:53 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 264.084533][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 264.091153][ T9791] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:44:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 264.142532][ T9789] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 264.204639][ T2998] binder: undelivered transaction 31, process died. 11:44:54 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:44:54 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 264.336860][ T9825] binder: 9820:9825 unknown command 0 [ 264.373466][ T9825] binder: 9820:9825 ioctl c0306201 20000200 returned -22 [ 264.580893][ T9837] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 265.064751][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 265.104532][ T2998] binder: undelivered transaction 33, process died. 11:45:02 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) 11:45:02 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:02 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:02 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}}, 0x0) tkill(r15, 0x15) [ 272.102483][ T9867] binder: 9852:9867 unknown command 0 [ 272.111408][ T9867] binder: 9852:9867 ioctl c0306201 20000200 returned -22 11:45:02 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:02 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:02 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:02 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 272.835307][ T3483] binder: undelivered TRANSACTION_COMPLETE [ 272.944920][ T3483] binder: undelivered transaction 35, process died. [ 272.997664][ T9938] binder: 9932:9938 unknown command 0 [ 273.009222][ T9938] binder: 9932:9938 ioctl c0306201 20000200 returned -22 11:45:03 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 273.218274][ T9927] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 273.509007][ T9951] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 273.804643][ T2998] binder: undelivered transaction 37, process died. [ 273.811311][ T2998] binder: undelivered TRANSACTION_COMPLETE 11:45:10 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) 11:45:10 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:10 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:10 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:10 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 280.864952][ T9981] binder: 9969:9981 unknown command 0 [ 280.874663][ T9981] binder: 9969:9981 ioctl c0306201 20000200 returned -22 11:45:11 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:11 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:11 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 281.597057][ T3483] binder: undelivered TRANSACTION_COMPLETE [ 281.654823][ T3483] binder: undelivered transaction 39, process died. 11:45:11 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:11 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 281.805233][T10050] binder: 10038:10050 unknown command 0 [ 281.826292][T10050] binder: 10038:10050 ioctl c0306201 20000200 returned -22 [ 282.107732][T10039] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 282.264206][T10048] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 282.584650][ T3483] binder: undelivered transaction 41, process died. [ 282.591392][ T3483] binder: undelivered TRANSACTION_COMPLETE 11:45:19 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:19 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:19 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:19 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:19 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 289.602497][T10101] binder: 10093:10101 transaction failed 29189/-22, size 0-0 line 2994 11:45:20 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:20 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:20 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:20 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 290.354622][ T3483] binder: undelivered TRANSACTION_ERROR: 29189 11:45:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:20 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) ioctl$int_in(r0, 0x280081000005001, 0x0) [ 290.414483][T10153] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 290.470810][T10137] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 290.559578][T10173] binder: 10162:10173 transaction failed 29189/-22, size 0-0 line 2994 11:45:20 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:20 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:20 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 291.010585][T10184] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 291.164741][T10179] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:45:21 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:21 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 291.294593][ T3483] binder: undelivered TRANSACTION_ERROR: 29189 11:45:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:22 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:22 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:22 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:22 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 292.808440][T10251] binder: 10234:10251 transaction failed 29189/-22, size 0-0 line 2994 11:45:23 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 293.185334][T10245] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:45:23 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:23 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 293.302944][T10272] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:45:23 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:23 executing program 1: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x280081000005001, 0x0) 11:45:23 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 293.564398][ T2998] binder: undelivered TRANSACTION_ERROR: 29189 11:45:25 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:26 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:26 executing program 1: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x280081000005001, 0x0) 11:45:26 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:26 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:26 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:26 executing program 1: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x280081000005001, 0x0) 11:45:26 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 296.145231][T10335] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:45:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:26 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 296.251522][T10338] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:45:26 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:26 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:26 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:26 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:26 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:26 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:26 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:27 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:27 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:27 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:27 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:27 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:27 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:27 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:27 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:27 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:27 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(0x0, 0x15) 11:45:27 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:27 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:28 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(0x0, 0x15) 11:45:28 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) [ 298.399064][T10497] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:45:28 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:28 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(0x0, 0x15) 11:45:28 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:28 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:28 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:28 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:29 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:29 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:29 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:29 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:29 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:29 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:29 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:29 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:30 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:30 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:30 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:30 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340), 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:30 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:30 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:30 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340), 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:30 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:30 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:30 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340), 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:30 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 300.686302][T10706] binder: 10701:10706 unknown command 0 [ 300.691983][T10706] binder: 10701:10706 ioctl c0306201 20000200 returned -22 11:45:30 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:30 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r12 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r13}}, 0x0) tkill(r12, 0x15) 11:45:31 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 301.026156][T10730] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:45:31 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r12 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r13}}, 0x0) tkill(r12, 0x15) 11:45:31 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:31 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r12 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r13}}, 0x0) tkill(r12, 0x15) 11:45:31 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 301.314942][T10748] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 301.429435][ T3483] binder: undelivered TRANSACTION_COMPLETE 11:45:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:31 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:31 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:31 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00'}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 301.534860][ T2998] binder: undelivered transaction 46, process died. [ 301.638131][T10782] binder: 10777:10782 unknown command 0 [ 301.671028][T10782] binder: 10777:10782 ioctl c0306201 20000200 returned -22 11:45:31 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:31 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00'}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:31 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00'}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 301.938554][T10776] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:45:32 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r10}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r11 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r12}}, 0x0) tkill(r11, 0x15) 11:45:32 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 302.118508][T10807] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:45:32 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:32 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:32 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r10}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r11 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r12}}, 0x0) tkill(r11, 0x15) 11:45:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x10, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) [ 302.384810][ T3483] binder: undelivered TRANSACTION_COMPLETE 11:45:32 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r10}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r11 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r12}}, 0x0) tkill(r11, 0x15) [ 302.489759][ T3483] binder: undelivered transaction 48, process died. [ 302.576173][T10842] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 302.583896][T10862] binder: 10846:10862 unknown command 0 [ 302.598073][T10862] binder: 10846:10862 ioctl c0306201 20000200 returned -22 11:45:32 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:32 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00'}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:32 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:32 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:32 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00'}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00'}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:33 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:33 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={0x0, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:33 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:33 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x10, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) [ 303.314667][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 303.375088][ T2998] binder: undelivered transaction 50, process died. 11:45:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={0x0, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 303.539552][T10939] binder: 10930:10939 unknown command 0 [ 303.549945][T10939] binder: 10930:10939 ioctl c0306201 20000200 returned -22 11:45:33 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={0x0, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:33 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:33 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:34 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:34 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:34 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x10, r0, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 304.294572][ T3483] binder: undelivered TRANSACTION_COMPLETE [ 304.354596][ T2998] binder: undelivered transaction 52, process died. 11:45:34 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:34 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 304.563749][T11014] binder: 11003:11014 unknown command 0 [ 304.581273][T11014] binder: 11003:11014 ioctl c0306201 20000200 returned -22 11:45:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, 0xffffffffffffffff, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:34 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, 0xffffffffffffffff, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:34 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 304.839826][T11033] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:45:35 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, 0xffffffffffffffff, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 305.178214][T11040] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:45:35 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 305.288424][T11067] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 305.299960][ T2998] binder: undelivered TRANSACTION_COMPLETE 11:45:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 305.414907][ T3483] binder: undelivered transaction 54, process died. 11:45:35 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:35 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:35 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 305.553654][T11091] binder: 11087:11091 unknown command 0 [ 305.560592][T11091] binder: 11087:11091 ioctl c0306201 20000200 returned -22 11:45:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:36 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:36 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 306.276165][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 306.356538][ T2998] binder: undelivered transaction 56, process died. 11:45:36 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 306.495290][T11168] binder: 11159:11168 unknown command 0 [ 306.503674][T11134] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 306.515042][T11168] binder: 11159:11168 ioctl c0306201 20000200 returned -22 [ 306.518809][T11128] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:45:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:36 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:37 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:37 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 307.108972][T11186] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 307.124825][T11200] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:45:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x280081000005001, 0x0) 11:45:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 307.215129][ T3483] binder: undelivered TRANSACTION_COMPLETE 11:45:37 executing program 4: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 307.324584][ T2998] binder: undelivered transaction 58, process died. 11:45:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:37 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:37 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 307.462374][T11240] binder: 11229:11240 unknown command 0 [ 307.501166][T11240] binder: 11229:11240 ioctl c0306201 20000200 returned -22 11:45:37 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(0xffffffffffffffff, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:37 executing program 4: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 307.659721][T11244] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:45:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 307.838908][T11251] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:45:37 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(0xffffffffffffffff, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:38 executing program 4: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 308.158098][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 308.205337][ T3483] binder: undelivered transaction 60, process died. 11:45:38 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x280081000005001, 0x0) 11:45:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(0xffffffffffffffff, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:38 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 308.407146][T11302] binder: 11300:11302 unknown command 0 [ 308.425780][T11302] binder: 11300:11302 ioctl c0306201 20000200 returned -22 11:45:38 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:38 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(0x0, 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:38 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:39 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 309.085851][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 309.154737][ T3483] binder: undelivered transaction 62, process died. [ 309.227176][T11368] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 11:45:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(0x0, 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:47 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x280081000005001, 0x0) 11:45:47 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:47 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 317.691349][T11427] binder: 11408:11427 unknown command 0 [ 317.704315][T11427] binder: 11408:11427 ioctl c0306201 20000200 returned -22 11:45:47 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:48 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:48 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(0x0, 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:48 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:48 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:48 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 318.414546][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 318.489022][T11482] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 318.496820][ T2998] binder: undelivered transaction 64, process died. [ 318.593647][T11497] binder: 11490:11497 unknown command 0 [ 318.620483][T11497] binder: 11490:11497 ioctl c0306201 20000200 returned -22 [ 319.337705][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 319.394601][ T3483] binder: undelivered transaction 66, process died. 11:45:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x280081000005001, 0x0) 11:45:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:45:56 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:56 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:56 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:45:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 326.440655][T11526] binder: 11516:11526 unknown command 0 [ 326.448941][T11526] binder: 11516:11526 ioctl c0306201 20000200 returned -22 11:45:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 326.663070][T11517] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 11:45:56 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:56 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:45:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r4, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r4, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:45:57 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 327.189724][ T2998] binder: undelivered TRANSACTION_COMPLETE [ 327.274814][ T3483] binder: undelivered transaction 68, process died. 11:46:05 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x0, 0x0) 11:46:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r4, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r4, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:46:05 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:46:05 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:05 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 335.238112][T11617] binder_alloc: 11597: binder_alloc_buf, no vma [ 335.244594][T11617] binder: 11597:11617 transaction failed 29189/-3, size 0-0 line 3147 11:46:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r4, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r4, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:46:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)) r2 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r3, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000001b00)={r5}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r3, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r6, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r8, r6, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r9}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r6, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r10, r11, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r12}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r7, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r4, 0x6) r13 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="2a0dd28ff67b5472ce00000000680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040264a156a74d7bca8b4cad7fbd6deae8168ee360af7caa030010b91c67fa4db2af82bba8e5cf7e61d8020000010400000000000000c5bce247edb1ee731360caf1cb76d39717b92f2b1711efda5a822141e03211af30f9080000633460b4ff16a5c1104cfffffff919bb06d320751add33a476f491082198e53c0900000000000000d3c31d18fe11fe9e8abb026c626aba249ea2798778857e41695233c8bb71056fd1fa304a0d1ca0f47f7420ac302da8c007c5922f10a65f94af53128064c667c9202be8d3f21f13573ac9c665ef37b621b702b45a7dc16378c458926dfd632e457ec511c457f5cb296a79ce2fec5ef252e97558fba5dd80bc0566e1ffe3050200000000000000af184ff1ac9707bd7515c3f6a4386d5ea05fd956f99548316a0621c2b5f67a580e90d2c5e1857b1c1d25643a1eef1e5060279027ad22a8305d3524c1ed70bab708b4eb381f185950c63ee44a01280fa21762f7734d6c71fe21821544a3aab78accfd5972960975cc27bd01fef462ee412324093250022044caf77535241370dafc9ec50341206c1f576a4e48f9aa003ed7885982d7c93d1db30107da43f8090bffbe27c337c018c0c738b3e3e40b5d96f017af929dbcc5e5b5ae8c6369efb6d93fa5ec5b0e2c3cc67a72a0e220be245343fe327ae2bfc9ee6377f1cb1f483ad3b6b15a6febf1f3677477c268a2cb39d1f39cd62149a2f2b762f9c3d98d3028e0cc828e572aac7419a12602800000007281ddc89812d7a7dec3b385de0631e68e4b173c58c7a4c6461711d5d625b6047016bcc1b5d6020f44209ded2cde998f0118373d256745f795f65840dba4a2d0e0529e6a410c532f2d0b8af26abf824289856632bbca55e04165feecefab584e0c7fd4afe93e0976f864940f415b70bfb1fe6233a8082271b2b98e6130ff487977657b847ba6af88ec67d24eba205dc732a377372e736197e63c6d276d7f593ef47118cec5d04db42a03fc033f9e8a016915a3c9f6b6a0a266348edc3cbed9b90eea515aa99209972b30e4c2fbfecbd59c5efef77c4e7941f312b5054c55a4c400000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r14}}, 0x0) tkill(r13, 0x15) 11:46:05 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 335.545291][T11600] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:46:05 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:05 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)) r2 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r3, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000001b00)={r5}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r3, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r6, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r8, r6, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r9}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r6, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r10, r11, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r12}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r7, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r4, 0x6) r13 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r14}}, 0x0) tkill(r13, 0x15) 11:46:05 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 336.008552][ T3483] binder: undelivered TRANSACTION_ERROR: 29189 [ 336.112021][T11667] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:46:14 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x0, 0x0) 11:46:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)) r2 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r3, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000001b00)={r5}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r3, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r6, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r8, r6, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r9}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r6, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r10, r11, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r12}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r7, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r4, 0x6) r13 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r14}}, 0x0) tkill(r13, 0x15) 11:46:14 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', 0x0, 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:46:14 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:14 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 344.516473][T11705] binder_alloc: 11691: binder_alloc_buf, no vma [ 344.538885][T11705] binder: 11691:11705 transaction failed 29189/-3, size 0-0 line 3147 11:46:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:46:14 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:46:14 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', 0x0, 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:15 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 345.230323][T11742] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 345.315370][ T2998] binder: undelivered TRANSACTION_ERROR: 29189 11:46:23 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0xfffffecd) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x0, 0x0) 11:46:23 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:46:23 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', 0x0, 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:46:23 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:23 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:23 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) [ 353.794284][T11790] binder_alloc: 11781: binder_alloc_buf, no vma [ 353.801064][T11790] binder: 11781:11790 transaction failed 29189/-3, size 0-0 line 3147 11:46:24 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b00)={r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r8, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r11}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r8, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r12, r13, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r14}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r9, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) r15 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r16}}, 0x0) tkill(r15, 0x15) 11:46:24 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:24 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:24 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r1, r2+10000000}) r3 = accept(0xffffffffffffffff, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r4, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r4, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 354.141648][T11794] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 11:46:24 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) [ 354.574968][ T3483] binder: undelivered TRANSACTION_ERROR: 29189 11:46:33 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r1, r2+10000000}) r3 = accept(0xffffffffffffffff, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r4, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r4, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) 11:46:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="116348400000000000000000002000000000000000005c53cd79850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 11:46:33 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d7f3bed9be24bf6a99b69655a9a9935bb38edc237106cdf8c418d8e031c663c209b6db932668e02f5800b84dfd72f96d9abbc37928ddc24f8db83b4e78edc8406481fd293eb14063c9455f7a7625341121432bef182d944429b6ccb54c8d8315445ef27218bdd0311754de95960847db5244947026fa3af4e7e4b6daeab2092232d5bd188c624c91641e8894d0fe1b6fac677422b8052f54c35cf4d0dd714c470c272482e0300dcc4d2c55b8f7e0bdbddfaae4fc6bcb"]) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:33 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 11:46:33 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f600000800000007000000402c110000000000090000070000000000000000000000003c5a5800000000000000000000000000000100000000000000c70000000000000014ecde11e3c9c3"], 0x60) [ 363.050752][T11874] binder_alloc: 11859: binder_alloc_buf, no vma [ 363.083597][T11875] kasan: CONFIG_KASAN_INLINE enabled [ 363.094548][T11874] binder: 11859:11874 transaction failed 29189/-3, size 0-0 line 3147 [ 363.105124][T11875] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 363.113949][T11875] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 363.115260][T11865] kobject: 'loop2' (00000000f2215028): kobject_uevent_env [ 363.120893][T11875] CPU: 0 PID: 11875 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #32 [ 363.120903][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:46:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r1, r2+10000000}) r3 = accept(0xffffffffffffffff, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0xffffffffffffffda) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1a) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r4, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001b00)={r6}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20ncci\x00', 0x400000003ffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r4, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r7, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r9, r7, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r10}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r7, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r11, r12, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r13}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r8, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259e86484a4e91066b800", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r5, 0x6) r14 = gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0x9, 0x20000000000006, 0x8, 0xd0eb}, 0x2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000011c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x0, 0x8}, {r15}}, 0x0) tkill(r14, 0x15) [ 363.121026][T11875] RIP: 0010:ebitmap_destroy+0x32/0xf0 [ 363.121053][T11875] Code: 49 89 fd 41 54 53 e8 fd d3 7f fe 4d 85 ed 0f 84 99 00 00 00 e8 ef d3 7f fe 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 98 00 00 00 49 be 00 00 00 00 00 fc ff df 4d 8b [ 363.141731][T11865] kobject: 'loop2' (00000000f2215028): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 363.146148][T11875] RSP: 0018:ffff88805913f8c8 EFLAGS: 00010202 [ 363.146160][T11875] RAX: dffffc0000000000 RBX: ffff8880a14f6f68 RCX: ffffc90008090000 [ 363.146168][T11875] RDX: 0000000000000002 RSI: ffffffff82f09ba1 RDI: 0000000000000010 [ 363.146177][T11875] RBP: ffff88805913f8e8 R08: ffff88805c0c2480 R09: ffff88805c0c2d70 [ 363.146185][T11875] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 363.146193][T11875] R13: 0000000000000010 R14: ffffed101429ee22 R15: 0000000000585a3c [ 363.146204][T11875] FS: 00007f9a37506700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 363.146213][T11875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.146221][T11875] CR2: 00007f3aa121ca20 CR3: 000000007b21d000 CR4: 00000000001406f0 [ 363.146229][T11875] Call Trace: [ 363.146251][T11875] policydb_destroy+0x62c/0x7f0 [ 363.146266][T11875] policydb_read+0xe27/0x52c0 [ 363.146287][T11875] ? str_read+0x170/0x170 [ 363.146300][T11875] ? string_to_av_perm+0xa0/0xa0 [ 363.146385][T11875] ? security_load_policy+0x185/0x1170 [ 363.146433][T11875] ? rcu_read_lock_sched_held+0x110/0x130 [ 363.284147][T11875] ? kmem_cache_alloc_trace+0x354/0x760 [ 363.289702][T11875] security_load_policy+0x36d/0x1170 [ 363.294991][T11875] ? security_change_sid+0x150/0x150 [ 363.305106][T11875] ? find_held_lock+0x35/0x130 [ 363.309905][T11875] ? __might_fault+0x12b/0x1e0 [ 363.314727][T11875] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.320996][T11875] ? _copy_from_user+0xdd/0x150 [ 363.325843][T11875] sel_write_load+0x25a/0x470 [ 363.330556][T11875] __vfs_write+0x8d/0x110 [ 363.334875][T11875] ? sel_make_policy_nodes+0x1540/0x1540 [ 363.340495][T11875] vfs_write+0x20c/0x580 [ 363.344733][T11875] ksys_write+0xea/0x1f0 [ 363.348979][T11875] ? __ia32_sys_read+0xb0/0xb0 [ 363.353782][T11875] ? do_syscall_64+0x26/0x610 [ 363.358470][T11875] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.364523][T11875] ? do_syscall_64+0x26/0x610 [ 363.369194][T11875] __x64_sys_write+0x73/0xb0 [ 363.373763][T11875] do_syscall_64+0x103/0x610 [ 363.378329][T11875] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.384198][T11875] RIP: 0033:0x458209 [ 363.388070][T11875] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.407739][T11875] RSP: 002b:00007f9a37505c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.416125][T11875] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 363.424072][T11875] RDX: 0000000000000060 RSI: 00000000200000c0 RDI: 0000000000000003 [ 363.432019][T11875] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 363.439968][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a375066d4 [ 363.447916][T11875] R13: 00000000004c76f5 R14: 00000000004dd348 R15: 00000000ffffffff [ 363.455874][T11875] Modules linked in: [ 363.461685][T11875] ---[ end trace 7422c008ed84e4cf ]--- [ 363.467271][T11875] RIP: 0010:ebitmap_destroy+0x32/0xf0 [ 363.472685][T11875] Code: 49 89 fd 41 54 53 e8 fd d3 7f fe 4d 85 ed 0f 84 99 00 00 00 e8 ef d3 7f fe 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 98 00 00 00 49 be 00 00 00 00 00 fc ff df 4d 8b [ 363.492392][T11875] RSP: 0018:ffff88805913f8c8 EFLAGS: 00010202 [ 363.498473][T11875] RAX: dffffc0000000000 RBX: ffff8880a14f6f68 RCX: ffffc90008090000 [ 363.506468][T11875] RDX: 0000000000000002 RSI: ffffffff82f09ba1 RDI: 0000000000000010 [ 363.514788][T11875] RBP: ffff88805913f8e8 R08: ffff88805c0c2480 R09: ffff88805c0c2d70 [ 363.522761][T11875] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 363.530771][T11875] R13: 0000000000000010 R14: ffffed101429ee22 R15: 0000000000585a3c [ 363.534822][T11862] kobject: 'loop0' (00000000e94b53b7): kobject_uevent_env [ 363.538787][T11875] FS: 00007f9a37506700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 363.538796][T11875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.538815][T11875] CR2: 00007f457c962db8 CR3: 000000007b21d000 CR4: 00000000001406f0 [ 363.549727][T11862] kobject: 'loop0' (00000000e94b53b7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 363.555377][T11875] Kernel panic - not syncing: Fatal exception [ 363.575964][ T3875] kobject: 'loop2' (00000000f2215028): kobject_uevent_env [ 363.580463][T11875] Kernel Offset: disabled [ 363.597873][T11875] Rebooting in 86400 seconds..