(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x13) [ 1699.218717] binder: 20038:20039 unknown command 0 03:57:04 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xb0d, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x5, &(0x7f0000000140)={0x0, 0x33, 0x0, @thr={&(0x7f0000000240)="26f8141d8cb51c4b41cf284a19693bbf61edec5af2c42a0d5259ea08db3ac69e398fb7a1b768eebbc608f90a8af0db921f0643339766dbd25e85710fdc32bf819c0578efdc4074a99630eb12f50cb82d7fe4bfa3554c14de3d0da95e63edfa4c286703eb9dcd47d0f39f4f33678cdf4a39010dfa0ecde65bcaad508af0979356468af903e965e014d0b79948bc858085cc1e5a4de5", &(0x7f0000000080)="d753d81f3f63106245e00bf661e0b862a7e4af4c88db651e9f6a6ac841ef6c5d196054e00b02096968f318d0849833cbfd9e5eacdb988b554006d92db71e46003eabbd3b449fd4b87671d3c922b26097771b76315fee88d21d0a34"}}, &(0x7f00000001c0)) timer_create(0x5, &(0x7f0000000300)={0x0, 0x9, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000340)) timer_create(0x4, &(0x7f0000000540)={0x0, 0x37, 0x3, @thr={&(0x7f00000003c0)="72848b0d", &(0x7f0000000400)="8322d71faa0af0e32d2453fe8f6ff679dc1128334cadf882dbba1c548f99de128df0f1287da9d4f6b32cc335bd107cd13ef5d6ebcfb2bfa73b630040b97a1128b2ea0ff588284e79a7c1351fbd3449944aa6f7b3f1edd89dec1a6475716e78afc7a99b8d2147457b618ac6d1b0ec1b0495b4ae8d95d31b72b7f6178ffe4c4d74707c64d1ffc2c333ba912a8cd7af858c8e998fbd28272587b20035f0c0238dde23911053f22f8f33305f45792beb020159f6024c7f4a4744186e9625717ac0d59852"}}, &(0x7f0000000580)=0x0) timer_getoverrun(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1699.253354] binder: BINDER_SET_CONTEXT_MGR already set 03:57:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x3e, 0x1, @thr={&(0x7f0000001700)="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", &(0x7f0000000240)="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"}}, &(0x7f00000000c0)) timer_create(0x7, &(0x7f00000001c0)={0x0, 0xa, 0x1, @thr={&(0x7f00000003c0)="d7fc50b2767255682bf55fac50a93c66f0b8598e853fd48e47a124654be40f435e5a658873ee7eee9560d6858c47f941babc58d18482b6301f2804307c34a364e08e273b08c6d5cf89d4ec7e6e702c459e7b33b82eb4ec4a3de1e544bbeb0e89db27dc8b77c06b7789db6a9dce92724d598f99339d22dd44b4a1b113ddccf3b28130c519f6e5e7478b553b94f5c9547da246e0eff6bde4b935591267965c6ff1552df650ac95d551de895341c316d7751b46645ee015579d4215bd89", &(0x7f0000000140)="1dd7471d295b8e82dae2d600075bcc78f7643884cca48f5127da5b1c44b4ab124d72f01890036e46f683806339220590a437916b97fa0bb836"}}, &(0x7f0000000340)) timer_create(0x5, &(0x7f0000000480)={0x0, 0x2c, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0)=0x0) timer_getoverrun(r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}, &(0x7f0000000580)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={r5, 0x5, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:04 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x200000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) write$binfmt_aout(r1, &(0x7f0000000900)={{0x107, 0x7, 0x2, 0x299, 0x5e, 0x5, 0x2a1, 0xffffffff}, "fa0d04eac42807a5a3155b19d4f77937ba2cb199f17cc3375cc3c6235a974cd168382e02ddf73c3ba42cfaf785c92d0fc2e465ab7eef55a9f2903cec1735e2eac7f68ba06a5be42ef4a20b86b884392347477520a69666db66c6b88ffdcf56212b76899d", [[], [], [], [], [], [], [], [], [], []]}, 0xa84) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1699.419573] FAT-fs (loop4): Directory bread(block 65) failed [ 1699.441091] FAT-fs (loop4): Directory bread(block 66) failed [ 1699.463692] binder: 20066:20069 unknown command 0 [ 1699.487601] FAT-fs (loop4): Directory bread(block 67) failed [ 1699.502260] binder: BINDER_SET_CONTEXT_MGR already set [ 1699.509186] FAT-fs (loop4): Directory bread(block 68) failed [ 1699.532932] FAT-fs (loop4): Directory bread(block 69) failed [ 1699.565177] FAT-fs (loop4): Directory bread(block 70) failed [ 1699.604021] FAT-fs (loop4): Directory bread(block 71) failed 03:57:04 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:04 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x6c00000000000000) [ 1699.638048] FAT-fs (loop4): Directory bread(block 72) failed [ 1699.676524] FAT-fs (loop4): Directory bread(block 73) failed [ 1699.704248] binder: 20095:20096 unknown command 0 [ 1699.712398] FAT-fs (loop4): Directory bread(block 74) failed [ 1699.729918] binder: BINDER_SET_CONTEXT_MGR already set 03:57:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x19, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000940)={0x1}) timer_create(0x7, &(0x7f0000000300)={0x0, 0x17, 0x0, @thr={&(0x7f0000000600)="ff0643108db095008d9386063741026c8c920449ec5afef754fb159da5f3245d468a3b35e001c2c80b55a9f3aedce021116ebd6aaa764e641410f749fba63c6f2bf093a3a1667435e915a03e3e7cbde33e305622a38269c2e35369d41d3c78dc0f4f3480fb7d492495e16351746fc7753caba46c7ba085ffefc1c6923096ed6acc18bb7660f5a5d9bbe89d480a69b565820de127efc6b90c7a707ce753e13ded651c0a19d122883e9d318b374d0e360046793a3ee31c3b2dbbb129ece50b5ba6e790", &(0x7f0000001700)="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"}}, &(0x7f0000000340)) timer_create(0x7, &(0x7f0000000580)={0x0, 0x16, 0x1, @thr={&(0x7f00000004c0)="a6f627", &(0x7f0000000700)="6897722784225ecefe5ec9da12acc167fe969e1b412e23f45e1f4eed30f4f3d4bd0a8886a5d668adcdb5726691726aaf71d70aa84b185766a65b5ddd479222db59898937014b08165d53a93a842e8f012cba7768bc21b284ed2c7199b58c59117f6bd90d2f7032a43956268269696de5134df14c445a8b6873c1b0b856b585f43f7c8ae0970e07e688effd39894ee3bc9275f3cee3cc43ad3e619848102f83a94bddb2269cf1269dc43d20f8badca2bb0fd934e8c58d7313537c1ae000b37302e86c102dab2ce5f3a91ff1cc80855e22e5acf3dbad7716ffe4b27dae5f2cf10ec29615c2362e31b1c8ad36e6f3e78e"}}, &(0x7f0000000900)=0x0) timer_getoverrun(r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1699.913949] binder: 20116:20118 unknown command 0 [ 1699.934806] binder: BINDER_SET_CONTEXT_MGR already set 03:57:04 executing program 3: r0 = memfd_create(&(0x7f0000000640)='/dev/sequencer2\x00', 0x4) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) unshare(0x8000000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000740)=0x7) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d2e01"], &(0x7f00000003c0)=""/28, 0x1c) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x7fffffff, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xeb, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000400)) mq_timedreceive(r2, &(0x7f00000007c0)=""/204, 0xfcbf, 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000780)=r1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400140, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x105) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfff) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000140)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) sysfs$1(0x1, &(0x7f00000006c0)='/dev/dsp\x00') getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000600)={0x8, 0x0, 0x4, 0xef, &(0x7f0000000940)=""/239, 0xf1, &(0x7f0000000440)=""/241, 0xab, &(0x7f0000000540)=""/171}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r5, 0x20}, &(0x7f0000000300)=0x8) 03:57:04 executing program 5: r0 = fanotify_init(0xa, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000240)="6ec745b07216f5a5d4436871eae6d118206f7754c6160aa95daff9363ab2b3595bcff5caed1db763fd9fea75b0a789d1e824e4a8d71ed92d19c7003870893a9b298d9bcfc3c6113a71bd96a51c864fac6d5eca1c0cb84d1d9a42757d6e9f0903321b82b4c4584020704b930523fbeaa57119d08e13da6c6521c049c5493d258756419a158c3b2beefc43a5cd37bcc6af82799d7646bde702aa256d6ea241396b22902a131c2c8154873f650e7e4d9a26e36ad2f42ed88ddd95a61a370c317434118d3f88470d42a7d2", 0xc9}, {&(0x7f00000003c0)="2f0cbfb204f24b00f4937597384582d13d7634635514036f2831f310dc97229088c8c6eb3bdb6c4f4541d7ccb547e2ee3df07730bcccb2a66964860a5faf50ed3ddf51c8b7edb5db11489c82ecce84232d42b8559ad79f967dcb4686de0014dac561eebc1f319f7e9eda9b25d32ae488f0e35fb785d56f2189bd6294182851dc5f4d15b15c950525ab2d64e0cce30af035b6baeccf4ba27ebdbecc2ae98df4f7ad34b9ffe919630d0affed36e9c4c8364c04ebe06256d306e7264102c291b29ef2", 0xc1}, {&(0x7f0000000600)="1d2b92799edf7def05d3b8c1139c1ba7c4d916e08b04472594e44244b6bf6a95faa56a0ce91c34dd200037ca4702193fb53492ac4f4b1d4288a8f48c2825c278a35783c308aa4664ac62013d529ba4b9bebc28970e87b9163bb2759380970f20d3128567c6be80d4d02d5fcc4e1c9cb7797b24ed05caf5592bab3e09f66bc7de7c1518da73859c2b62160f9dfeb328a37ce860dbc37843383aedfc44c60b963bae4db60c997c8aa2ed988c8bee3a2a74bf428181a81ae5a7a2d0af7b719c6056dbe49eae42483802a1a70bcaa5b4168479", 0xd1}, {&(0x7f0000000080)="3ca1d338243555f4d606cedb5b46a06995c76729dae3c42faa618d15cfdee3512bc162ead6d43979ddd5d5d40547feaa24c1535acac3c923282cdbb65eb8fb553fb019eeac9c79d547624888068ff62398d821e1670a61b1e4bfc29cb17d592e652a3da428b3065ac631a88a5986c3a586bbb03e03d26d", 0x77}, {&(0x7f0000000700)="ac19b93d6d0ffe349943a7523039fa194a26325c326f55f58a643ba92117d5b90231b0fd26a29448130814363cde19e8427f224c6f52c593a88a0045e34b3b6b9fd96bbc9d5fe7b52d6f8868d8", 0x4d}, {&(0x7f0000000900)="652c95c8e8546e38107b7ebcbf3abbfb6eeb50b2bcdf3e8c8d66390f281554b42666502b91c7c27fe69aef85bfed6ce9cd1c228e8b0812c85298b2f19549aaf77cce722e7d56c0d823c007a85882368e5c69b2fbdd1d35dc4e462aeebd8991981dac466e5c812bc6e73515ba5c2a5d3c8d5baa7468886787566b821b9f29703ede374b63dda783a391e6d1b68dae8b014e18d3a80db3e165020b6f5c020fe59dbeabb6148b632d52612768f1e9525fb1120be12c8cabcbc8be73d0b57160", 0xbe}, {&(0x7f0000000140)="c9444bb60bef7b239f16601343d515c10f00493cbd749c1b1f487eeed7d6", 0x1e}], 0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) mknod(&(0x7f00000004c0)='./file0\x00', 0x1021, 0xff) dup2(r1, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@ipv4={[], [], @dev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000e80)=0xe8) syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000340)='./file0\x00', 0xf600000000000000, 0x4, &(0x7f0000000c00)=[{&(0x7f0000001700)="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", 0x1000, 0x54}, {&(0x7f00000004c0), 0x0, 0x2}, {&(0x7f0000000a40)="2277485c34f70ecdcf80589b7518401ffc53f811b77e85d0f1f3945a1150987d541f535ff9985e5c07c11c5284a7ecf6bd4ea918be82a14586c39fd8be5274a3d7a771385c11cef406f25cacd6f2374bb718fed92901082a3707838b5d930098f90fa056388b613b00e05b66d72a41a178dbc6d68c78a4933c2332f0bdaa0d8e931ce7cdf7c1a5b1f2c28812ce32c0d8402c09a1916a805dde9194d68e4b7e9f90c4ae4ff465f20cd3358b5946ea0d5ff4743af30e9df24690856cd9e0b0c5590771f0fe826f5593e0b2fc88af37d15c287e5abe67252e9b137789caa8d8e5d626a47a509cfd46742bde05edec6e04", 0xef, 0x7}, {&(0x7f0000000b40)="c069884672b6f51520cdc71b1cb899194498e95fc15462bae688dff066caa7630ae5d8a1ef1856e882c91b1c3e6aabf7a9b64e19491fa931f4a4bbd298d01d14f1a3ba271cd477100d74726c80fceab80eb237a69c916a308de25c43d4bbfef750dd553e76b3f5437e026bf0d2f9b9b5a3591cecad9c75dda4de5ed332255ec298661587434c1152ecad2b52a4ed59fc4df034facbc24f15909c3f4ff50c6dd596d5f66f8dc6abdaeb82afa599fe4bacc8", 0xb1, 0x2}], 0x800, &(0x7f0000000ec0)={[{@nolargeio='nolargeio'}, {@biosize={'biosize', 0x3d, 0x7fffffff}}, {@noalign='noalign'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vhost-net\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000009c0)={{0xa, 0x4e24, 0x40, @dev={0xfe, 0x80, [], 0x1f}, 0x1}, {0xa, 0x4e21, 0x76, @mcast2, 0x101}, 0xead5e58, [0x1, 0x2, 0x101, 0x3, 0x5, 0x100000000, 0xffffffff, 0x2d00000]}, 0x5c) r6 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:04 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x28000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x6001) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2080, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:04 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xc000000000000) [ 1700.110579] binder: 20133:20143 unknown command 0 [ 1700.146015] binder: BINDER_SET_CONTEXT_MGR already set 03:57:05 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x620000, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x140) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x11}, 0x80) 03:57:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) socket$inet6(0xa, 0x1, 0x80000000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:05 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000000c0)={0x1, "e909f4dbc51f61db6f079de9cd9c833a2cde46488d48e8b7e86126d6816134ad", 0x3, 0x6, 0x20, 0xff, 0x4}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r1, 0x101000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x103000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'vlan0\x00', 0x400}) [ 1700.499353] binder: 20176:20177 unknown command 0 03:57:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)={0x3, r1}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240), 0x4) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8000) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1700.553068] binder: BINDER_SET_CONTEXT_MGR already set 03:57:05 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x6000000000000) 03:57:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:05 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) seccomp(0x0, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x9, 0x9, 0x80000000, 0x1}]}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x90580) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x3}, 0x10) write$9p(r1, &(0x7f0000000300)="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", 0x1000) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1700.828897] binder_thread_write: 12 callbacks suppressed [ 1700.863784] binder: 20209:20219 unknown command 0 03:57:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x1, 0x1, 0x26, 0x6, 0x0, 0x100000001, 0x5, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001700)={r4, 0x5, 0x1000, "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"}, 0x1008) r5 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0x90, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x6, r6, 0x10001, 0x8}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1700.908658] binder_alloc_mmap_handler: 10 callbacks suppressed [ 1700.918163] binder: BINDER_SET_CONTEXT_MGR already set [ 1700.941950] binder_alloc_new_buf_locked: 9 callbacks suppressed [ 1700.948076] binder_transaction: 9 callbacks suppressed 03:57:05 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x7c97, 0x0, 0xbc7, 0x0, 0x2, 0x3, 0x8000, 0x401, 0xd7d2, 0x0, 0x2af, 0x2, 0x0, 0x5, 0xd2, 0x5, 0x2, 0x4, 0x8}) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1700.989495] binder: 20209:20219 unknown command 0 03:57:05 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x40, 0x6, @thr={&(0x7f0000000080)="5e6f22212e8b0d398924bf8151ae85bd6793c48a5045b23ddb", &(0x7f0000000240)="52d9ed2edf3e4ebeb7f15c12ac899df6d78e764a6558a420048e937b496a9eb997b7ee48916cd731f1363860c49138281d89a6953b8f4ccdaeb8a6655a8830629d5ca887184e37d52ab9403a9ba8203168c06cec5ed1a86a14a448c831706771ce3967d458b3849c785a6c83f246e8cd7ed9f0e241062d095c85f5788b5cb6003db880e79696cccd5a24642d10cd0ba91de973fd1a2c54b3e533fd8f97df31e2ec94eb2c"}}, &(0x7f0000000140)) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x41, 0x3, @thr={&(0x7f0000000300)="e81c453136a77c0e322210ed0b9e3aef10d7857c41a3d0c26d39d71e3ab07446e8f606f108d390cf25eee6c937e24a52094d9cd48dcfec86f32d4dd16c44b6ea0d285d0b4af52d5448796dd8c48e44119513fd7b0c02d05e12a920ec45dde9e26f037979", &(0x7f00000003c0)="a66d83d8dbc061d935df0831ae1e29bffd208b56f35704f27a50c190e679badd881683a0d3707b42d684cd9d8828fb6d9cdcfc5ff0aada6167a7747907563a3662461a7cdf9dc855bec8a0af5d7a"}}, &(0x7f0000000440)) timer_create(0x7, &(0x7f0000000480)={0x0, 0x16, 0x1}, &(0x7f00000004c0)=0x0) timer_getoverrun(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1701.045947] binder_release_work: 14 callbacks suppressed 03:57:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:05 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x700) [ 1701.279557] binder: 20264:20273 unknown command 0 03:57:06 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x361, 0x4000000000000009, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000300)={0x1, 0x0, 0x2080, {0x4, 0x6000, 0x3}, [], "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", "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"}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000000c0)={{0x2, 0x0, 0x1, 0x1, 0x7}, 0x3, 0x6, 0x40}) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x42) [ 1701.325848] binder: BINDER_SET_CONTEXT_MGR already set 03:57:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) r4 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)="b5d5abb365b77c757e6ab463a956071c6e25438482cd12de85399f45e66263e10cecc57efc28b2674bc04e80a9857d05039c2c72fb76a3c70fde64cac598616eb4a822f50612f2b5d2d15ac6a4", 0x4d, 0x0) keyctl$setperm(0x5, r4, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r5 = getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) fchmod(r0, 0x142) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200040, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@nodevmap='nodevmap'}], [{@euid_gt={'euid>', r5}}, {@uid_gt={'uid>', r5}}, {@subj_type={'subj_type', 0x3d, 'syz'}}, {@fsname={'fsname', 0x3d, '/dev/dsp\x00'}}, {@subj_user={'subj_user', 0x3d, 'dns_resolver\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@uid_eq={'uid', 0x3d, r5}}, {@measure='measure'}, {@obj_user={'obj_user', 0x3d, 'syz'}}]}}) 03:57:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = getuid() r3 = getegid() getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='fuse\x00', 0x22000, &(0x7f0000000900)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[], [{@uid_lt={'uid<', r4}}]}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000140)) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x6, 0x1, @thr={&(0x7f0000000240)="e6580c339e4bc002ff7d814147b80a8bdd67d460b578f158071b4e43e054e15e28d01a6b114aba7814f4a164a7a32301489674927ef01620bc9e92ea5ae0cdc1f2514f923d3907b0e37f49606f7ce72f2e973f19ae94d5b45b793d0cb46f7a1cfd20c07b2c2f7a5e56b5f66bcee4c989637139d0130612dfd004", &(0x7f00000002c0)="643d311ccfca074aa6b7f8ec13633a29e383382384de7b8811426ce61d3cd7f7bd2030a412fbace5bf928f41ca3f974a82c8638ecbe31749b75e874b864fd8ef41c6f5817ba344a8a90cdcc38bfe2114aefd8fc486347bb00ed8252ab0e6aaa3dc762d3d2d449e89552d3a062e241f0ea197ae0b1cbfa4b60436a53f5aacfbaad8ad0ceef99b73a63fae9ff80acdca6f43be47676ba0ca9cda64b88ab1bd5dd4afd90138bbb8"}}, &(0x7f00000003c0)=0x0) timer_create(0x7, &(0x7f0000000400)={0x0, 0x11, 0x200}, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000600)={0x0, 0xa, 0x4, @thr={&(0x7f0000000480)="24e1573920f59d7bc028efb44caf8ab3cad7ee0e1f76b19f6dca818c5e3777c4a0b9cded7c03545aa714ab749047a775cc93502b6279d8c2521723a159def102d404", &(0x7f0000000580)}}, &(0x7f0000000640)) timer_getoverrun(r5) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup2(0xffffffffffffffff, r6) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x10800) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f00000007c0)={0x5, 0x0, 0x10003, 0x389c}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000009c0)={0x0, r8, 0x0, 0x9370}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) acct(&(0x7f0000000080)='./file0\x00') ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000a00)='tls\x00', 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1701.505755] binder: 20293:20298 unknown command 0 [ 1701.544963] binder: BINDER_SET_CONTEXT_MGR already set 03:57:06 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r1, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/157, 0x9d}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:06 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2300) 03:57:06 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000300)=""/94, 0x5e}, &(0x7f0000000140), 0x10}, 0x20) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x68) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa63084000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1701.825303] binder: 20331:20338 unknown command 0 03:57:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0xfffffffffffffffc, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_bt(r2, 0x8907, &(0x7f0000000080)="6f1cebf797161e7324a779981c9f580c8039aa55bba8488cfb2291cba2242696812781728c20c7f5810a0eec884355b9d15427e5") setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1701.885538] binder: BINDER_SET_CONTEXT_MGR already set 03:57:06 executing program 3: unshare(0x8000000) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x20000) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x3, 0xfffffffffffffffc, 0xfc, 0x60f9}, 0x8) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7fff) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x2, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000300)=0x1) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x8, 0x222900) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) r5 = dup2(0xffffffffffffffff, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000280)={0x7fff, 0x20e, 0xe8e, 0x10001, r6}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000080)={0x7}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000140)=0x200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 03:57:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:06 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x1ffffd, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_GET_DUMPABLE(0x3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x2, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000003c0)=""/149, &(0x7f00000001c0)=0x95) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @local}}, [0x3, 0x3f, 0x2, 0x1f, 0x6, 0x7, 0x9, 0xfffffffffffffff7, 0x3e, 0x2, 0x900000, 0xff, 0x1c00000, 0x400000000, 0x10000]}, &(0x7f0000000140)=0x100) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:06 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x6000) [ 1702.126038] binder: 20372:20373 unknown command 0 [ 1702.149095] binder: BINDER_SET_CONTEXT_MGR already set 03:57:07 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x300, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1, r2}) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x80, 0x1000000000800) accept4$tipc(r2, 0x0, &(0x7f0000000480), 0x800) unshare(0x8000000) ioctl$TCSBRKP(r2, 0x5425, 0xffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000300)={{0x1ff, 0x800, 0x100, 0x5}, 'syz1\x00', 0x48}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000004c0)={0x0, 0x1}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000540)={r6, 0x4, 0x7, 0x6}, 0x10) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000580)={0x20, 0x7fffffff, 0x6, 0x7, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe630c40, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1', "bd65764eb5fd74bb7da814f7ba2eb30c062f57a3dab798554bfd0ad6637a24ba803314fc03368325590c2781480e1d20693079730bc2006646da00d5f5ac84c0c426059306feea84f3a3f710b009ac09c71da461d72515cbf679e4b1924d512968e0754644fc76f7cb0981204eb33b78931285a26688ab4c3a33cc8d25fd1eff492259e4b3ba"}, 0x8a) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x80) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000000c0)) 03:57:07 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) write$cgroup_pid(r1, &(0x7f0000000280)=r2, 0x12) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1, 0x3, 0x1, &(0x7f0000ffc000/0x2000)=nil, 0x9}) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9a75, 0x2000) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@loopback, @broadcast}, 0x8) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1702.372392] binder: 20402:20403 unknown command 0 [ 1702.389751] binder: BINDER_SET_CONTEXT_MGR already set 03:57:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x7) 03:57:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd63, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:07 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000600)={"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"}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0xed}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:07 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x10000000) 03:57:07 executing program 3: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0xfffffffffffffcc9, 0x400, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/14) [ 1702.676480] binder: 20433:20438 unknown command 0 [ 1702.683188] binder: BINDER_SET_CONTEXT_MGR already set 03:57:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x400000000805, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x7, 0x7, 0x10001, 0x80000001, 0x0, 0x7fffffff, 0x8, 0x0, 0x7f, 0x5, 0x5, 0x8, 0x1, 0xb03, 0x7f, 0xaf3, 0x81, 0x331a, 0xe61e, 0x3ba, 0x9, 0x3, 0x21, 0x0, 0x2, 0x4ce, 0x6d0, 0x5, 0x10001, 0x1, 0x7, 0x3, 0x100000000, 0xf7, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x2, @perf_config_ext={0x3d9f, 0x6}, 0x48, 0x10000, 0x7ba, 0x4, 0x7, 0x5, 0x4}, r4, 0x5, r1, 0x2) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xffffffffffffff12) r6 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x6}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb63, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:07 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0xffffff9f, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1702.804021] binder: 20450:20451 unknown command 0 [ 1702.858562] binder: BINDER_SET_CONTEXT_MGR already set 03:57:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1702.989657] binder_thread_release: 6 callbacks suppressed [ 1702.997803] binder_release_work: 9 callbacks suppressed [ 1703.025864] binder_send_failed_reply: 6 callbacks suppressed 03:57:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:07 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xcd) timer_create(0x7, &(0x7f0000000100)={0x0, 0x2b, 0x4, @thr={&(0x7f0000000300)="e9d31c355e145b5158b8f97fe27c060a813b1c0003d54aefcb7c56e504e043a0e8a4b83bd0d492d8d49216bd5fb3f5695664cf75f53f7de2ee0fa47c94db48dd5544e161852bebdf6b9c3eb487bd2cba53d1e0f08df49ecf4e4dd0912ab1ac89026e9a7f92b5a2cada38e29710867a527ebe686d83c128a0caa3607c78e229b8621868fb872a94f41187d817f4d51cb96d793b8761ad255b488d77a110239d3be9f429b0bba58382d5e45b38bbf6d1d06bcf9bf3dff9b1ea56d7715a22b8e7f5397202607e4d9bd99e95e37dff", &(0x7f00000000c0)}}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x402800, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000040)) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1703.157095] binder: 20485:20487 unknown command 0 03:57:07 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1f00000000000000) 03:57:07 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x19a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='system\x00', &(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)='/dev/vhost-net\x00', &(0x7f0000000340)='\'}^[proc}]\x00', &(0x7f00000003c0)='keyring\'\x00', &(0x7f0000000400)='\\\x00'], &(0x7f0000000580)=[&(0x7f0000000480)='selinux+!lo,+\x00', &(0x7f00000004c0)='/dev/vhost-net\x00', &(0x7f0000000540)='/dev/vhost-net\x00']) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000000600), 0x1000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140), 0x4) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000080)={@loopback, @broadcast}, &(0x7f00000000c0)=0x8) [ 1703.217030] binder: BINDER_SET_CONTEXT_MGR already set 03:57:08 executing program 5: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$xdp(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, 0x2, r1, 0x1}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8676cd6d55a808bdb8006d45", 0xc}, {&(0x7f0000000240)="16878ad2605ec24f1a11dbe4ee675104804f7d43108ed59f8ebf5b776b54725cb961ec42d74c7f5e35c2f4e5f8803782b76cbd28d41e877698b53edb895708bf1ed56c492e766886213f62ad", 0x4c}], 0x2, 0x0, 0x0, 0x40800}, 0x81) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) timer_create(0x0, &(0x7f0000000340)={0x0, 0x39, 0x5, @thr={&(0x7f0000001700)="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", &(0x7f0000002700)="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"}}, &(0x7f00000003c0)=0x0) timer_getoverrun(r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = request_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='^vboxnet1selinux\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, r4, r5) r6 = dup2(r0, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r8 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r8, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) personality(0x0) fsetxattr$security_evm(r7, &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@ng={0x4, 0xa, "5cb4065f5ddf009598e4af21c95aec10ca9f"}, 0x14, 0x3) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x763044000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1703.391768] binder: 20515:20522 unknown command 0 03:57:08 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x10000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x40800fff) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)={0x1, 0x5, [{0x3, 0x0, 0x20}]}) 03:57:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:08 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x2, 0x70, 0x7, 0xf, 0x8a8, 0x7, 0x0, 0x7, 0x0, 0xc, 0x1, 0xff, 0xffffffffffffff7f, 0x3e6c, 0xe4, 0x7, 0x100, 0x44342d26, 0x0, 0x10001, 0x5, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x6a, 0x2, 0x9, 0xfff, 0x7f, 0x6, 0x3f, 0x1, 0x591c1eff, 0x200, 0x7, 0x8, 0x0, 0x3, 0x4, @perf_config_ext={0x6, 0x3}, 0x4011, 0x9, 0xfff, 0x1, 0x2, 0x0, 0x7}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x1ff, 0x3f, 0x80000001, 0xffff}}) 03:57:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000240)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1703.713745] binder: 20546:20550 unknown command 0 [ 1703.740706] binder: BINDER_SET_CONTEXT_MGR already set 03:57:08 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x81000000000000) 03:57:08 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x800c}, {r1, 0x204}, {r1, 0x200}, {r0, 0x9016}, {r1, 0x219}, {r1, 0x40d0}, {r1, 0x2000}, {r2, 0x8000}, {r0}], 0x9, &(0x7f0000000140)={r3, r4+30000000}, &(0x7f0000000280)={0x2}, 0x8) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x38d9) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40486311, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f00000005c0)=0xaaf9) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1703.964305] binder: 20567:20578 unknown command 0 [ 1704.015168] binder: BINDER_SET_CONTEXT_MGR already set 03:57:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x863104000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:08 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80000) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x3, 0x8, 0x80000000, 0x200}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000300)={{0x4, 0x5, 0x4, 0x1, 'syz1\x00', 0x100}, 0x1, [0x3f, 0x2, 0x0, 0xfb, 0x852, 0x0, 0x100000000, 0x1, 0x8, 0xffffffffffffff3c, 0x100000001, 0x2, 0xfffffffffffffff7, 0x1ff, 0x401, 0x1ff, 0x100000001, 0x6, 0xc20, 0x40, 0x7, 0x80000001, 0x8, 0x80000000, 0xeb73, 0x5, 0x1, 0x2, 0x0, 0x4, 0x7, 0x8, 0xffffffffffffffe1, 0x3, 0x3, 0x401, 0x40, 0x2df, 0x3, 0x9, 0x9, 0xff, 0xffffffff, 0xffffffffffffffff, 0x6, 0x8c, 0x6, 0x5, 0x1f, 0x1000, 0x9, 0x5, 0xd97, 0x5, 0x1, 0x0, 0x20, 0x0, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x100000000, 0x40, 0x8000, 0x0, 0x0, 0x8, 0x7fffffff, 0x6, 0x4, 0x1f, 0x50d, 0x100000000, 0x44, 0x0, 0x8000, 0x1, 0x1, 0x8000, 0x7, 0x2, 0x47a, 0x401, 0x8, 0x7fff, 0x7, 0x1, 0x9, 0x4, 0x8, 0x8, 0x1c, 0x3, 0x3ff, 0x100000000, 0x8000, 0x0, 0x80000001, 0x0, 0x800, 0x7, 0x3, 0x7, 0xfffffffffffff000, 0x0, 0x5, 0x1, 0x2, 0x40, 0x1000, 0x5, 0xfa65, 0x5, 0x3ff, 0x7f, 0x891, 0x0, 0x9, 0x140000000000, 0x1, 0x7f, 0xfff, 0x400, 0x4, 0x7, 0x4], {0x77359400}}) 03:57:08 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={@mcast2, @mcast2, @loopback, 0x9, 0x6000, 0x6, 0x0, 0x2, 0x4000020e, r2}) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) faccessat(r3, &(0x7f00000001c0)='./file0\x00', 0x20, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1704.267016] binder: 20603:20612 unknown command 0 03:57:09 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xfdffffff00000000) [ 1704.292893] binder: BINDER_SET_CONTEXT_MGR already set 03:57:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:09 executing program 3: unshare(0x1001008000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) mq_open(&(0x7f0000000000)='!selinuxselinux\x00', 0x40, 0x0, &(0x7f0000000040)={0x1ff, 0xa8, 0x1a2a, 0x6, 0xd62, 0x100, 0x1ff, 0x8}) 03:57:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x80000) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'gretap0\x00', 0x3}) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1704.492192] binder: 20633:20637 unknown command 0 [ 1704.565763] binder: BINDER_SET_CONTEXT_MGR already set 03:57:09 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000140)={0x7, &(0x7f0000000240)=""/225, &(0x7f0000000880)=[{0x8, 0x17, 0xb0e, &(0x7f0000000080)=""/23}, {0x9, 0x7d, 0x0, &(0x7f00000003c0)=""/125}, {0x8, 0x69, 0x78fb, &(0x7f0000000440)=""/105}, {0x7, 0xf9, 0x2, &(0x7f0000000600)=""/249}, {0x4cd, 0x8c, 0x2, &(0x7f0000000700)=""/140}, {0x40, 0x0, 0x80, &(0x7f00000000c0)}, {0x4, 0xbd, 0x4, &(0x7f00000007c0)=""/189}]}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:09 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) unshare(0x4000000) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x305800, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x154) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000140)=""/30, &(0x7f0000000280)=0x1e) listen(r1, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x20042, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000340)={0x1}) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r5 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r5) 03:57:09 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x97ffffff) 03:57:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x6, 0x30a, 0x2, 0x5}, 0x6) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1704.836691] binder: 20667:20675 unknown command 0 03:57:09 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0xffffffffffffff24, 0x490c, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1705.069269] binder: 20695:20702 unknown command 0 03:57:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x4c8080, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r5 = getegid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee01]) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getgroups(0x6, &(0x7f0000000440)=[r5, r6, r7, r8, r9, r10]) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1705.093472] binder: BINDER_SET_CONTEXT_MGR already set 03:57:09 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x0, &(0x7f0000000000)=""/64, 0x40) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:09 executing program 5: mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x10000, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@mmap='mmap'}, {@access_client='access=client'}, {@version_L='version=9p2000.L'}, {@access_user='access=user'}, {@afid={'afid', 0x3d, 0x1c97}}, {@version_u='version=9p2000.u'}, {@msize={'msize', 0x3d, 0x6}}], [{@smackfshat={'smackfshat', 0x3d, '/dev/uinput\x00'}}]}}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(r1, r0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000080)={0x1000, 0x7, 0x6, 0x6, 0x9bb0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getuid() umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:09 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x20000000) [ 1705.222499] binder: 20706:20710 unknown command 0 03:57:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf630c4000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1705.441456] 9pnet: p9_fd_create_tcp (20711): problem connecting socket to 127.0.0.1 03:57:10 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) socketpair(0x7, 0xb, 0x6, &(0x7f0000000000)) [ 1705.484548] binder: 20744:20750 unknown command 0 03:57:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1705.518354] binder: BINDER_SET_CONTEXT_MGR already set 03:57:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x8, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16, 0x2}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:10 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x9c0000, 0x4, 0x8, [], &(0x7f0000000080)={0x0, 0xa8ad, [], @ptr=0x10000}}) mkdir(&(0x7f0000000140)='./file0\x00', 0x10e) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1705.669022] binder: 20765:20766 unknown command 0 03:57:10 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xfdffffff) 03:57:10 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='keyring\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0xfffffffffffffffe, 0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1705.734754] binder: BINDER_SET_CONTEXT_MGR already set [ 1705.739839] binder: 20765:20777 unknown command 0 03:57:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7630440, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1705.846462] FAT-fs (loop5): bogus number of reserved sectors [ 1705.883754] binder_thread_write: 11 callbacks suppressed [ 1705.913022] binder: 20796:20798 unknown command 0 [ 1705.934174] binder_alloc_mmap_handler: 9 callbacks suppressed 03:57:10 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() umount2(&(0x7f0000000080)='./file0\x00', 0xd) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1705.984887] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1705.997153] FAT-fs (loop5): bogus number of reserved sectors [ 1706.030204] binder_transaction: 5 callbacks suppressed 03:57:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x1, 0x5, 0x9, 0x7, 0xffff, {0x0, @in6={{0xa, 0x4e21, 0x7, @ipv4={[], [], @remote}, 0x7}}, 0x4, 0x6f787085, 0x6, 0x7, 0x8}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r3, &(0x7f0000000340)=0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000080)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000001c0)=r6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x6}, {{0x77359400}, 0x17, 0xffffffff, 0x50}], 0x30) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) r1 = gettid() wait4(r1, &(0x7f00000000c0), 0x4, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:10 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x115000, 0x8) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1dd) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x3, 0x4) mq_timedsend(r0, 0x0, 0xffffffffffffff22, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x8fe, 0xffffffffffff8000, 0x20000000000000}, 0x8) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1706.087372] binder_release_work: 7 callbacks suppressed 03:57:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:11 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2a04) [ 1706.280288] binder: 20840:20847 unknown command 0 [ 1706.292552] binder: BINDER_SET_CONTEXT_MGR already set 03:57:11 executing program 3: unshare(0x7fffff9) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40086303, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:11 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x3a}, &(0x7f0000000340)) timer_create(0x4, &(0x7f0000000900)={0x0, 0xc, 0x0, @thr={&(0x7f00000004c0)="36c4cafe57c579ec2ea325d55407924a65af107163b7d8cb966473aaaf0b4b21f8418b98fab9f4273c9d483192fbc55201", &(0x7f0000000800)="84555bc998f8250e30b5472f70aa38da3abc55959e964e9a160667d898d7722f21ae581b791b924dc91b7c3210c6682353e32bc28bb1ec0e6ff924946b06c7632d6280f5a1adce602d4fb7bfd4d8dc9a9d26da8a6863b0815cbb864fdb0080c937919df1c84fc4e35ad307e5b911022975240e0d88e450ed4dd760d3b41d0124b393916e49a6e553334b336eba782fc1f71217e1d97be8e01a2d5bcc3a48ebdb2e157f350c8dbce6246435db06b5e70045513616686102306cded0825285ecbfddb3185289347900cb9ea3bd"}}, &(0x7f0000000940)=0x0) timer_getoverrun(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) syz_read_part_table(0x8, 0x8, &(0x7f0000000740)=[{&(0x7f0000000240)="dccd40f1b05124e86fe34618e5ba8fbb26fa596fe46d9962502870a1982e1daba64d9a8c1d064ff2b773284aafaaf543afd1713ed3de1e6f81ba9f3f6de3194e386b6512db208c718a60ca8db3dcdfb2498548cc4726fa4f9eaa41bf6fee04891fe46e869a9af95cae4ef842ec5d54d6e7276089be68183229dc7dbb394fe6f14cbd21f9c63b59734df996d9bac5e1fb10faef0ae4a66f9a2473c9ab79217188d5a5b6b5e5413ebfd35063b542e2b9308130f5fed3d82ee13cb4f1cc86479200f1a70dad2f9c4033569f3c793ce95e17", 0xd0, 0x3}, {&(0x7f00000003c0)="ffe422cc4735bdd12c71980e2ee2b1bc235aba0a1dc4f6e6788460b9602a43eb92b92a8ac45a6ea5017371abb568c91d23b7d9662fc7b36de42cc4f276a7b35080136daed07bb7de80afb7361c8d02f7f910b1d580cf0ec3fc849dabf2a4c3da89bde8880a6e817f5204e2e2dbd4cb184da01694b7a9b9dc69822dc297d8675a096548f73e4da5e6765031beac2625905759dd5fcfac700993cf186748d75894be076b21ba5ccc9ee0249e3b3cf8c88ec4cff83fc47ff322e3ed55aa2ee240c436260a04b4bf3faae0b083c3f6eec74071dcc12197a23a0ee8eedc5371a3b9eec8338f7b5669ce6fea9599256308bd1f", 0x42f, 0x7}, {&(0x7f0000000600)="34301feb61af5aadc4cc7f317756d3453b3da0b3300132a44aaaf190678276bfea1afdbb9d6f2598818e8f7389546888cfb549e6066df4574d05c45a3187868c95e994321c7b4ee6e526079ae6b70123be82bbbf82413dc7d5d50b72ed4a914bcc6a2c7cdefbaf73d0c4addeaabb9eb5e0b5bb6a25743db418ff4408b75af326bc2c83eaba1196aebe320a4ca8eea0e189b837c31f72e8fd50c9edab61dcf9dd610c70aaa1a21abf88", 0xa9, 0x75973337}, {&(0x7f0000000080)="a4844f274a4b312fb6d165520f4eb196dc0e1a1638107f6f38ada798415b4f5267864f6eb14e96f198b8919ff1f466f8500a1de816df1b1e819086a7c32dcd5c63ed0c9c169d172bd268b3bda55711f523e4cc20f0495959cac4ea5f9a80ed40e527ebb42011c5160a", 0x69, 0x3}, {&(0x7f0000001700)="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", 0x1000, 0x1}, {&(0x7f0000000140)="2191e12f02be2da7329e73f720cd80850cad7c875df9cdc1565014ec3e52", 0x1e, 0x154b82b8}, {&(0x7f0000000540)="bca323f4fc38046d00fe693a8f6299979aa75ce8128a6416bbcee4f9836e4baec958af2f651167103885b126375aea0c4ee36f52692ebaad1cc81c513eadab316236914ce3fba099bc1de77e63cd0ef93c4e3f44962fc806429cb65aee5ac7d08510ab609f0d111712740a7dc792ce0bb22f2e77b48b954d535b68a21c", 0x7d, 0x81}, {&(0x7f00000006c0)="e96f425675279dc23f924b585e64f7f4bd88adb2c5a928f2ad6ea7667b1bef0eaaa4d9feb8c303b4bd59143cf44b13fa0ebd3791222916a8ff682a7e1ce855a95fa265d0d0823b20333a48b2c16b550fd5996a76972b2cabde65be034476c790ac93dd0e19ef05263cfa70ab", 0x6c, 0x9}]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000080)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000080)={0x1}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:11 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x23f1802051acb055) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2000, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0xc) [ 1706.567378] binder: 20875:20878 unknown command 0 [ 1706.581539] binder: BINDER_SET_CONTEXT_MGR already set 03:57:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1706.761909] binder: 20894:20903 unknown command 0 03:57:11 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x2810, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1706.844141] binder: BINDER_SET_CONTEXT_MGR already set 03:57:11 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x3204000000000000) 03:57:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1706.977982] binder: 20923:20925 unknown command 0 [ 1706.993309] binder: BINDER_SET_CONTEXT_MGR already set 03:57:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:11 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2000000000, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80000) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:11 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) write$smack_current(r1, &(0x7f0000000040)='{\x00', 0x2) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1707.149707] binder: 20936:20940 unknown command 0 [ 1707.156557] binder: BINDER_SET_CONTEXT_MGR already set 03:57:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:12 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100, 0x80) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/169, 0xa9) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:12 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x32040000) [ 1707.496209] binder: 20971:20976 unknown command 0 03:57:12 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r2 = shmget$private(0x0, 0x3000, 0x12c, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) [ 1707.547614] binder: BINDER_SET_CONTEXT_MGR already set 03:57:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2630440, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:12 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x501080, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x50001) connect$vsock_dgram(r4, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:12 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/dsp\x00'}, {0x20, 'proc\'vboxnet1securityYvmnet0vmnet0'}, {0x20, '/dev/dsp\x00'}, {0x20, 'cpuset'}, {0x20, '/dev/dsp\x00'}, {0x20, '/dev/vhost-net\x00'}, {}], 0xa, "a8f1f8ac495b66c837c86c812943c4e3de6c8e35fe2d3ae0471c15290a2a912ec3ed0dc3b82b22f13e1cb4a9"}, 0x90) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getuid() setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0xff, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r4}) 03:57:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1707.808176] binder: 21007:21015 unknown command 0 [ 1707.842880] binder: BINDER_SET_CONTEXT_MGR already set 03:57:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:12 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x40000) 03:57:12 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1708.095348] binder: 21038:21044 unknown command 0 [ 1708.112503] binder: BINDER_SET_CONTEXT_MGR already set [ 1708.134982] binder_thread_release: 6 callbacks suppressed 03:57:12 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x0, "5454fa9ac64e5ec922d39bf6cbdbe48e3942f55622a7e03457a912c037a84cb4", 0x0, 0xff, 0x7, 0x1c, 0x1}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x4) [ 1708.140708] binder_release_work: 10 callbacks suppressed 03:57:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1708.166050] binder_send_failed_reply: 6 callbacks suppressed 03:57:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x7, 0xfffffffffffff001, 0x0, 0x9db, 0xffffffffffff0001, 0x5, 0x6, 0x4}}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:13 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="45db295ec4ab3fb2d57e6b7297577688709620fe2c2c0873f63572e04468e1eef8cb75bda04c26279e04d358555aab0bebb3eb2f7bdda2e813c50e645e309674d2a7924d9dd35484c861e6be7515c28ff99af00b220e4f977542356774d9b150d2970a0086d2ae31eeb2593ac65b", 0x6e}, {&(0x7f0000000300)="4ed3c14a546322626920c544b6cd2b91720f23ff5e17b7acbed54a5b4f7a1b1d196bd65f1d59e82254412e7a0a1178e5258a736f7595856d8bbb1bd3ac666d8521afd162682acd1da27bc93c2c47fad773228347ef31b5ce7dde61831425c70762d48e0bdf3b6c9824d97caf9c8fe25b4d03cbad", 0x74}, {&(0x7f0000000040)="6aac13999db12e989485a28aad2af44700dda193349014a36c", 0x19}, {&(0x7f0000000380)="eb40e689934812599ac1a05c5ab3fa6fdd4d6dc39acbfa82ace389762ff40199dee8c564b2a962cacc2df96d7df6775a76f89d9cff674059ad03a2e00219bd30a37622aab001e37993c6cf70bef0", 0x4e}, {&(0x7f0000000400)="90e63fc424e96703c96b14f7a5e0201086a5a99b5ec7ce775dbb76febf3f04cbbabb6e614bd38d85c07b7bd9febdef6eaceea6e0be7b95f4eb7403998a59b1f507de7aa257af94d3664447c5a03b9ee0fee31c3c2b8d5444761c70750b33f3f19b4928ae3361b32eab990a57d7734f72ac611e01e5334e26df97d878e09d01", 0x7f}, {&(0x7f0000000140)="8b6cb16e573296f0fffeaf5b40eea725e60165d6127ed2bf", 0x18}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="ba5e4890483b4393511d8f4aa5e63b71546ae36c76b358c729cdfbab0790b9eb86ea46e307194fd4ce5739b014a4376381122164df565020523fdcd9b5e7aeff8b1afc1da8741bb9e8e24acd26eb9bf5c493db043e07cca9cdb7b3573d2adca94d2e5dc1444d7334c94b9f1b2cda3ead7f64979b5a4628ab194f840c8fc846572deb7582dc88", 0x86}, {&(0x7f0000000640)="6448f080d0adb181f5127dac4540d80b392fc6caabb9cef3d9ee8ee2c2b28e512c8911ce80ebf5d0afefbb45025068b6a195fb1d38848757876b894fcbc5f019ed15ab", 0x43}], 0x9, 0x0, 0x0, 0x4000}, 0x480c0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12634840, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1708.338112] binder: 21056:21064 unknown command 0 [ 1708.344951] binder: BINDER_SET_CONTEXT_MGR already set 03:57:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000240)={0x4, 0x1, 'client0\x00', 0x1, "32e2ae985b0362c7", "86d04bb1525a9987fd55fa04324636207c7457ce8043a203578e54cf90ab866b", 0x80, 0x3}) ioctl$KDDELIO(r1, 0x4b35, 0x10001) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000480)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0xffffffffffffffcc) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000000c0)) r2 = open(&(0x7f0000000540)='./file0\x00', 0x105200, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x5, &(0x7f00000007c0)={0x0, 0x31, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000001180)=0x0) timer_getoverrun(r3) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) mount$9p_fd(0x0, &(0x7f00000001c0)='\x00', &(0x7f0000000300)='9p\x00', 0x1000000, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="00290580", @ANYRESHEX=r0, @ANYBLOB=',cache=fscache,version=9p2000,loose,access=any,uname=/dev/uinput\x00,permit_directio,euid=', @ANYRESDEC=r4, @ANYBLOB="2c666f7f5f106363f35864109a65370576786e323d969ff103695779b48ec233fdbe06b2e940b9cfb7866de9b6b394c53b76dcf4ef3686aacc38a7bd5fa73ef353688b25bb83430ab1eb90355a431bc1fca68eca16e23e380ea4ab327a2bbfb31a43f141a6a9114debcb10dee5216ff7e177988b93eabd39e5deb1200b88bb2c1d04c8e38100c4e8547e80ea650f4ea61883fc5a9c21d1bd09f135a56ada023742cda7a94200000000000000009d3e9f3d2cd45961d30b866e2107ea9e4fcc9efd0fedd0ea876a5e4131e68a551d29e4aefd911fd05671eed2e6da4acd1a3b323b7cee6157cdadc70d239c78", @ANYRESDEC=r5, @ANYBLOB=',smackfshat=/dev/null\x00,\x00']) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r1, r6) r7 = dup2(0xffffffffffffffff, r6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x658, 0x160, 0x270, 0x360, 0x0, 0x360, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, &(0x7f0000000700), {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x1f, 0x7, 0x4, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@mcast1, 0x2b, 0x12, 0x4dff5b10}}}, {{@ipv6={@remote, @ipv4={[], [], @broadcast}, [0xffffffff, 0xff000000, 0xffffffff, 0xff], [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 'ifb0\x00', 'teql0\x00', {}, {0xff}, 0xff, 0x73b, 0x6}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@remote, 0x12, 0x19}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x0, 0x4532}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1708.529523] binder: 21082:21086 unknown command 0 03:57:13 executing program 3: unshare(0x8000000) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1708.573919] binder: BINDER_SET_CONTEXT_MGR already set 03:57:13 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xf0) 03:57:13 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x1000002, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 03:57:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1708.752426] binder: 21106:21108 unknown command 0 [ 1708.778759] binder: BINDER_SET_CONTEXT_MGR already set 03:57:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x20000, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:13 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000280)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="3d50e01cf9d6d030ebf477ae530767b84164cc73c997d7c73900c0b11a2e62efb30c1aaa150bf5d4660603df04085e334b65e4ed4c9efbaeee1129f4423822072bacd191c5a853e82fdbd86542efee3240e31f0e4a2e38baa20b7e25cf8f44ab9c03a0ea5ced3e0b392361564f5dc56318d4954fe09e267f87d0300c14619c2f76700d181653622bfd09e601488118ddfbc5c41ac1fe6c2e2fe587aae89aa46cc96d36bb", 0xa4, 0xffffffff, &(0x7f0000000040)={r1, r2+10000000}) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) getresgid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) syz_mount_image$hfs(&(0x7f0000000300)='hfs\x00', &(0x7f0000000340)='./file0\x00', 0x10000, 0x2, &(0x7f0000000480)=[{&(0x7f0000000380)="d5ddefb63ff6327664ac9dae392b27d4ca58db7f6127d67c24b3f024243950e7190093", 0x23, 0xffffffff}, {&(0x7f00000003c0)="d08a9bbd4430e42c69321e80672629d62d5ab1b5964e9ac33f07cbc4cd8d280740bdd5f401bbebe623183c19705a74602e78c3ac34030eed0698c4a3efba175cb0f8df98f945eff7138e8f4f009a3df441ecfd4d36c3881e62a19b4bc80547f1b99624f9281712b7f8b185bb3ab740b41a42d6470c471fede424aff65f309b7568709574bd9355c65d3968933f05b3f09500d39c14fba439dfd4aae1b7fb56d0239fac", 0xa3, 0x7}], 0x100000, &(0x7f0000000780)={[{@gid={'gid', 0x3d, r3}}, {@file_umask={'file_umask', 0x3d, 0x1}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '!selinuxselinux\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, '!selinuxselinux\x00'}}, {@euid_lt={'euid<', r4}}, {@smackfsroot={'smackfsroot', 0x3d, '+ppp0{\\]-'}}, {@obj_user={'obj_user', 0x3d, 'systemkeyring\'%bdev!self%ppp1'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x7, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1708.931364] binder: 21113:21125 unknown command 0 [ 1708.963878] binder: BINDER_SET_CONTEXT_MGR already set 03:57:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:14 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2100000000000000) [ 1709.285127] binder: 21162:21168 unknown command 0 03:57:14 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7ff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:14 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x53, 0x8}, 0x8) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1709.327460] binder: BINDER_SET_CONTEXT_MGR already set 03:57:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 03:57:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x6, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x3eb) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:14 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1709.740083] binder: 21204:21208 unknown command 0 [ 1709.768878] binder: BINDER_SET_CONTEXT_MGR already set [ 1709.780105] binder: 21204:21208 unknown command 0 03:57:14 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1600000000000000) 03:57:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:14 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f00000000c0)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0xfffffffffffffde7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000240)={0xfffffffffffffff8, 0x0, 'client1\x00', 0xffffffff80000002, "38f6d624b5610ecd", "fb22a60aa0a361bbd59908476e8a53e110103aaa2f6752220193b1d3090aa454", 0x7fff}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='_ser.\x00'], &(0x7f00000001c0)='em0^wlan0\x00', 0xa, 0x2) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x400) 03:57:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x8000000000000000, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x0) r3 = getuid() openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x10000, 0x0) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x2) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0xfffffffffffffff8, 0x8, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="9cb7bc125d6d5a37ff18e0281fa69d287bfb4651408e68fc9d541cddf9dd7e047ebc3b1ba9b09ac775a7e404ce8beabe44d1f6c002c9c9c06cfec660847db67d610fe109bb63aa4fdf28eed2f733df36972636e7703794a5d9186cae27a1a82d8a82f27e226168757441a6f33487dc452eb285d95794d91d30937c3d5664704505900f9dda794992e389efe20a2d07ed3ffa79a2ee3fc668d32ba0f60fac33fa1a81933e52157f", 0xa7, 0x10000}, {&(0x7f0000000600)="4b1cc59929e402e014b47f0528fac9bf7864de2dc4421356f320e70249ef8f9771d24164c88c1e6d7628385e5da48a0b20c39927442c120de7ba6c2ba9226134910c33beeebbb18ba1f454b2202078c4593bf2aec490f444c7d276ec90b8db845e8c2a883d457a2dd17fd139d1f9b121c4b69fee999ba94172dd60e7b08e32360e19b4e24751a19374be024acd0653573f6d15baa3e13557f66b2b0041cb99cba76b3a72387e50b713975410c3365094e0f6fb508f2b86ff976f9a7e52e8cd146f660fe5850d6ed786db674dc1304d2031a8c15abda4abcb3a3b908406519edf15c7534f51c60968579aaf0d1d820efa576fc9dbb3947030", 0xf8, 0x4}, {&(0x7f0000000700)="bb57b574f50fbcbaba7033bb0d1e09a864332be39b7607f10483251003ea2216aa9cd5a2fd672a9351817584b79f17cec12cecdd441354ed6a49d76138bf6b165cbc74ae5f5463afaf4155add2437a1ec32a45782ad3af934391a129759b2744c1a09cfeb1578a3813e3e679ba62552b0e5d5db91984ce62de495748c8fb9b34f8febecf2fb1a7", 0x87, 0xa94}, {&(0x7f0000000480)="e77f85f31d826cfe4a7e782ece66cfbdcce575527a494cb0bcfdc31fc03e733582647d98e092b650d0f3bf73b6615ecb9026473bdef7282354b34d935cd0ed4cd0ab81b89520d5e37f6be035d9abef", 0x4f, 0xe6}, {&(0x7f0000000340)="c9009c1401bccfffeff7d10eb2fb16e991466ca641fdb9a6", 0x18, 0x9}, {&(0x7f0000000580)="4949e797f9c1e9ba123e4a33965678322efc1627ef95fb4ed616b9043b304f242197ff6366685a671b3bab727c76b0bc76da71578fe5a7040e", 0x39, 0x9}, {&(0x7f0000000900)="c195e9cd71e4f36530de4fb30075d443e731cd7d1b79057269e0f0dea10fd690a7f711a7526f65e6bc267ec9c3f36be12c34cae8c3a9f2ec9ce19ec281a6a33bd80682b6a56d86a654bb98e6145cc3b49ffeef7246f761f6cd5c1a3e73afcf0e0df39f31984e472b29f8be933ae26e8d138233ea53d79bc3d1c2adecbade5ac087d0a12d916d688323823014e1d788399a01b49bfd228e06fb65848dc90a37b34aa281b6ad3c2c032fff07e20ca459de5c83f501dedf9a88766b296a", 0xbc, 0x8}, {&(0x7f00000009c0)="5730dc9192999c1bdde5659848d1b9e366e9e18ffd29784d2fb9a4c450b90a6464e81fe21b807ed714c2e0db1a5e5d278469b7063a7de28efbc4437f191410897e7511f4a15b7d85814360f40b37a967090ffe6cafbce55244c2bd2f8eb31beddb9b252169a695c38b55a800db14cd07159174850f8292c87b31ed87bc62a1b98288da78b31989bee3d5d6940d84af68ba761083e263c969f83a770b73f6f4acc1b6c116242112d445122342129faf1d14cdc09208cbc6f770ebc41a8270fafbed4ca803aa202f7bc67189403809df186a292ca26082e15260c5898fcdbce19d899abf5ede", 0xe5}], 0x400, &(0x7f0000000c80)={[{@dmask={'dmask', 0x3d, 0x40}}, {@dmask={'dmask', 0x3d, 0x67}}, {@errors_continue='errors=continue'}, {@uid={'uid', 0x3d, r3}}, {@case_sensitive_yes='case_sensitive=yes'}], [{@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, 'security.selinux\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) 03:57:14 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) getpgid(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0x3ef, 0x0, 0x0) tee(r2, r1, 0x8, 0x8) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x101000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x9, 0x1, 0xdffbee0}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={r5, 0x7}, 0x8) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000040)=0x2000) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000300)=0x80, 0x4) 03:57:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d244245e7bd0f231bbeabe441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb285989100"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x4}}, 0x10) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x1f, 0x0, [], {0x0, @bt={0x8a, 0x12, 0x0, 0x3, 0x8, 0x80, 0x3, 0x43ddf9bb, 0x7, 0x4, 0x1, 0x28f, 0x5, 0x7fff, 0x10, 0x20}}}) 03:57:15 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x432) 03:57:15 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1710.314239] binder: 21257:21264 unknown command 0 [ 1710.356529] binder: BINDER_SET_CONTEXT_MGR already set 03:57:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe630c4000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:15 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r2, 0x0, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) close(r3) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cgroupvmnet0bdev^vboxnet1security\x00') getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000000c0)=0xfffffffffffffdc6) socket$tipc(0x1e, 0x5, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x4e, 0x7e, 0x6, 0x7}, {0x1ff, 0x43d, 0x528, 0xff}, {0xfffffffffffffc01, 0x0, 0x80000000, 0x8000}, {0x3, 0xffffffff00000001, 0x2, 0x5}, {0x6, 0x6d6a, 0x81, 0x1}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1710.582315] binder: 21297:21298 unknown command 0 [ 1710.589317] binder: BINDER_SET_CONTEXT_MGR already set 03:57:15 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0xfffffffffffffffc, &(0x7f0000000040)={0x0, 0x1000002, 0x5, 0x0, 0x1000000000000, 0x0, 0x0, 0x40000000004000}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000500)={0x7f, 0x5, 0x81, 0x72, 0x8, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000007, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x2, 0xcc0, 0x5e, 0x0, 0x0, 0x4, 0x2084, 0x3, 0x80, 0xfe1, 0x5, 0x1ff, 0x3b96, 0xfffffffffffffc00, 0x1, 0x8000, 0x8, 0x0, 0x4, 0x8, 0x7, 0x1, 0x5bf6, 0x4, 0x400, 0x1, 0x8, 0x9, 0x7c56, 0xfffffffffffffffe, 0x7, 0x52d, 0x5, 0x9, 0x3ff, 0x1, 0x0, 0x1c5, 0x2, @perf_config_ext={0x8001, 0x100000001}, 0x10200, 0x6, 0x6, 0x1, 0x1, 0x7, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x80, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000340)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000480)={0x60, 0x0, 0x5, {{0x101, 0x0, 0x8, 0x1, 0x7fa2, 0x5b, 0x4}}}, 0x60) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x4000, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x98a) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000000)="46f9feea04295ecf03b3be46f0add007b5e1ddfad0981b55d5091d16b497a1e8987cd0d50da15e33a4fe261018fccc098997398ce38f6178751c558ceb00", 0x3e, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}) 03:57:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:15 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1700000000000000) 03:57:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1710.764044] Unknown ioctl 35111 [ 1710.769090] binder: 21314:21320 unknown command 0 [ 1710.791912] Unknown ioctl 44664 [ 1710.802818] binder: BINDER_SET_CONTEXT_MGR already set 03:57:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9631040, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1710.853222] Unknown ioctl 35111 [ 1710.862696] Unknown ioctl 44664 03:57:15 executing program 3: unshare(0x8008000) r0 = mq_open(&(0x7f0000000000)="1e8ff38e696e757873656c696e7578003779a1f904a9f35cf76e132c616665bfa83220912e3cb535a3d48d5207b3497a34f54f59b6345f00339c1c433bf0a411c9fe2c447d5fec9725b4aaa278eb2dcb7fbe108e", 0x82, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0xffffffffffffffff}) clock_settime(0x6, &(0x7f0000000300)) mq_timedsend(r0, 0x0, 0xfffffffffffffc77, 0x8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x102e}, {r0, 0x9b72efbdb4fbfe4}, {r0, 0x8004}, {r0, 0x1}, {r0, 0x10}, {r0, 0x501}, {r0, 0x441}, {r0, 0x2104}, {r0, 0x40}, {r0, 0x80}], 0xa, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000280)={0x1}, 0x8) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000600)="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", 0xdb32baaffc3b7b28}], 0x800000, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:15 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1711.052433] binder_thread_write: 9 callbacks suppressed 03:57:15 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1711.112556] binder: 21354:21355 unknown command 0 [ 1711.120750] binder_alloc_mmap_handler: 8 callbacks suppressed [ 1711.167495] binder: BINDER_SET_CONTEXT_MGR already set [ 1711.182596] binder_alloc_new_buf_locked: 8 callbacks suppressed 03:57:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x7ff, 0x800) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x593800, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r5, 0x1}}, 0x18) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1711.226940] binder_transaction: 9 callbacks suppressed [ 1711.246294] binder: 21354:21355 unknown command 0 03:57:16 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xff07040000000000) [ 1711.292036] binder_release_work: 11 callbacks suppressed 03:57:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40086310, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:16 executing program 3: unshare(0x8000000) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x2000, 0x0) r4 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000feb000/0x14000)=nil, 0x7000) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x10000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000280)=""/23) recvfrom$unix(r2, &(0x7f0000000300)=""/216, 0xd8, 0x0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xffffffffffffffdd, 0x0, 0x0) 03:57:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) r2 = semget(0x2, 0x7, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x20, 0x9]) timer_getoverrun(0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0xff, 0x80000001}, 'port0\x00', 0x10, 0x20, 0x80, 0x400, 0x4, 0x0, 0x5, 0x0, 0x1, 0x401}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "3754a6496895e2a2471e089a21633394097f21e0"}, 0x15, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="6f81f437e23ccd34", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="ddd1ed892a7b352a4857b5dbdf79"], @ANYBLOB="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"]) 03:57:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000240)={0x5, &(0x7f0000000900)=[{}, {}, {}, {}, {}]}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, &(0x7f00000001c0)='vfat\x00') ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000180)) 03:57:16 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x830e000000000000) [ 1711.701006] FAT-fs (loop2): invalid media value (0x08) [ 1711.758836] binder: 21411:21419 unknown command 0 [ 1711.827431] binder: BINDER_SET_CONTEXT_MGR already set 03:57:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x630c, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:16 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x6) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) [ 1712.034683] binder: 21446:21447 unknown command 0 [ 1712.072549] binder: BINDER_SET_CONTEXT_MGR already set 03:57:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000003c0)=""/225, &(0x7f0000000140)=0xe1) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x263044000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x204, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x2a, 0x7, 0x2, {{0x1d, 'em0wlan1\'posix_acl_accessproc'}, 0xfffffffffffeffff}}, 0x2a) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:17 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2e00000000000000) [ 1712.303459] binder: 21468:21475 unknown command 0 [ 1712.311513] binder: BINDER_SET_CONTEXT_MGR already set 03:57:17 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x6, {0x4, 0x9a, 0x64, 0x0, 0xffffffffffffffe1, 0x6}}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8631040, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1712.536672] binder: 21500:21502 unknown command 0 [ 1712.544289] binder: BINDER_SET_CONTEXT_MGR already set 03:57:17 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x440000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffff) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x0, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='ubi2:'], &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, &(0x7f0000000140)='adfs\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x363084000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:17 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xe0000) 03:57:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x800, "23e522d1c36e0e5dbcef3fa8d0338f56a6b6833f8f1b5339bd5bbe0e7c1c8070", 0x3, 0x1000, 0x9, 0xffffff, 0x2}) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1712.747126] binder: 21522:21525 unknown command 0 [ 1712.765782] binder: BINDER_SET_CONTEXT_MGR already set [ 1712.777541] FAT-fs (loop5): bogus number of reserved sectors [ 1712.793100] UBIFS error (pid: 21536): cannot open "ubi2:vhost-net", error -19 [ 1712.794710] FAT-fs (loop2): bogus number of reserved sectors [ 1712.818583] binder: 21522:21525 unknown command 0 03:57:17 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0xd) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1712.913651] UBIFS error (pid: 21548): cannot open "ubi2:vhost-net", error -19 [ 1712.933578] FAT-fs (loop2): bogus number of reserved sectors 03:57:17 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:17 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xf6ffffff) [ 1713.032157] FAT-fs (loop5): bogus number of reserved sectors 03:57:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r3, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1713.088774] binder: 21568:21572 unknown command 0 03:57:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4630440, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1713.119946] binder: BINDER_SET_CONTEXT_MGR already set 03:57:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000240)) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x1, 0xffffffffffffff9c}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f00000002c0)={0x6, 0xb01a, 0x3ff, 0x2, 0xf6d4, 0x1, 0x2}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) openat$cgroup(r5, &(0x7f0000000340)="73797a1200", 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x80000000, 0x7, 0x8000, 0x7, 0x9, 0x4, 0x7}) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000003c0)={0x0, 0xffffffffffffff96, 0xfffffffffffffffc, [], &(0x7f0000000300)=0x400}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) 03:57:18 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) io_setup(0xff, &(0x7f0000000140)=0x0) io_getevents(r3, 0x2, 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x16a5, 0x208000) ppoll(&(0x7f0000000280)=[{r2, 0x100}, {r1, 0xc000}], 0x2, &(0x7f0000000400), &(0x7f0000000440)={0x1}, 0x8) mkdirat(r4, &(0x7f0000000480)='./file0\x00', 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)="2c5ccd766d6e65743162646576295d00") prctl$PR_SET_TIMERSLACK(0x1d, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x9) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e22, @local}}, 0x0, 0xffffffffffffff7f, 0x0, "e2fbb5e9d75637a395c5d421833d0c3dee18beb847f134626f2958291ff214060283052b5ae40d6816e301f10c44fb644dfd3788cc4cd799eedb7a1055395deb3ecba677531b5dc5b2907ee7080373e3"}, 0xd8) [ 1713.322620] binder: 21599:21603 unknown command 0 03:57:18 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x31303553, 0x100000000, 0x80, 0x3, @stepwise={{0x40, 0xfffffffffffffff9}, {0x2, 0x10a}, {0x3f, 0x4b4}}}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1713.405615] binder: BINDER_SET_CONTEXT_MGR already set [ 1713.416413] binder_thread_release: 7 callbacks suppressed [ 1713.422228] binder_release_work: 7 callbacks suppressed [ 1713.443789] binder_send_failed_reply: 7 callbacks suppressed 03:57:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:18 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x33000000) 03:57:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x5}, 0x8) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338d18fc66a554c0bbbe7d160245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01aff0300000000020000001584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000300)=0xd75) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xb8, 0x4, 0x1, "ef7f1198baa2f89340a8c6d91625e931", "b4375596aa8bb635fb1adf03568a9661ea1b9d068fe24753d0d88f93c0450beb4df1f81cf23ffc6822d160f3b1099870238deddd7f5e3f5ab778256ab9008bf3866a0b5b298717fe2aec1638f4fb98a9b42b352890405ada81d5928371a0feb5cdb7382b1decfaaf3755a78d7cf8e265c8afdda5c111004a98a5dc761718b651f73aca52aba7ea60d557493ad42851333ecdc6047eed52f23e6dabfca4adf4a18afc66"}, 0xb8, 0x1) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000001c0)=0x8) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1713.716635] binder: 21631:21639 unknown command 0 [ 1713.751195] binder: BINDER_SET_CONTEXT_MGR already set 03:57:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x1fffc, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1713.964522] binder: 21660:21664 unknown command 0 [ 1713.975793] binder: BINDER_SET_CONTEXT_MGR already set [ 1713.981468] binder: 21660:21664 unknown command 0 03:57:18 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x34040000) 03:57:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3630840, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000000080), r3, &(0x7f00000000c0), 0x1ae000000, 0x8) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1714.075098] binder: 21673:21674 unknown command 0 [ 1714.081702] binder: BINDER_SET_CONTEXT_MGR already set [ 1714.088097] binder: 21673:21674 unknown command 0 03:57:18 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) accept4$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @empty, 0x5}}, 0x6, 0x9}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1714.310552] binder: 21699:21704 unknown command 0 [ 1714.343531] binder: BINDER_SET_CONTEXT_MGR already set 03:57:19 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x1) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x100000000) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)=0x2, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0xaaaaaaaaaaaa7aa, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) unlinkat(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x200) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x3a) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x8, 0x4e}, &(0x7f0000000380), 0x1400) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20042, 0x0) connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}}}, 0x406) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000400), 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340), 0x4) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000640)) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) r6 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000001880)=0x6, 0x4) 03:57:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4008630a, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:19 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x7a) 03:57:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r4 = shmget(0x0, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil) shmctl$SHM_LOCK(r4, 0xb) [ 1714.564178] binder: 21732:21733 unknown command 0 [ 1714.573002] binder: BINDER_SET_CONTEXT_MGR already set 03:57:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:19 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000004200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/250, 0xfa}], 0x1, &(0x7f0000000140)=""/27, 0x1b}, 0x63}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000700)=""/177, 0xb1}], 0x5, &(0x7f00000007c0)=""/151, 0x97}, 0x2}, {{&(0x7f0000000880)=@ipx, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/129, 0x81}, {&(0x7f00000009c0)=""/170, 0xaa}, {&(0x7f0000000a80)=""/93, 0x5d}, {&(0x7f0000000b00)=""/152, 0x98}], 0x4, &(0x7f0000000c00)=""/214, 0xd6}, 0x1}, {{&(0x7f0000000d00)=@rc, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/160, 0xa0}, {&(0x7f0000000e40)=""/93, 0x5d}, {&(0x7f0000000ec0)=""/167, 0xa7}, {&(0x7f0000000f80)=""/31, 0x1f}], 0x4, &(0x7f0000001000)=""/66, 0x42}, 0x442}, {{&(0x7f0000001080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/249, 0xf9}, {&(0x7f0000001200)=""/24, 0x18}, {&(0x7f0000001240)=""/121, 0x79}, {&(0x7f00000012c0)=""/176, 0xb0}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000001380)=""/114, 0x72}], 0x6, &(0x7f0000001480)=""/41, 0x29}}, {{&(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001540)=""/122, 0x7a}, {&(0x7f0000002700)=""/254, 0xfe}, {&(0x7f00000015c0)=""/178, 0xb2}, {&(0x7f0000002800)=""/39, 0x27}, {&(0x7f0000002840)=""/48, 0x30}, {&(0x7f0000002880)=""/56, 0x38}, {&(0x7f00000028c0)=""/138, 0x8a}, {&(0x7f0000002980)=""/115, 0x73}, {&(0x7f0000002a00)=""/52, 0x34}], 0x9, &(0x7f0000002b00)=""/146, 0x92}, 0x100}, {{&(0x7f0000002bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c40)=""/14, 0xe}, {&(0x7f0000002c80)=""/231, 0xe7}, {&(0x7f0000002d80)=""/11, 0xb}, {&(0x7f0000002dc0)}], 0x4}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002e40)=""/156, 0x9c}, {&(0x7f0000002f00)=""/41, 0x29}, {&(0x7f0000002f40)=""/104, 0x68}], 0x3, &(0x7f0000003000)=""/4096, 0x1000}, 0x8}], 0x8, 0x40, &(0x7f0000004240)={r2, r3+10000000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004280)={'erspan0\x00', r4}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x2) [ 1714.826174] binder: 21759:21762 unknown command 0 [ 1714.846034] binder: BINDER_SET_CONTEXT_MGR already set 03:57:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x163404000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:19 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000300)="3d17f0623d080e0afd1149c2a030d3c026b8f436e1fbdca928eaa004daa02777eec5a120951e1e7491c823cef6a4d7efa6038438f2ad53878259c66bad1ccc449c6456690f26f3adac54407dc399a0779fb00a00e790e13e5983f7b0eba3c0291e420c498890d3cf2858d202067993ede37e66d9", 0x74, 0xffffffffffffff61}], 0x808010, &(0x7f00000004c0)={[{@fat=@dmask={'dmask', 0x3d, 0x80000000}}, {@shortname_win95='shortname=win95'}], [{@euid_eq={'euid', 0x3d, r2}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure='dont_measure'}, {@smackfshat={'smackfshat', 0x3d, '!selinuxselinux\x00'}}, {@fowner_lt={'fowner<', r3}}]}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) getsockopt$llc_int(r4, 0x10c, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1715.088752] binder: 21784:21789 unknown command 0 03:57:19 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x42e) [ 1715.162494] binder: BINDER_SET_CONTEXT_MGR already set 03:57:19 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) mount(&(0x7f00000000c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000000280)='./file0\x00', 0x42, 0x200) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x101000) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10630840, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1715.515778] binder: 21821:21829 unknown command 0 03:57:20 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200002, 0x0) r1 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0x4000800}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000022000100000000000000000004000c0008100c0079fbaf083fb71df16870381f769c6a27573a2cf989535a8b598173f89010ada5add80d7bc38e8ae1b60685", @ANYRES32=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000002c0)=[0xfffffffffffffff7]) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x400000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2000001, 0x0, 0x80020) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) r3 = dup2(r0, r0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000000)) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x2, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:20 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf630c40, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1715.720989] binder: 21844:21847 unknown command 0 [ 1715.746242] binder: BINDER_SET_CONTEXT_MGR already set 03:57:20 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xc000000000000000) 03:57:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:20 executing program 3: unshare(0x8000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x65}, 0x4) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1715.993681] binder: 21873:21875 unknown command 0 03:57:20 executing program 4: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000005c0)=0xfffffffffffffef7) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1716.024401] binder: BINDER_SET_CONTEXT_MGR already set 03:57:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:21 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0xffffffffffffffe8, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200401, 0x0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000000c0)={0x6, "f4ad06076ee4833d020bfd092a369837c3a1a571dfbf5ef060d23d8f685e415d", 0x6, 0x428, 0x833, 0x6, 0xb, 0x3, 0x58, 0x4}) ioctl$TIOCCONS(r2, 0x541d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) fstat(r1, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x1000, 0x827, 0x7}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x5, 0x0, 0x8004, 0x4, 0x20, 0x7, 0x401, 0x7, r3}, 0x20) [ 1716.298280] binder_thread_write: 12 callbacks suppressed [ 1716.325791] binder: 21898:21917 unknown command 0 [ 1716.368734] binder_alloc_mmap_handler: 7 callbacks suppressed [ 1716.381914] binder: BINDER_SET_CONTEXT_MGR already set [ 1716.388433] binder_alloc_new_buf_locked: 7 callbacks suppressed [ 1716.395854] binder_transaction: 9 callbacks suppressed [ 1716.410110] binder: 21898:21917 unknown command 0 03:57:21 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x3504000000000000) [ 1716.423161] binder_release_work: 9 callbacks suppressed 03:57:21 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) timer_getoverrun(0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40106308, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f0000000080)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x200800, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x13) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0)) 03:57:21 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000400)=""/182, 0xb6, 0x101, &(0x7f00000004c0)={r1, r2+30000000}) unshare(0x8000000) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x301) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x9, 0x9}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000300)={r6, 0xc4, "afc4828b787041c06258110d631ebdbbc80eb942cb55a9e44e33596d14c128958b4822bdcd20ad126774af48685a15d9efcec52c13e64a947bf0129e43ccaa7783265092fa478ce9afea32ec31698028c74ddb5ce0efd821887f606b787a228487c5a067ff0b80e620b7d434c15b443c046c427eeb5e8c2c01320ae7bb7af5a007043347a1d51d0df534d2f9baaa22ac0c72f2c154ef313deab84edd38d4ab0eddb64310e503a82c358c9cffa800bcfc029818231bf1d3dbc5e6309925639460dfb162a7"}, &(0x7f0000000100)=0xcc) [ 1716.687475] binder: 21951:21955 unknown command 0 [ 1716.701187] binder: BINDER_SET_CONTEXT_MGR already set 03:57:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:21 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x30040000) 03:57:21 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f6, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x1000, 0x0, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getpeername(r1, &(0x7f0000000000)=@ethernet={0x0, @random}, &(0x7f00000000c0)=0x80) [ 1716.976880] binder: 21988:21992 unknown command 0 [ 1717.020262] binder: BINDER_SET_CONTEXT_MGR already set 03:57:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x28800, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0)) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:21 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x6d3872d54108f565) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1634040, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x40, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) getsockname$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) sendto(r2, &(0x7f0000000080)="e4a057c4a123ed2cbad0f6a91cb7271d3f125b90608366738deceb20bf7989a034fb33a8be0b8a9d18bfc43b3911f7ddebc20194e2e65e48c5d378faea336bb5a9418b461646367d2612e75fdc112ba9aa775311fade7154c0793b21ca3a1e5f", 0x60, 0x4004, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @local}, 0x4, 0x3, 0x0, 0x1}}, 0x80) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1717.318368] binder: 22018:22024 unknown command 0 03:57:22 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x3000000) [ 1717.400893] binder: BINDER_SET_CONTEXT_MGR already set 03:57:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r4 = getuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f00000002c0)={0x7d, 0x7d, 0x1, {{0x0, 0x66, 0x9, 0x8, {0x60, 0x1, 0x2}, 0x3000000, 0xde9, 0xffffffffffff0000, 0xe2b, 0x9, '/dev/dsp\x00', 0x1e, "2d3a73656375726974793a232b76626f786e657431425d6367726f7570b2", 0x0, "", 0xc, 'vmnet0cpuset'}, 0x2, '*,', r4, r5, r4}}, 0x7d) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:22 executing program 5: socketpair(0xb, 0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x16000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe247}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r2, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000300)=0x6, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1717.628366] binder: 22050:22054 unknown command 0 03:57:22 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xcb5e}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x100000001}, 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1717.695931] binder: BINDER_SET_CONTEXT_MGR already set 03:57:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:22 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2904) 03:57:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x400, 0x101000) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000400)={0x0, 0x3, 0x1, &(0x7f00000003c0)=0x10000}) unshare(0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200100, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x800}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x4, 0x0, 0x0, 0x0, 0xff}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) r3 = inotify_init() socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r2, r3, 0x80000) socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200001, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x4}, @mss={0x2, 0x1f}, @sack_perm, @mss={0x2, 0xf00}, @sack_perm, @window={0x3, 0x3, 0x100000000}], 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="40008d857752ce22bb84956a14df811c8c2ef5b35d78d7646b78162c72cdb6d136226d87e8dac45e2ab96ac7860f6786e857f894f43825f515c5870b40b696b57ae16f792b0e83ddde91dcc3e0b9b30f325585134b92a46ea1680992d802cd74d937f1b3e3c308ad930082884ee7", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x4, 0x0, 0x10000, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r4, 0x3}) r5 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1718.020544] binder: 22090:22093 unknown command 0 [ 1718.046283] binder: BINDER_SET_CONTEXT_MGR already set 03:57:22 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x30, 0x62ae8add) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:23 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x1ac, 0x2, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 03:57:23 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2400) [ 1718.362977] binder: 22124:22131 unknown command 0 [ 1718.383589] binder: BINDER_SET_CONTEXT_MGR already set 03:57:23 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x4, 0x89f, &(0x7f0000000300)="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", &(0x7f00000000c0)="7875de1d3996e06da61a498ee569d3d90207963a0e41584a564e39465d044d2e9a5bf8cc5d54761a6487b70f6a8b87e56be61b0b3d0505318dd2cc757789c15c7979da8ac8", 0x1000, 0x45}) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x8000) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:23 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0xa, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x1a, 0x1, @thr={&(0x7f0000000600)="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", &(0x7f0000000340)="ef05adfcdde9ea1e3e6862393350383acc058ab3139b92cc915bb2b0d8c0b0433cadd6088f01d103ffc7"}}, &(0x7f0000000400)=0x0) timer_getoverrun(r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet6_dccp_int(r3, 0x21, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x860, 0x10, 0x101, 0x8}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r4, 0x1}, &(0x7f00000001c0)=0x8) [ 1718.565621] binder: 22149:22153 unknown command 0 [ 1718.583005] binder: BINDER_SET_CONTEXT_MGR already set [ 1718.670378] binder_release_work: 7 callbacks suppressed 03:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1063084000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:23 executing program 3: unshare(0x8000000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x545200, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/164) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r1, &(0x7f0000000300)=""/204, 0xbc, 0x0, 0x0) 03:57:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x81, 0x4, 0x9, 0xb8, 0x0, 0x2, 0xacf}, 0x1c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x9}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:23 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xe00) [ 1718.859292] binder: 22189:22194 unknown command 0 [ 1718.866225] binder: BINDER_SET_CONTEXT_MGR already set [ 1718.872437] binder_thread_release: 5 callbacks suppressed 03:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1718.903838] binder_send_failed_reply: 5 callbacks suppressed [ 1719.027765] binder: 22212:22213 unknown command 0 03:57:23 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r3, 0x1, 0x34, "2168a12341ce9f1d0aebec83e76cdfc2d15ae07c42b31fe563843c47d8f382f8d4b93256c47f7ee11c54b94e3e5441d2b7651e33"}, 0x3c) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, &(0x7f00000000c0)) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1719.056169] binder: BINDER_SET_CONTEXT_MGR already set 03:57:23 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x634040, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:24 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2000000000000) 03:57:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) ioctl$RTC_WIE_ON(r1, 0x700f) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000080)={{0x3f, @multicast1, 0x4e1e, 0x1, 'sed\x00', 0x0, 0x8, 0x3}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e20, 0x2, 0x1000, 0x6, 0x9}}, 0x44) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1719.342405] binder: 22242:22247 unknown command 0 [ 1719.380311] binder: BINDER_SET_CONTEXT_MGR already set 03:57:24 executing program 3: unshare(0x8000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x29) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:24 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0xfffffffffffffffe, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x200, 0x1, 0x5, 0x5, 0x5, 0x80000000, 0x400, 0x3ff, 0x0, 0x9, 0x7, 0x6, 0x7f}, {0x8, 0x100000000, 0x0, 0x100000001, 0x8032, 0x8001, 0x1, 0x101, 0x8, 0xffffffff, 0x8001, 0x1f, 0xe09}, {0x1000, 0x0, 0x2, 0x20, 0x6, 0x5c73, 0x6, 0x7f3, 0x0, 0xc1, 0xfffffffffffffe01, 0x3, 0xc1c2}], 0x200}) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 03:57:24 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x40000000) 03:57:24 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r1, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) fchdir(r1) r4 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000080)) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1719.750659] binder: 22290:22296 unknown command 0 03:57:24 executing program 3: unshare(0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x4d, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) tkill(r3, 0x8) [ 1719.811938] binder: BINDER_SET_CONTEXT_MGR already set 03:57:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd63000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x101800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:24 executing program 3: unshare(0x8000000) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x1, 0xfffffffffffffff7, 0x3f, 0x5, 0xfffffffffffffc01}) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)='\\\x00', 0xfffffffffffffffc) keyctl$search(0xa, r4, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, r5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) faccessat(r1, &(0x7f0000000400)='./file0\x00', 0x20, 0x900) connect(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x2, {0xa, 0x4e23, 0x2, @mcast1, 0x7}}}, 0x80) umount2(&(0x7f0000000380)='./file0\x00', 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140), 0x4) [ 1720.051496] binder: 22327:22331 unknown command 0 [ 1720.106081] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.131508] binder: 22327:22331 unknown command 0 03:57:24 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x300) 03:57:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x463044000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:25 executing program 3: unshare(0x40000400) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)=ANY=[@ANYBLOB="47feffffffffffff040000000000000001000000000000004c3d4b3f5b208f51d63d40d262ac0b7b070aa3ac96a93b2fc157c04ea404259c843d4f47f11d51613db31e883472b3518a792d78f2fe3230d14c72574e92c74401851ef45325046b6a367c1691c1573d9debad4e658507572bb705c88259c81df0976d350a9969915c03a975ee9a5abf52a3f4d0a880798e1f98397bb63a6641b89a2f883bf392d3ec46489639426b10a131faca575a0e28c42e7d7f78cda54d754bd7", @ANYRES32=r0, @ANYBLOB="00000000030000000000000000000000000000000000000000000000"]) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)={r4, 0x101, 0xa2, "e3474e4fc15e75ad360328963da499780109deeac624c4a50f2328e497ad019c562582252e3f69d97e846fd3370d689a22609ae7bf8b64a435bdd3fa33b06ced55b7da4c7c804f3f421882a244835f696ad07333df046a9227d0d37d7a76fdfc0a7a6d6079a3fe17e64b1eeed9eebd6db28c4e6bb288aadb2252b3e80ae33771cb4934583ae7a90b232869775f5e7aa998aeebf64cf333a944c991828cb470b092e8"}, 0xaa) 03:57:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1720.295483] binder: 22360:22361 unknown command 0 [ 1720.301389] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.308241] binder: 22360:22361 unknown command 0 03:57:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000600)={[], 0x10000, 0x2f5c7ff0, 0x9, 0x0, 0x5, 0x5000, 0x3000, [], 0xb7}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) umount2(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000140)=0x68) [ 1720.443803] binder: 22368:22377 unknown command 0 03:57:25 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x7db4be1051560694, 0x1}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:25 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x6800) [ 1720.663586] binder: 22405:22406 unknown command 0 [ 1720.669541] binder: BINDER_SET_CONTEXT_MGR already set 03:57:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:25 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80000000, 0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @loopback, 0x80000001}}, 0x3, 0x401, 0x3, 0x43b0000}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={r2, 0x2, 0x30, 0x100000001, 0x1f}, &(0x7f0000000300)=0x18) mq_timedsend(r0, 0x0, 0x3dd, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1720.883029] binder: 22425:22426 unknown command 0 [ 1720.898743] binder: BINDER_SET_CONTEXT_MGR already set 03:57:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x0, r1}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000240)=""/111, 0x6f}], 0x2, &(0x7f0000000300)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x6}, &(0x7f00000001c0)=0xe0, &(0x7f00000002c0)=0xfff, 0x80000001, 0x40, 0xc093, 0x8a46, 0x1, 0x5}}], 0x58, 0x40000c4}, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1720.958003] binder: 22425:22439 unknown command 0 03:57:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 03:57:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc630000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:25 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1000000000000000) 03:57:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0xfffffffffffffe7e) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:25 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='-wlan0+{GPL]!\x00'}, 0x30) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/uts\x00') mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1721.176243] binder: 22455:22461 unknown command 0 [ 1721.192098] binder: BINDER_SET_CONTEXT_MGR already set 03:57:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x630b, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:26 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x20000000001, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x0, &(0x7f0000000040), 0x8, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='9p\x00', 0x800000, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x20000000000000}}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@fowner_gt={'fowner>', r3}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@smackfsroot={'smackfsroot', 0x3d, '}eth0%selinux.}\\bdev-:vboxnet1@-/,proc\'bdevem1'}}]}}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1721.428387] binder_thread_write: 12 callbacks suppressed [ 1721.474644] binder: 22488:22492 unknown command 0 03:57:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) accept4(r4, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000000300)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) 03:57:26 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0xfffffffffffffd9f, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) getitimer(0x1, &(0x7f0000000000)) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1721.501129] binder_alloc_mmap_handler: 8 callbacks suppressed [ 1721.517901] FAT-fs (loop4): bogus number of reserved sectors [ 1721.532997] binder: BINDER_SET_CONTEXT_MGR already set [ 1721.539053] binder_alloc_new_buf_locked: 6 callbacks suppressed [ 1721.551916] binder_transaction: 6 callbacks suppressed [ 1721.557479] binder: 22488:22492 unknown command 0 [ 1721.566715] binder_release_work: 9 callbacks suppressed 03:57:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x4, 0x2, 0x7, 0x20, 0x3, 0x4}) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000001700)=""/4096) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x63404000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:26 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xfffffff0) [ 1721.661359] FAT-fs (loop4): bogus number of reserved sectors 03:57:26 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='!selinuxselinux\x00', 0x6e93ebbbcc0884f1, 0x2, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x400000}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8000, 0x0) write$P9_RLERROR(r2, &(0x7f00000000c0)={0x9, 0x7, 0x1}, 0x9) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0) [ 1721.799187] binder: 22531:22534 unknown command 0 03:57:26 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x4, 0x18}, 0xc) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40, 0x0, 0x3}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000600)=""/4096) [ 1721.857181] binder: BINDER_SET_CONTEXT_MGR already set 03:57:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40106309, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hostfs\x00', 0x80088, &(0x7f00000001c0)='\x00') timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1722.081192] binder: 22568:22570 unknown command 0 03:57:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f0000000080)=0x4) rt_sigtimedwait(&(0x7f00000000c0)={0x3}, &(0x7f0000000240), &(0x7f0000000140)={0x0, 0x1c9c380}, 0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:26 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xa0000) [ 1722.156047] binder: BINDER_SET_CONTEXT_MGR already set 03:57:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1263484000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:27 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x3}, &(0x7f00000000c0)=0x0) timer_getoverrun(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1722.343734] binder: 22592:22593 unknown command 0 [ 1722.375778] binder: BINDER_SET_CONTEXT_MGR already set 03:57:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) getsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000240)=""/214, &(0x7f0000000080)=0xd6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb63000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @local}}, 0x1f, 0x20, 0x0, 0x800, 0x12}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x2}, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:27 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2100) [ 1722.662385] binder: 22626:22631 unknown command 0 [ 1722.674124] binder: BINDER_SET_CONTEXT_MGR already set 03:57:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) recvmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f00000003c0)=""/159, 0x9f}], 0x6, &(0x7f0000000480)=""/65, 0x41}, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:27 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) r1 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0xffffffffffffffe0, 0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="850000007845e423cc"], &(0x7f0000000400)=0xd) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r2, 0xfffffffffffffff9}, &(0x7f0000000480)=0x8) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000000c0)=0xe4d7) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x2201}, {r3, 0x180}, {r5, 0xc000}, {r4, 0x220}, {r4, 0x201}, {r5, 0x4}, {r0, 0x1404}, {r3, 0x244}, {r0}, {r3, 0x1}], 0xa, &(0x7f0000000300)={r6, r7+30000000}, &(0x7f0000000340)={0x9}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:27 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001940)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getgid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) fstat(r2, &(0x7f0000001a40)) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) fcntl$getownex(r2, 0x10, &(0x7f0000001b80)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@mcast1, @in=@multicast1}}, {{@in=@broadcast}}}, &(0x7f0000001cc0)=0xe8) stat(&(0x7f0000001d00)='./file0/file0\x00', &(0x7f0000001d40)) getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001e80)={0x0, r1, 0x0, 0x8, &(0x7f0000001e40)='trusted\x00'}, 0x30) r3 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) poll(&(0x7f0000000340)=[{r3, 0x151}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c6, 0x0, 0x0, 0xfffffefb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ec0)={{{@in6=@mcast1, @in6=@dev}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001fc0)=0xe8) getegid() [ 1722.848908] binder: 22646:22651 unknown command 0 [ 1722.919494] binder: BINDER_SET_CONTEXT_MGR already set 03:57:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc63000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000240)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x8, @empty, 0x2}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x7, 0x0, 0x42, 0x7a1f}, &(0x7f00000002c0)=0x18) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000340)={0x0, 0x1, {0x20, 0x20, 0x2, 0x1a, 0x9, 0x3ff, 0x1, 0x127, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x3, 0x3, 0x1, 0x3, 0x3}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:27 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x400400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:27 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2600) [ 1723.174459] binder: 22684:22688 unknown command 0 03:57:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) ioctl$NBD_DO_IT(r1, 0xab03) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x4, "0c9e6a4c066a51b819221e6713e8026206accd853e472b6dc29735ee87d7ab65", 0x1, 0x1}) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:28 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r0, &(0x7f0000000300)=""/246, 0xf6) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x40}, &(0x7f00000000c0)=0x8) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000280)=0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r3, 0x1b85}, &(0x7f0000000140)=0x8) [ 1723.397089] binder: 22705:22709 unknown command 0 [ 1723.410015] binder: BINDER_SET_CONTEXT_MGR already set 03:57:28 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) getsockopt$inet6_int(r1, 0x29, 0x2516927c5ac3e4c6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1723.631207] binder: 22730:22731 unknown command 0 [ 1723.653401] binder: BINDER_SET_CONTEXT_MGR already set 03:57:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xee) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) connect$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x7, 0x4, 0x0, "9715f1388d076f513cf59b4c3d2b72a60b56d12190d90b7c80b8e671faa91d0d6b5b74021ced1b3077eab240ab38ef215ee7c1e19f5d1d7a2ccbfa3d708947", 0x28}, 0x60) setsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000080)=0x9, 0x8) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x20, 0x800) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="e0000002ac1414bb0100000003000000ac1414aa7f00551f3b6fc17c9986fea0000100000000"], 0x1c) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000600)=""/219) r5 = dup2(0xffffffffffffffff, r4) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000300)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x103, 0x5c9402aec2d7b42f, {0x3, 0xfffffffffffffffa, 0x80, 0x3}}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x7, 0x0, "ef8877ee9a637954dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb285c391"}, 0xd8) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000340)={0xd5, &(0x7f00000003c0)=""/213}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1000, 0x1018, 0x0, {"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"}}, {0x0, "327014a38666d7607eae4df84b17bb55aa91c5d1cf8d01c28720f266f6d94c7214dc"}}, &(0x7f0000000240)=""/141, 0x103c, 0x8d}, 0x20) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000080)={0x80, 0x1}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:28 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xa029, 0x7, 0x0, 0xf, 0x3, 0x8, "d44d880e5b475e89f077ff5b893308429acd30de63f64f5d8b20613d701aa11d88fcf336f7ec87f6af9991410db90d8f5f9ae61ff046c30f51df9805e718245a", "22255c33365e1320562814d4c221958ea383189bc9e3ffb809b625e32673c91e352f11d19ea2aa1f6dd02ae008b3502b485ab09e27342b055854619a0f25d255", "88a48842dd4027b4eb72d5ff5ba32717cf6cce06f7ca1e2eb2bf112f8b26b245", [0x8000, 0x7]}) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:28 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x407ff) [ 1723.852672] binder: 22752:22754 unknown command 0 [ 1723.906325] binder: BINDER_SET_CONTEXT_MGR already set [ 1723.982997] binder_thread_release: 8 callbacks suppressed [ 1723.988630] binder_release_work: 10 callbacks suppressed [ 1724.011272] binder_send_failed_reply: 8 callbacks suppressed 03:57:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:28 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x6, &(0x7f0000000580)={0x0, 0x20, 0x6, @thr={&(0x7f0000000600)="40ed99ccab060efa9f9fb731fb0c3b2899e8a181f1a564256688edeed6996899fc59212764f611c5827921643f0b80c3976fe65a0401deb492e56c7956c561758a79d4178d42983e0c6879589989f41ab62c74e3f0027540915ddf9c2e692d140f88378aa23fdb4722e4ace9eac4a619aeca7e90294d91a0a9dd8fd44a29", &(0x7f0000000680)="bf5d2c48ea87bd217411df5b783a29562b592d70591f47543dd35a4225c025d66a2c8a6fc0e2288f8e962be5abec992642ede891cadbbf171fa7b97162ca074dc16680418d67e3ee91ee52b2943e2c072b797e84bd0a8f824572bb2532eb7f21df1588357f3c142ddee7d3a9269a7c26b95f7fecd928fbaa0852adb2f3511fd8c89512c2481e60"}}, &(0x7f0000000740)=0x0) timer_getoverrun(r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x78) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000001c0), &(0x7f0000000240)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x4, @link_local, 'ifb0\x00'}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc8, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8acd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x65e85044}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x98d9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x52}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4c001}, 0x4040001) 03:57:28 executing program 3: unshare(0x3fffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/186, 0xba, 0x1, &(0x7f0000000040)) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000280)) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000480)={{0x0, 0x0, 0x2243, 0xfffffffffffffffa, 'syz0\x00', 0x10000}, 0x0, 0x400, 0x3fc, 0x0, 0x2, 0x80000000, 'syz1\x00', &(0x7f0000000440)=['\x00', '!selinuxselinux\x00'], 0x11, [], [0xee34, 0x100000000, 0x8, 0xd6]}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000005c0)={0x6, 0x9, 0xffffffffffff7fff, 0x7ec, 0x6, 0x7f, 0x20, 0x9, 0x4929, 0x45, 0x5, 0x80000000}) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in6}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x10040) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000400)) 03:57:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) ioctl$TIOCEXCL(r1, 0x540c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x5, 0x397) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1724.250825] binder: 22791:22796 unknown command 0 03:57:29 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xe83) [ 1724.320872] binder: BINDER_SET_CONTEXT_MGR already set 03:57:29 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x2) mq_timedsend(r0, 0x0, 0x0, 0xfffffffffffffffd, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000a180)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000140)=""/37, 0x25}, {&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/97, 0x61}], 0x6}}, {{&(0x7f0000001580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/116, 0x74}, {0xfffffffffffffffd}, {&(0x7f0000003680)=""/166, 0xa6}, {&(0x7f0000003740)=""/207, 0xcf}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/88, 0x58}, {&(0x7f0000000280)=""/36, 0x24}], 0x9, &(0x7f0000004980)=""/104, 0x68}, 0x2}, {{&(0x7f0000004a00)=@ipx, 0x80, &(0x7f0000007c00)=[{&(0x7f0000004a80)=""/196, 0xc4}, {&(0x7f0000004b80)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/4096, 0x1000}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/89, 0x59}], 0x5, &(0x7f0000007c80)=""/47, 0x2f}, 0x100000000}, {{&(0x7f0000007cc0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007d40)=""/99, 0x63}, {&(0x7f0000007dc0)=""/58, 0x3a}, {&(0x7f0000007e00)=""/32, 0x20}, {&(0x7f0000007e40)=""/81, 0x51}], 0x4}, 0xabce}, {{&(0x7f0000007f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000008180)=[{&(0x7f0000007f80)=""/211, 0xd3}, {&(0x7f0000008080)=""/212, 0xd4}], 0x2}, 0x9}, {{&(0x7f00000081c0)=@rc, 0x80, &(0x7f00000084c0)=[{&(0x7f0000008240)=""/163, 0xa3}, {&(0x7f0000008300)=""/63, 0x3f}, {&(0x7f0000008340)=""/161, 0xa1}, {&(0x7f0000008400)=""/170, 0xaa}], 0x4}, 0x10001}, {{0x0, 0x0, &(0x7f00000089c0)=[{&(0x7f0000008500)=""/142, 0x8e}, {&(0x7f00000085c0)=""/160, 0xa0}, {&(0x7f0000008680)=""/227, 0xe3}, {&(0x7f0000008780)=""/47, 0x2f}, {&(0x7f00000087c0)=""/193, 0xc1}, {&(0x7f00000088c0)=""/209, 0xd1}], 0x6}, 0x80}, {{&(0x7f0000008a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000008f00)=[{&(0x7f0000008ac0)=""/126, 0x7e}, {&(0x7f0000008b40)=""/95, 0x5f}, {&(0x7f0000008bc0)=""/219, 0xdb}, {&(0x7f0000008cc0)=""/124, 0x7c}, {&(0x7f0000008d40)=""/62, 0x3e}, {&(0x7f0000008d80)=""/174, 0xae}, {&(0x7f0000008e40)=""/138, 0x8a}], 0x7, &(0x7f0000008f80)=""/223, 0xdf}, 0x1}, {{&(0x7f0000009080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000009140)=[{&(0x7f0000009100)=""/17, 0x11}], 0x1, &(0x7f0000009180)=""/4096, 0x1000}, 0x81}], 0x9, 0x1, &(0x7f000000a3c0)={0x77359400}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40106309, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:29 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x1, 0x301d, 0x0, 0x0, 0x0, 0x1}}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:29 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) r1 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) sendmsg$xdp(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x2c, 0x0, r2, 0x1}, 0x10, &(0x7f0000000900)=[{&(0x7f00000000c0)="dba074d7cfcb769f9c515c56", 0xc}, {&(0x7f0000000400)="7484c8722c8113a1680bb05a9efbbe609e3c12ebe329a24a01099c7af4efc0000219e3ee92e9ff834886e8d07b77f0a98389d963f306a635a1ba7237d57d080446e5cbc972cb379ae676ca84b96ecc27efb8c0026d2b3bf286a363355e634b34432f0cae2c7020f3d7ee158a10969a359c62ea785ba9f31942602ed221a1b59e37931604b7e7fbbd9fb7314f6732cd201acd7bec97f017d1574c239698bfb6ae26cb0cd80962b25d7b917c9bf68461d5941c0249eeba51bb404bfb9b9e6ae0b206c9a8cb16bdd67403a5e775999b5fe186dd383dea7af4e85e1b64481ea3fd647daa", 0xe2}, {&(0x7f0000000100)="27bb733134a2fcd616209c79f285", 0xe}, {&(0x7f0000000500)="30f8fe44111b379eda19c809fbbfbb5b17110c4ff93152cf95fdb31faed1ece12f82d9bf98e8c626fde3a5c01a7d7007eb68ac5e2a1a4e15a12ede4c3088a358cc744c252bb331efb7c3d0c12f6472c286aa45e26ccad3f4a2aa23c84d176d3767e91c1726904eb34e201fb3024840943f3fb24bff9c7cb7123bfa73ababc928ebba1ed556e88cb2ccc44700d74fb388f0135738b147d12a8a8f52929e59ab25c6", 0xa1}, {&(0x7f0000000140)="9855573ae154f4a8f891ddd26886df6dc4a0103b037bee579ead7e3e", 0x1c}, {&(0x7f00000005c0)="0cb32d386217fef8f9809022235ac26b238a85cb1af5a20f089bf2c93c06616dbe0e6b16884e1a14ef09b7de78daf7413a200fc4b34b3bc944588ed898c8c57d11bab1279de4b1d85577ed3d58704a32f955f7fef66a78cd5711e738ae0f62fcf673695448f133d04e2dffa2f6c8c67aa4c191cacd8b24ed43af6a3f2c16e7add8", 0x81}, {&(0x7f0000000280)="6855a0e18363fb1edcbd854e83a3c585fb78c49f713606343d382547973fc39bdcd7162feb3a7a9881d9d0f4cd71c48b0d14ed5c319f", 0x36}, {&(0x7f0000000680)="df40484fc6f38b3db81554dd623d94c8ab334007a6d1607c5b4f4d2163ca5559bd91cdc97087c4da2ed0741d5c1124e3bfad4c60a152c32362d10cb5aa66bd18c4ef2a43a222035b7047abfa05ca1e9f31e4539796c4c3d297b460e372dc39153d9c2299f6ac2680b82c35250d52dac5faa6199f0e759ee4a868e890dca1a7f54a314365d0b8ce7a627207d51d61f18bf64356faacb036897279cdda9f66a78e13b1962e94f462dfa87042752327a50f231207e46b0c04b3297711088c177997de26e1deecdf34c73208cea820be91fb9f481b4fd502db5605ce9366dd519c4ed5bb", 0xe2}, {&(0x7f0000000780)="da64601441ce9a30f2614b4f457540c8919231da8b35debd275bc804b38f8cb638eb89f1baad77af10ed5d4b8b9f726a14082d6b966285650595603df7596cbad7c118402b117c85d68cdc0303743a94447c66845299c235ca498bccdcc473f0f006124381850efdeafbfc57763a29df1fda16976abb56a5cef309594fbaa98022768f97deb4373325642a2894d5d4e0c8d7b10f0abfd47fb977a09b90c2b2", 0x9f}, {&(0x7f0000000840)="80389d10e021b973107c2a9e0705e0f4d2f650c9a5839c9ffef078500a27e4124e876a734e6ac18902517ed521b3600e5781b879dd68ed64ab7090d1164f829553ce3e671bc06a90548e1f6001eeb0937f03fb4d2737f8565ac01c5ad601fc9fc007de240a541aa90d9908b51f579dd0ced9e299df8269a171ad4c3be8aa1cd98364aad963dd5f1d248e7e58501d800576addefe5de1ef3c0444f864cc38a07d5dcd4d1ac68083e253e68b7afc3140d2", 0xb0}], 0xa, 0x0, 0x0, 0x10}, 0x20000010) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1724.607669] binder: 22836:22838 unknown command 0 [ 1724.620594] binder: BINDER_SET_CONTEXT_MGR already set 03:57:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f00000005c0)=0x19d) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe630c4000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() write$P9_RLERROR(r1, &(0x7f0000000080)={0x15, 0x7, 0x2, {0xc, '/dev/uinput\x00'}}, 0x15) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1724.837807] binder: 22857:22861 unknown command 0 03:57:29 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xa00) [ 1724.887347] binder: BINDER_SET_CONTEXT_MGR already set 03:57:29 executing program 3: unshare(0x8000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_gettime(r0, &(0x7f00000000c0)) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xc}) 03:57:30 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x857, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000600)="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", 0x1000, 0x5}, {&(0x7f0000000140)="8cb91eb2c5af214de9074dea0328f7276da36f354ffd4a7bce762b", 0x1b}], 0x2000, &(0x7f0000000240)={[{@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x3}}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection'}}], [{@permit_directio='permit_directio'}]}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:30 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xb0) fchdir(r0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) flistxattr(r3, &(0x7f00000000c0)=""/69, 0xfedf) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1725.294039] binder: 22901:22903 unknown command 0 03:57:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x1004, 0x4) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1725.359638] binder: BINDER_SET_CONTEXT_MGR already set 03:57:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1063084000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:30 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x6c000000) 03:57:30 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x20000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000280)='%bdevuser+\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800001) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x30040) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9b0000, 0x9, 0x4, [], &(0x7f00000000c0)={0xb90bfb, 0x8, [], @string=&(0x7f0000000040)=0x583}}) [ 1725.605438] binder: 22939:22940 unknown command 0 [ 1725.611686] binder: BINDER_SET_CONTEXT_MGR already set 03:57:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63404000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) r3 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000080)=""/113, &(0x7f0000000140)=0x71) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioprio_set$uid(0x3, r4, 0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:30 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000140)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x28, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_create(0x7, &(0x7f0000000280)={0x0, 0x1d, 0x5, @tid=0xffffffffffffffff}, &(0x7f00000002c0)=0x0) timer_getoverrun(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) r4 = getpid() fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x1, 0x4, 0x7ff, 0xfffffffffffffffe, r4}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000240)=0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='/dev/uinput\x00', 0xfffffffffffffff8) keyctl$set_timeout(0xf, r4, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:30 executing program 3: unshare(0x8000000) r0 = memfd_create(&(0x7f0000000000)='!selinuxselinux\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xa0, 0x2, 0x80000000, 0x7, 0x7ff, 0x7}) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0xfffffc72, 0x8, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1725.851858] binder: 22960:22964 unknown command 0 [ 1725.918192] binder: BINDER_SET_CONTEXT_MGR already set 03:57:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:30 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'gre0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'ip6tnl0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000940)={@mcast1, 0x0}, &(0x7f0000000980)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80205}, 0xc, &(0x7f0000000d80)={&(0x7f00000009c0)={0x398, r2, 0x320, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x188, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x8, 0x3f, 0x81}, {0x7f, 0x4, 0x8000, 0x5}, {0xfff, 0x4, 0x1, 0x5}, {0x1, 0x2, 0x7f, 0xd33}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x18}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xe4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x447d8565}}}]}}]}, 0x398}, 0x1, 0x0, 0x0, 0x20008044}, 0x2400c015) mq_timedsend(r0, 0x0, 0xfff3, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0xffffffffffffffb0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5000080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="380326bd7000fddbdf250100000000000000014100000018001700000008000000077564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x4000, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:31 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2c00) [ 1726.228195] binder: 23000:23010 unknown command 0 [ 1726.245217] binder: BINDER_SET_CONTEXT_MGR already set 03:57:31 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000140)) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x10, 0x1, 0x8}}, 0x14) open(&(0x7f0000000080)='./file0\x00', 0x180c0, 0x2) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:31 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000400)=""/204, 0x117, 0x7fe, 0x0) [ 1726.424121] binder: 23023:23027 unknown command 0 [ 1726.465241] binder: BINDER_SET_CONTEXT_MGR already set 03:57:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="49537beb3d303030303030303030303030303030303030303032b0312c6d6f64653d30303030300d30303030303008703030303030303030322c6d6f64753d30303030303030303030303030303030303030303030302c6d6f64653d30303030b01c5e55491f1777303030303030308f1a30302c61707072616973655f747970653d696d617369672c657569643d", @ANYRESDEC=r5, @ANYBLOB=',euid=', @ANYRESDEC=r6, @ANYBLOB=',\x00']) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000600)=""/250) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1726.550593] binder_thread_write: 9 callbacks suppressed [ 1726.587209] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1726.642130] binder: 23023:23050 unknown command 0 [ 1726.647146] binder_transaction: 5 callbacks suppressed 03:57:31 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0xfffffffffffffffc}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x20000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000100)={0x0, {0x48fefbaa, 0x92}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x20500) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r4, 0x6, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000000c0)=0x78) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7fffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1726.756565] binder_release_work: 7 callbacks suppressed 03:57:31 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2804) 03:57:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:31 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1, 0x30, 0x7f}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:31 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1727.008799] binder: 23089:23094 unknown command 0 [ 1727.024843] binder_alloc_mmap_handler: 8 callbacks suppressed 03:57:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10083, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)={0x3, "dfa421"}, 0x4) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000200)) fsetxattr$security_capability(r2, &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x7, 0x1}]}, 0xc, 0x1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1727.052605] binder: BINDER_SET_CONTEXT_MGR already set 03:57:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1727.242717] binder: 23124:23126 unknown command 0 03:57:32 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x26, 0x100) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000300)="2f346214e0e8ef6571cecbee9d73d731b20878692e8f75dfe5d214089838e845daa7a23ae533c7770134d14d2c396f7e4f008fe311316cbc080a399e4f21f918a4408fa648d24849c151deec05d6e75157b0e0fd2a531510ce827efca20f9b9e4f9e2977e594b99a032f23f41a31456aa9126cdb421f3d49af837a4ec206d7d9999e55cdeea8313999183d8479f2bb6db08d281e1f726f082b93833ba33dc4c48bee3e78849e00e0f96e46a95e868b0693a60ed4864dfc26550f395626902151d6cd5de82a6f5cf2b73ab46e5db018e19ab2f38448e59d14d013cad176e6cb915ebc35bf3bee41058d0b28507f5017c3592dd376", 0xf4) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="6ccd0000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e24, 0x200, @mcast1, 0xfffffffffffffffd}}, 0x1000, 0xfffffffffffffff5, 0x2, 0x4, 0x2}, 0x98) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 1727.276254] binder: BINDER_SET_CONTEXT_MGR already set 03:57:32 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0xc0002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00072cbd7000fcdbdf250c0000003c000200140000edffffff00000000000000bb080007000100000014000100fe80000000000000000000000000001708000800000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40c0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x200) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) sendto$inet(r2, &(0x7f0000000440)="a2cbabe75771bd2c9b1ff913cb708604fddecdc7456e956da09a32757364ff9e9e2a4f11fdecdc1089f222742054abffee2e4d34bc17ee67e027608177f98c8f0d14356ae5a86f47d023cffada759802b11605a64784a5c8295a6314947c7e68beacea61471d0cf12fb5", 0x6a, 0x8000, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x9}, 0x10) 03:57:32 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1a00) 03:57:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3630840, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:32 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffffffe1, 0x2080) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x100, 0xd7, 0xffffffffd8dbc96b, 0x3, 0xa2}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0x80000000, 0x3, 0xd, 0x8001, 0x1, 0x0, 0xfffffffffffffffb, 0x5, r4}, &(0x7f0000000300)=0x20) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1727.532210] binder: 23148:23154 unknown command 0 [ 1727.562359] binder: BINDER_SET_CONTEXT_MGR already set 03:57:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x611, 0x9, 0x8, 0x2}, 0x8) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$TCXONC(r3, 0x540a, 0x9) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x3, 0x8000}, &(0x7f00000001c0)=0x8) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:32 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ff2a"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xb5, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:32 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v2={0x2000000, [{0x5e, 0x7}, {0xfffffffffffffffc, 0x2}]}, 0x14, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x9}}, 0x10) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:32 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x22) [ 1727.951984] binder: 23194:23200 unknown command 0 [ 1727.976661] binder: BINDER_SET_CONTEXT_MGR already set 03:57:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0), 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000e40)={0x7, &(0x7f0000000980)=""/110, &(0x7f0000000d80)=[{0x2, 0x0, 0x6, &(0x7f0000000580)}, {0xfff, 0x0, 0xeaf, &(0x7f00000007c0)}, {0x6, 0xce, 0x9, &(0x7f0000000a00)=""/206}, {0x20, 0xa6, 0xf800000000000000, &(0x7f0000000b00)=""/166}, {0x6, 0x67, 0x6, &(0x7f0000000bc0)=""/103}, {0x800, 0x35, 0x6, &(0x7f0000000c40)=""/53}, {0x1, 0xfd, 0x4, &(0x7f0000000c80)=""/253}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=0x0) capget(&(0x7f0000000340)={0x399f1736, r4}, &(0x7f00000003c0)={0x101, 0x0, 0x2, 0x8000, 0x18a, 0x1}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8, 0x4, 0x5, 0x4f, 0x5}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x91}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e80)=ANY=[@ANYBLOB="030000000000000002d0100000000000c100000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000001c5ba100d38f7a822a991644000000156bce8c2440b4257d7beee700004a00", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000d00000000000009100000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 03:57:32 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mq_timedreceive(r2, &(0x7f0000000300)=""/199, 0xc7, 0x7, &(0x7f0000000040)={0x77359400}) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1e, 0x18, "f27e609d4ffde4e8ee4b94f345487b4098cb4064c5f9914e05641996f97e16752ab2777b41f4accf82f766706704398a13772e6572c6b8b527dc8c71c28ad83d", "e3f36fc97f0d6ed603901b44a99e9285f07482b8cdb62706fcd2c0ce064c1024", [0x0, 0x101]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x6, 0x0, 0x1000, 0x1e, 0x1, 0xfffffffffffffff7, 0x800, {0x0, @in6={{0xa, 0x4e20, 0xffffffffffff1e58, @empty, 0x9}}, 0x3, 0x5, 0x12, 0xcac, 0x3}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x200, 0x35, 0x8}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x6}}}, 0x84) r6 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f00000006c0)={{0x8, 0x7, 0x1, 0x7f, 0x50cb7804, 0x7fffffff}, 0x400, 0x77, 0x8, 0x3c, 0x3, "284690a6e26734298117a9a5fd940e4f4d323fd1440207f237ab7f70f11e6efdee719d8706ed9e99e3d189c775bf76e944c4893eb4c406c371366427c7362fa4f1ae3e1ee454afbec7ea74d74cc239e6f6ac100bd40dc4ebcefc1347a19a12ee1a499bc44327bb3a25be17c7eab87f645be56b66b5ce877bdbc64a3f37bd63be"}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1728.263602] binder: 23216:23229 unknown command 0 03:57:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x763044000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1728.305125] binder: BINDER_SET_CONTEXT_MGR already set 03:57:33 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffff2dd, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0xffffffffffff8001, 0x400001f, 0x8000, 0x5, 0x1000, 0x9, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0xfffffd94) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={r3, 0xe7, "21f2c2028718c0eaccad54da0870e2bf1d59122d226c8c704a9a0de920b51449383eb933be65994782e692e0ef9b86be669a13261b0b93b1636e8745483b7d156ba9462e1694eb28da83f87739cf85e2de269f85d316e831f708ce9f5a8f91ed3ecbc6a26e659961e93a02d4a22af745685cfbd6300fca9eb74a3b678fe0f8ab976004492b53588156b49b128411176d43bb320deae542c4c5d6781d877977de63ce7b1bdf52fd091cb090c26f884502f044ee13eb56b736ea7bf2c18437be8b43121935ec631464d191a9799d9abbc569a4678bb08348cb6863cd0493ae1e45bebc43466af82c"}, &(0x7f00000004c0)=0xef) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000080)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200027bd7000fddbdf25010100000c0004001200000000000000040007000c000800288d000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000001) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:33 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 1728.500977] binder: 23252:23253 unknown command 0 03:57:33 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x435) [ 1728.536898] binder: BINDER_SET_CONTEXT_MGR already set 03:57:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e24, @broadcast}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x4, 0x4, 0x5, 0x1000, 0xfffffffffffffffb}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:33 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x800, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x100, 0x800) r2 = getuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wf`no=', @ANYRESHEX=r1, @ANYBLOB="c6d76ce5616368652c70726976706f72742c6e6f6465766d61702c64656275673d3078303030303030303030303030303030352c666f776e65723d", @ANYRESDEC=r2, @ANYBLOB=',\x00']) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r3, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x10) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1728.807516] binder: 23279:23280 unknown command 0 03:57:33 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000300)="1159caa825e483a3620b34b19e2db3d3c91da7f720d47a5912ca36b290f19d0c027ace4fff83c2c20c9deb95fa475a0f53eb9d7b9fb399edf4c9d288e5294135876b219608dc743dca2d07b692347e5cfe66769392571657bbdc106a11b4bfa28f833b41f94151b465b8e13f7b3be4631c09b2a727074be81b46fb4a3382c4bfccb896bcb7ff5bd271dffd8dd9a52072362a62196155b6822b4cd9d5a4857de66f7905fd5bdd3d39e7cd4ba42c5e74f45e8f242c491e032b486a7012ed03bd451e1dba78be318069996e16766a98") mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:33 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16, 0x6}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1729.104419] binder: 23309:23314 unknown command 0 [ 1729.148122] binder: BINDER_SET_CONTEXT_MGR already set [ 1729.169687] FAT-fs (loop4): invalid media value (0x00) 03:57:33 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x14) 03:57:34 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000001a0007011dfffd940101830020200a000900000006000000040000000d00ff7e", 0x24}], 0x1}, 0x0) [ 1729.197729] binder_thread_release: 4 callbacks suppressed [ 1729.206135] binder_release_work: 6 callbacks suppressed 03:57:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2630440, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1729.241794] binder_send_failed_reply: 4 callbacks suppressed 03:57:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1729.381951] binder: 23338:23343 unknown command 0 [ 1729.401386] binder: BINDER_SET_CONTEXT_MGR already set 03:57:34 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() prctl$PR_SET_FPEMU(0xa, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x4ddf5b71, &(0x7f0000000140)='veth1\x00', 0x7, 0x0, 0x367c}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000002c0)=""/112, &(0x7f00000001c0)=0x70) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file1\x00', 0x0, 0x10}, 0x10) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:34 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x90c) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x0) 03:57:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:34 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2a04000000000000) 03:57:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xc}, 0x38a}, r2}}, 0x30) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getuid() setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) [ 1729.772843] binder: 23376:23382 unknown command 0 03:57:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)="06ca88cb3e2126fbcdd29d4ec0bb41a1a2272955f2fa8d108c62b6d757db1fdfc71d5e417505efa00fafc21d", 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0xfe30) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000002340)="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", 0x1d1}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x10000024}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) [ 1729.849535] binder: BINDER_SET_CONTEXT_MGR already set 03:57:34 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x920d, 0x2) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200400, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x800, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x6, &(0x7f0000000900)=[{&(0x7f0000000240)="70d6cf772ea88dd1aeb14a9a27ecb5c91c0d4e2393812ea61466e53dade4adfe4a7bea77343be2e8a51ed5d13d7bfe2244759061de928e8d263a4728516569b91344cd92124a4f7261e722a575b45e7fde3eb353f59b015182927bc5069b78f1bf235b536e92bd87a2305cb591ca98b5b3c5197bc367f33ec34403ab540c3b9decaaf462971fe468b9aa3c197d68302f352e68402bb403eb8ededb06c603dfb88810c319215859592328460834e0de1c6897573aaeebc99eea2fe29f3f43b4cb894dd236ed0082abbce81c7444b9caec03c1288c6b", 0xd5, 0x5}, {&(0x7f00000003c0)="fa727a5e2b91199fa503d9bdd0c68d91fcbded2cd9837fd88db57d67bab36efcd9bdd4518bd6593808403d9cb0056f0bfe65b27b31ce9bf8710cb9f9268bc9f71a5e215c7cb18d6aa78acc0c77c0cd632dd0d258de8cb0cda3a8bc18a97bc849cd8fbfa6b28c73d34688e575de217bc4f45586125ec8b14a1d4360bb40ed0b625a9b31d96dd51d4bb6f437441661fe22d92f3b71ee35be3138938458aef8f005e002cc7a8fcf20ba01eb3bc196b3a84fdb1d36b7db8668ef9c5819043b98ef21c17b7abd08230358a321b150ac744be4a49ac3bce5402e27dd4addd2079a802cac3308c1", 0xe4, 0x97d}, {&(0x7f0000000340)="894795343b4ebd41e1f2cee339eb9e3b41572c8fe0414c8d3fc4a333cc78e146d486da2e1d449baf2900de7f9f5da01930e7cadd", 0x34, 0x2}, {&(0x7f0000000600)="b2fb0ea04c3ba211d29b0d96a94e93ce66a66404fb63d70003bb7acf0d03bf394d4a3ebbb44c9f833fdf080986e9ba264d9cffd06eaaf8282086f88eff5998c989f29de9", 0x44, 0x80000000000000}, {&(0x7f0000001700)="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", 0x1000, 0xa67e}, {&(0x7f0000000680)="d4f48a6c90fe6c5632c7fc415cacea046dd9d4d291ebca771d54c2212dcb83d7929d58b662dc78320304a1189a0d32a650fe943c0d36b80a29638bd361ddae64a2d4e3cedb5d15e55ab76ec5621604cd64ecb93661e0bb5d6259c2214a4239c4c2bc30bdb521734f1da43fdf790eff0a32e83d44d7381a2467621347afa46d2e801045977390bfe86ba686f1f3fe7a0b0bacfe7834e78f69b5a7f697980eb29c250a7216358cf4e05eaf87e765caf726e5d58a537bf01c49d86e5cef9d0cf22f229c32b2e070c8e2da4796546cb4ca5f20065b0c9d0145f509215bfe5460bf0ec4ae082bcea0253f52aee46c35d1f8f1575811b4d5b0", 0xf6, 0x200}], 0x0, &(0x7f00000004c0)={[{@nonumtail='nnonumtail=1'}, {@utf8='utf8=1'}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x1b, 0x2, {0x0, 0x3, 0x7, 0x1, 0xfffffffffffffff7}}) getuid() [ 1730.071093] binder: 23413:23416 unknown command 0 [ 1730.077276] binder: BINDER_SET_CONTEXT_MGR already set 03:57:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd63000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:34 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xc0000000) 03:57:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{}, {0x7}}) 03:57:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1730.325595] binder: 23435:23450 unknown command 0 [ 1730.354373] binder: BINDER_SET_CONTEXT_MGR already set 03:57:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) 03:57:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = msgget$private(0x0, 0x90) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f00000004c0)) r6 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000600)='vfat\x00'}, 0x30) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000680)={{0x9, r2, r3, r4, r5, 0x24, 0x20}, 0x6, 0x5, 0x3, 0x7, 0x9, 0x7f, r6, r7}) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x101, 0x8, 0x9, 0xffffffffffffffff, 0x3, 0x3f, 0x6, 0x2ca, 0x40, 0x29, 0x3, 0xfe, 0x38, 0x1, 0x200, 0xa94, 0x7}, [{0x7474e557, 0x800, 0x100, 0xd2f, 0x91, 0x7, 0x7f, 0x9}, {0x60000005, 0x100, 0x1ff, 0x821b, 0x321f, 0x8c0e, 0x4e8}], "c092be81c6be5dfa67e4d14dee78f92f5358451df717da3af0a5c00a82cde28b07d95072bcc56b20a4bd8962ae817119b291c2f2caedad9f7bad0af347d4", [[], [], [], [], [], [], [], []]}, 0x8ee) timer_getoverrun(0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vhost-net\x00', 0x2, 0x0) r11 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r10, 0xaf02, 0x0) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000001040)={0x7, 0x0, [{0xa701, 0x5, 0x0, 0x0, @msi={0xffffffff00000000, 0x1}}, {0x2, 0x0, 0x0, 0x0, @adapter={0x1, 0x4, 0x8ab9, 0x1, 0x9}}, {0x4, 0x2, 0x0, 0x0, @sint={0x10000, 0x9}}, {0x9, 0x4, 0x0, 0x0, @msi={0x7, 0xdb5, 0x401}}, {0x1f, 0x1, 0x0, 0x0, @sint={0x8, 0xd9}}, {0x1, 0x4, 0x0, 0x0, @irqchip={0x81, 0x8270}}, {0x1, 0x1, 0x0, 0x0, @msi={0x40, 0x1, 0x1e2a}}]}) r12 = getuid() r13 = getgid() ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f00000005c0)=0x7) write$P9_RGETATTR(r9, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x2000, {0xa4, 0x0, 0x8}, 0x40, r12, r13, 0x3602, 0x81, 0x7, 0x9, 0x100000000, 0x3, 0x240, 0x76a5d5cd, 0x400, 0x2, 0x4, 0xc084, 0x7fffffff, 0xd5, 0x4}}, 0xa0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r9, &(0x7f0000000180)={r9, r10, 0x8}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f0000000500), &(0x7f0000000700)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0xaaaaaaaaaaaad27, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r6 = dup3(r5, r1, 0x80000) dup2(r2, r6) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:35 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x31000000) [ 1730.612034] binder: 23473:23481 unknown command 0 03:57:35 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020107031dfffd946fa2830020200a0009000200001d85680c1baba20460ff7e", 0x24}], 0x1}, 0x0) [ 1730.635009] binder: BINDER_SET_CONTEXT_MGR already set 03:57:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xd}, 0x8}, {0xa, 0x4e23, 0x1, @empty, 0x10000}, 0x100000000, [0x1, 0xffff, 0x100000000, 0x0, 0x2, 0x9, 0x2f7]}, 0x5c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1730.704053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 1730.732654] netlink: 5 bytes leftover after parsing attributes in process `syz-executor3'. [ 1730.838151] binder: 23492:23507 unknown command 0 03:57:35 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2a04000000000000) [ 1730.858992] binder: BINDER_SET_CONTEXT_MGR already set 03:57:35 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x90000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfffffe}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="200029bd7000fedbdf25080000000c0002000800050000000000240002000800080005000000080007006d000000080002004e20000008000b000a0000002c000200080006007f0000000800060006000000080005005ab8000008000700050000000800070017a600002400020008000b0000000000080006000104000008000b000a000000080002004e2017000800060006000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000003}, 0x40080) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000080)={0x24}, 0x0, 0x8) timer_getoverrun(0x0) r2 = shmget(0x3, 0x2000, 0xc, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000600)=""/223) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000000c0)=0x100000000, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4bf7, 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000000c0)={{0x5, @addr=0x8d}, 0x8, 0x3, 0xf9a3}) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1731.114641] binder: 23532:23535 unknown command 0 [ 1731.122511] binder: BINDER_SET_CONTEXT_MGR already set 03:57:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x8000484140, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200000, 0x0) r4 = geteuid() ioprio_get$uid(0x3, r4) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:36 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x5000000) 03:57:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000240)=0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='/dev/uinput\x00', 0xfffffffffffffff8) keyctl$set_timeout(0xf, r4, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1731.394111] binder: 23558:23562 unknown command 0 [ 1731.412911] binder: BINDER_SET_CONTEXT_MGR already set [ 1731.458583] binder: 23558:23570 unknown command 0 03:57:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634040, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:36 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x501000) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000040)) getuid() ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x6, 0x0, 0x4, 0xfff, 0x1, 0x0, 0x10000, 0xe3, 0x0, 0x7ff, 0x22d, 0x1}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000001c0)={0x8, 0xfffffffffffffffc, 0xe19, 0x8f, &(0x7f0000000240)=""/143, 0x32, &(0x7f0000000140)=""/50, 0xfb, &(0x7f00000003c0)=""/251}) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) timerfd_gettime(r1, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) socket$bt_rfcomm(0x1f, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) signalfd(r3, &(0x7f0000000080)={0x400}, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1731.684628] binder_thread_write: 8 callbacks suppressed [ 1731.763239] binder: 23586:23592 unknown command 0 [ 1731.790435] binder: BINDER_SET_CONTEXT_MGR already set 03:57:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0xfffffffffffffff5, 0x7, {0x5}}, 0x18) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x20, 0x800) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="e0000002ac1414bb0100000003000000ac1414aa7f00551f3b6fc17c9986fea0000100000000"], 0x1c) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000600)=""/219) r5 = dup2(0xffffffffffffffff, r4) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000300)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x103, 0x5c9402aec2d7b42f, {0x3, 0xfffffffffffffffa, 0x80, 0x3}}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x7, 0x0, "ef8877ee9a637954dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb285c391"}, 0xd8) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000340)={0xd5, &(0x7f00000003c0)=""/213}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1000, 0x1018, 0x0, {"8f7c44f7caa03e950899ab17367835a2d371346e7583ce2fa898d56005e7f387918e09661ff95525448773506a6bc7a8bb272e762a01e9d53037f009981a3ea956b049840fdb2e7b30813e5e2db9f8e4a07dbabbb00d7dfc53bc238436c69e61d75149f56a9f1bbdf470d35746d3bab738edc02c999e340baaa61a0a01be21f42b9e2e1f934f1bc7f8f7a67b2161d10255fa617f5221c1a0af7552804d79723d92eec5ff549a860718a82988e47abb8aad1beeffdef6b29c1ac524e7310327131b7179a6bdb03fa5bf34677624d2ecd183ee53a51fc536b613d4d650f323dbf67c184b73d98a1e62f226ebe0320b2b14182b7b382a35d41271bdf0902ac9ec20535150e76c7c672cc49c1db9df4340f8b41aeb32763ef221a496c4cfc90577c2cd160969f4fe6e0b0f74dfa90b7a8d4b5c2a8892b816a6b435e62be8837f14e75e365bb8c862576faa6778c9876f398b33088196b60d66228bd9e5fd1f3885453d70e3ebff604a42f536623e610360da257ad627d95bf8e221a23545da2e3c60a6b9c8382c40d0ff13c99ebcfb879275d9d6aba550fc86a4ccda5cc91bb577064fdfd03729b4f91cc666d3429d8d42d4d76371098f44e2deea32ba3cab778bde1c7f7b5cb77e2bb48e5bdc18c4567a586d80f4adcfab63ae4eb9507a23fc0326de21599fab8a17eed036f23e64db253efc29e6d1b121b68b25895cda6809b690c6e2c39f9a6bc96e09416480a8e89e21f9ee13014f8e97ef2594307b7c980f93c5221dfd3cb95cb2c8be0e7637ac6406d4f645b172d4823569d62b8b79a566234bc4d28cb6f134e2af2de6a2705bfb3c568c800b8993afe013d69eb733ac72c80778ff4c36f4a36fbb36f11b7554da59b771df596ece8ff3dacb966726558bf1692fe0f6212e803d6a95f29fb0a1d6f888d430f33a1516013703d337d63930e825235bba817f78b7250b398983149918830a9b8145a6b04cd8eaea0a083cee1a252059dba9aa01d74ebd8a010f652ec4cbdcac15faec89d55aa865ddd7e64aa5f69c9f87fceb725ba5f43571dcf5ff592140a1acc16d2ac76423b63fb7d618b82dc2293b6b3728ce344e114054239364abb4e1a2954c08e3342d289583cffbba927395d1b28e3456248d0a554e686a928218c73dc3737070869e0f019912a3e11f20691f3b9037755b54b65d97a4b97e4fc6fdfcc18b04a59fa0bd116b5c7c4e8da773ec88f1bf737d318f7dfb73a527e3f2ab758a291647057f05ba21ed17a86fc0dad357ddd99f67ba74a2e1b3a1e71cf2c1990cc7e3b623957d761fc488352ee48df8569184c169afcd5ba60fc564f1a7ba11c8e8a103900b0858c20959d78967f59be190e8a5823b284c0d68161394fb483337a28d2279830364304cc6d47d9415d855cbec9c9ff9656165695c247ca242f08483903f3602be502753fb4f38f278ca60ba89f12d376554ccfaaaef1c9eccb87f4d161201ee8bbcb7e001afe426109920c000963e1146edecfe28693a8620657c153d820f74072e52518f49b4dbb872c7db6240a679dd73ddbf51a00b06f11b40f21b5cfeb82e1e674d348061126597688af90de6032065f90a7d753ca1a9c37b1fe0e407aeac0c160a066a4901f0e82fe7dbde0513f53c6786f4ec9eb5714ca8da1242759245ed4848d7ecacee7e788b40a993e40a37eed11b01dfc1aeef178c057298970766000718d8ccddf0f3f1066b575d3a82277ead9c62104968c063697183c37119a24fa298597f4375f16962b7dff7b76c23b40507454ea8ad884fed6ccc23a072303c9b96528248d85dc46ffc3ab54b6f8c4164c16c7f59d473bd71100761db18416d90ba14d010767a7663802464d08cf09b21e5a4cd8c903c0b86a9965b3fa3ef1dd437a41e05d90e1d51ef71e37744e6e42452abb089558879dff2a2c6645db89449f6787e6234415c5369c150aa10f88342fab2e03543b4fbe4706d2e3b0f98a435f5c410e8d2725b52af7604721203fa74819d8883113eb45ba058627d15158f4f0a68140c08d4addddf4f6e972cf0dc9202c726b2a9ea3f038fe54933a11ba34a4e698f86359b78084b79efca26856273ac40bcbf88667e1a1db35ddd3f3d486bc445d2d0233b18404210eb7de5bc8402437f7571050efd31456e038c35e243798e3c743236a6dee1722d35d26dcdd64c60fb432902ea25ac1100cbc154c84e4bbe98f5e74e6f554e5ab68a9d04644fd6a6cea8cb58a9b118f0a29ee8d3f120e8e8ba2261a16892d672463555a5055587305b21c048ca92a0e12fa8e535950d381fa1e4a30120e83469e3d0fec9b1858ff4e6951d2fedc0aa697bc23f36cdb06344aa960746dcd5bbe507ac4082fd85a25d5eff970937ef718f3285797a41564c04cb52643b83068fbde0ffdb5b88f34fa0aa731afd23159ff93b4e26c54b572ac7822839184153c9fd9dcc4c530714aec8c4a6302ff81698e830819d76329b6c7a1789beaf709665f5fbb971d27ca5cf5fb0e3874270e4f25384867dc3d304ccd92f2c64f07d993edbd8520dc423b45e7a6dfe23224d32e4540bc53c396ed5ef252cd8341df3f091036f3a4de8d275ebaecfe15da7b2d8c6d11d27a3405306e72f26121dbdc20c69f8e85a0a0c87f6272d3663cfe9f156fea296e6a885e1a0ebdab2a3f91d0c3a8fda977a177177f9cfa49ffab816bf91f93bcbbfe840374140a3c4f60b97a55040cfce4c4f2fd1ef96081136264351627e524047502f9fd1bc477c64d9a52688dee272a9ca605e65a8f8b454a8ecb563f93284445c93efd2e9c71f0da85b5a767e6049e65e1f498d52dca7b76bee1325c3372cd8dbe5f83c0973d8ad78a38b4ac60eeda294a171a71d0a039a9afc64cc36bd5779ce8662ccaf3773bdec5cef4ec342c11bb26e9f650693ffe2d64e2f812923240bf329686e02c80af333be9b557e5e43d5ebc29be2822fe1eb619b9b0d0d44614c7a8b313e3a3080a00599c0f31ad7bc9a0d60c4554a67a598172cbbf351d7fb7490ec4f008564a1699976c8d2c82cd86854765c2d00e61edca6e343b84c8fa558cfe0c0c2b867998649276c0debb0c568c44c8f0de80f4c904eb549be41e36db61f4050b9d7502a73d78fd527d5c58795ec5584270218683daca337c66a0e8a57de5f6e96854adc5756c8d5e9ccdd02820e0e197fc6cf5c3c3d951b04dffa23881d2bcfadd1fc72aefe48c3cf0acbe46c5ad86a9a9a687270b6b092fcdaf893671cd5f7beabe85d67d51e03f48917bd32d45679b16d5aab8eba0f718e47ff90e8e1fdc5ca2c89bc39fa17a2f97fc6f0705ffb3d1636c66e3a232bd5333eaedfe04b1e5d085c99b9a09bd131000309fdd21ff630009eeb1408e2757db3469f5d3a5de065912f7993098895c5f9cf2a290939b3a0ad7bf262c58be6a9ad27d3f115a2c24b4b522cbf53f999d4d4bcbbcaf340a255ab718749f72efbff32df09d869a81753763d0f21694e10c1b2b6293e77c2a73777e70db3fa5dc8e5d4ca6bab301bcdf66f02b4bc625bb8ddc6a00189a2c956593d3a2445946e165ace24979ceac245505a228bc568d4e2e65cd3ad4673b8ee1a66b5e33399f24faa42214b12359bfaaa27e216cc4b15dd3971de4ca25ec77b3aa0b6603d05548b82fc260e5c19c6c42862798c6853e91485f0ef91e6ee072b8a17a6d44128270e3d6530ab9ecb56573847890f73e7deae769b412b507381bdc67a135f33539cff9e68be5b82cc5982c3e03812a80064d1c441f508bb0fa8fd466c242f5c6958b716ef1df4361d32a121a37585e69583273b270b6aa9ddd73ea4ce7b341820ee95a7e1191d08447e72e090dcf1274e90eeef1a099ca4e5c96c6d9ddee3a739960a041389b29ece6411a8bcdb89774d70269bae00a3d400a677fbf656209162459e712a56465958828a1912a4d4aa8ebbda23467fea0060375153386a6e1c141e1da0273f416466b308a8f2b6e0570b29c8777f07a9e1ff8a1f22ac3f4b5378ef4da3a37f69a481be3511bfea92b893cd29744ed929906a28e043ef32d6c9a5e8051865ea1319041ad7d85c1419833f70ebdd48311517f9a4c0f2d2affb7f2a9871ab5094d5926d49797c716270c70972a0f4287f7c8e5723d233303be3a06210d55f0b4185f09d0c6ec873f5e1685781fab095b50d65951970b7586ae4c009c1595a79d5ea4bf5fc3546016734d4b4f22096abeb17ef273baf727f7bf1f909c40ea135b966d702c62ffd9c1771ec2fce5c03d43db3bcd78104bf23ae3e4e033319d3c382f2b876c2f2c24d2316738afc1a732de520399afad8368a99edcbd98abb0d034f5753a8788bc891488cd86a25e0cf57517db8260eea808f006adab4d40e9c42eab3d9fccd808f2461fbadaf31cd1344a4080c6ed718724ce42f2726a928f899e6761453b0783b667af73f9d87cf61ec133186d2f2353d8e4047b3758f1a2eff93444ab3f44fe7d5e97b479507d1e28a9d37345ae9841932d19f751b94f49d1a36db95551b4c35acbda3368a7796c54f9c2874f8c897856e4737099065be60e14154d9bbed51b74168decc9eb837f59ba5265ecdb2c2af5a609a8871b4908855066de348aafe8fab9123f25eda884f963e75767fff0d9b22cc73db45e7e54b21c973d1ef79a3a835a894d3d12a6e40de2d2bcf8fb467c03e823c366220a3fc8c4bed64b70cdb69127cc13c5bc779d617a0f43d1d15e528a674efc56e742af4590aef4b1c38b6a65c1877b74ada70bd9ce5beb38074c877e645f25ef34da2f7698bfe618ff8f02a17218fbee301cd6e7884e6d74ba503b1a5d4970c5dba28f6a02e77983ada9b27f46e9753dc3d069a35a87543d4d216fb27203df436e2ab7462f342b8f28ffa4404c58a33434509437644c746be365e3b688386481f8f90fbb063b62c8ecfa1f49a88ca76797b430691f6584d7e7be024673ce808640f648889713894a8462e3412ca28a3fa11a8b808d195c5061bdd2fcb8e328602333a94911c2e1282edc780910434ca5d40987b012f2e09ea5f30fc121a689e952b84e816c97920cbc4fb68287256f02883b64fe7a33b15a0677f5be40475ca006a69af907e77f6044c13824018611f94cb78fe310dc7c6cd21f7d9559a677aea64ae333f8e9d35767337169afcb97d5a0dc1d0dc8ac4985c672e7ac405ec68489f0fd1bed0d78f4fd76d95f931ad01313e8a80471ee69da6255b2b275e484c27ebda4885e982711155623a5d22cdec2603f5f0196bffb0900a02472834ecb1dd6b3ea32aed581af63671c5b65fc223d0eef07d0ee2ea881fc40d3034e13c400594aa429ad6400b42cd63b50ee3847d1036f2ee26c1a5927d2c606105b23f4438efaec3efe466eae052518aec6ec5bcfe98f98a30b99027db1a7336c7c80dc5301ba079bc5508eaf73b177165f0e60757cc20208d3d2746d38e7455c9c2fbc7a4b90c0b55558683bf9ef72aed08f6d4a589ba00ed05f4f6f511e8354eb3f3a607791699c8a5deb63f71c92d82ea6e38a459a58c606b5e2deade347598d6331b9dfe094d1bcaef7ca537d141f68541482fc2752671b20df4a434001309e9f71c765b32e48b376903d55dccb7449f16932797a8762d449d03e6d9cd49805080c13ac8fa5f7b17cc8fa980351968b7f2cfb2abdab62711c4a4bffae8179a4d6c20def9e590ab857a2463baeb029fcc35187e0c2edfea0f1915de58c98ad64bd7ba5fbbab54e2687997217870652790e6828a42322507b62a25213f8eb90d72b7e44b8e93a9ede6e61ef77d0e0dbf923f8741"}}, {0x0, "327014a38666d7607eae4df84b17bb55aa91c5d1cf8d01c28720f266f6d94c7214dc"}}, &(0x7f0000000240)=""/141, 0x103c, 0x8d}, 0x20) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000080)={0x80, 0x1}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1731.828286] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1731.840692] binder_transaction: 6 callbacks suppressed [ 1731.853883] FAT-fs (loop4): bogus number of reserved sectors [ 1731.872052] binder_release_work: 8 callbacks suppressed 03:57:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8631040, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:36 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1400) [ 1732.046263] binder: 23627:23629 unknown command 0 03:57:36 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x80000001, 0x100400, 0xff, 0x101}, {0x0, 0xd395, 0x1ff, 0x1f}, {0x5, 0x9be, 0x10001, 0x575}, {0x9, 0x6, 0x100000000, 0x5}, {0x1, 0xa16a, 0x4, 0x2443}, {0xff, 0x3, 0x649}, {0x8000, 0x4, 0xbe, 0x5}]}, 0x10) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1732.120518] binder_alloc_mmap_handler: 7 callbacks suppressed [ 1732.152654] binder: BINDER_SET_CONTEXT_MGR already set 03:57:37 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0x19aa, 0x10001, 0x100000001, 0xffff, 0x1}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r2 = dup2(r1, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x7732}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r5, r6, 0x4}) r7 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000900)={{0x3, 0x0, 0x4, 0x200000, '\x00', 0x401}, 0x1, [0x1, 0xa0, 0x20, 0x1f, 0x8, 0x28, 0xfffffffffffffffb, 0x8001, 0xffffffffffffff00, 0x4, 0x8, 0x100000000, 0x6, 0x0, 0xff, 0x1ff, 0x6, 0x40, 0x7, 0x9, 0x4ccb, 0x40, 0x1, 0x4, 0x10000, 0x23, 0x7, 0x5, 0xfffffffffffffffe, 0x4, 0x8, 0x6, 0x9, 0xc000000000000, 0x5, 0x1, 0x2, 0x3, 0xfffffffffffffff9, 0x346c, 0x3, 0x1, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0x1, 0x7f, 0x1000, 0x7f, 0x4, 0x4, 0x2, 0x6, 0x0, 0x8, 0x7, 0xffffffff7fffffff, 0x8, 0x401, 0x7, 0x1, 0x10000, 0x76ae, 0x2, 0x2, 0x0, 0x9, 0x7ff, 0x10001, 0x0, 0x8, 0x3ff, 0x464, 0xd942, 0x8000, 0x5, 0xffffffffffff0001, 0xfff, 0x3ff, 0x0, 0x6, 0xdc5b, 0x64, 0x6, 0x1, 0x8, 0x101, 0x2, 0x20, 0x5, 0x10000, 0x0, 0x40, 0x4, 0x7, 0xeae, 0x0, 0x100, 0x9, 0x3, 0x2, 0x1000, 0x6, 0x7, 0x2, 0x80, 0x7fff, 0x5, 0x6, 0x7, 0x0, 0xda52, 0x6, 0x10001, 0x8a, 0x7, 0x7fff, 0x2, 0x4, 0xdee, 0xfff, 0xa685, 0x1, 0x3ff, 0x3f, 0xba, 0xfffffffffffffffb], {0x77359400}}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000001c0)=r7) 03:57:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0xffffffffffffff28) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0xa, 0x0, @thr={&(0x7f0000000240)="9e1efadbb9be31d48769323224050f6777807f5e95041a9042826e520569bcdcec342b6f85ce4c8453ec21ace4d409dba2a62820081fb22bc7109add37a626d6b3b83228ce1ab9fd8a578b2851e7d805e7f82de8b6595c961df238ca6f6404659d89d4f6d3f05f16dbbbcb9cc9c848e55b8e659733d88f329c0833d7973f8fed825e43da8e5b76e5b189144acbe0fe0e78ac4fe1cfa1dfbd6415060e7fa5f2c2f020580c3392d3e5a101d8773c", &(0x7f00000003c0)="b179e1cf282a04194f68340b943b3667f65cabd0e298e5d37dbc4ee045cdccd85760ec2b33fa1e4087b93ce3f753c2ede4d3b31dad8971264c213e77780f796bf44987080ce019aaa8e046b3f4334f23580fd08a2542f42042067e0cce0d29f48c4e896f9f32e526cf0520849eeeeacb98e4e57dc3c99ce83c2242e89ce01913566ec17e0a8ea3301bcd6581b618b14f2699de1c0f3afda269f3874b5a7d111b4f76c84b5c0e93d3e28b3cbff3b657674c9a0ec011282de115fe5a19815eb29fad3c85dccd98cd63f3c31660f1df642a9c45325d82286ffbdbcb01bb1a19448958c0b88647c8ace7792d"}}, &(0x7f00000000c0)) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x2, 0x2, @thr={&(0x7f0000000140)="0954fc8e7482637a279d634f3584e3248c994dc48af36a3f9b4327758a293b9df2bbd3e0b1a3635d9d9e2b0e084fe85c8a91e6b5d40468252783", &(0x7f0000000600)="2de49c802624528954b52f3e2f0acb4ce91596e5ac9d97eb57a62bf9faaf4fcd29a1896963dcd056e4710ba3f7815a8d456a5ccbab891cccd285b8dbb79d9b439e6a9ce8b71847db994404be069c84239cc69b8de73e757893def50de4e725dcce658ea4ba2ab0394a5181098de21a3c15bd60c5021dcfe7cbf8a3c52cb97064845160823d3b9fd4d8ab0aab1a1d214f1470fb34fbbb07d1c4653a7c3554370b75a8396241eff8428be986a000c5363e05561bd828c7ea039a4e04bcf761cad613b0570ad42225cb451eb072e1a8cae621f52902523a571cd91996"}}, &(0x7f0000000300)) timer_create(0x3, &(0x7f00000004c0)={0x0, 0xe, 0x3, @thr={&(0x7f0000000340)="ff7d5b8f230e5e67027d54d6d62d109cb7fa691b8fb4a421c5fc10d5cc6b24dd5a4349593481f5aad21c1494f4972788c4df", &(0x7f0000001700)="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"}}, &(0x7f0000000580)=0x0) timer_getoverrun(r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000740)={0x3e, 0x7, 0x4, 0x2002000, {}, {0x5, 0xc, 0x100000001, 0x2, 0x0, 0x2, "fa558dc2"}, 0x6, 0x3, @planes=&(0x7f0000000700)={0x0, 0x0, @userptr=0x40, 0x1}, 0x4}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000007c0), 0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:37 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2e04) [ 1732.414739] binder: 23659:23666 unknown command 0 [ 1732.447301] binder: BINDER_SET_CONTEXT_MGR already set 03:57:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40406301, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:37 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001940)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getgid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) fstat(r2, &(0x7f0000001a40)) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) fcntl$getownex(r2, 0x10, &(0x7f0000001b80)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@mcast1, @in=@multicast1}}, {{@in=@broadcast}}}, &(0x7f0000001cc0)=0xe8) stat(&(0x7f0000001d00)='./file0/file0\x00', &(0x7f0000001d40)) getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001e80)={0x0, r1, 0x0, 0x8, &(0x7f0000001e40)='trusted\x00'}, 0x30) r3 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) poll(&(0x7f0000000340)=[{r3, 0x151}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c6, 0x0, 0x0, 0xfffffefb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ec0)={{{@in6=@mcast1, @in6=@dev}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001fc0)=0xe8) getegid() 03:57:37 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000300)={0x0, 0x60, &(0x7f0000000280)="3a4641bb96ec985e772b4a5186f80039a443cae124748526bba8b9520675537cb5c2567b01c262dd7b03dfd05fb2fbd0927cd7d453c15b20b6c3c942d03078e89bed1644ff547ecb35fb2e2e0dfa6a3a6eac5e7244a3e88a5550bc66b3fbf1d02bcb9dd3a4d335772e6ea96f9d419131cfc85ea883bbc7cc6296daf09cce9044", {0x1, 0x8, 0x41323151, 0x9, 0x0, 0xcd, 0xa, 0x4}}) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000340), &(0x7f00000003c0)=0xc) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000080)={0x8, "190c44286c6f35b744dc2112c9f0734ea4318417f187ee56fb55a4d84be74d80", 0x1, 0x1}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x4e22, @rand_addr=0x1}}) [ 1732.650649] binder: 23685:23689 unknown command 0 [ 1732.673573] binder: BINDER_SET_CONTEXT_MGR already set 03:57:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x9) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000080)=0x3, 0x4) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:37 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x7) [ 1733.049400] binder: 23723:23731 unknown command 0 03:57:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000340)={0x30, 0x3, "ec0f89a0a8424d0da4de20e2c9ca107bca54a322f17bd356", {0x9, 0x8}, 0x7}) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)="876e2701831dd31c3297c87e453d0fa3ed1219c24c389f60f31fb34ccf7bcbd78b332af73ee6ed0c3b2b7d9952697778b75873cb5582c1a0ee1032e8a65e789836142376ec2cbd8d97efc29bc8ce274c87fb82df90695fb98b2bb69346202d5d64b5b36e19f80c36b49e9ce438a96751f6160330a92294d53ffd2c375cb63e80008eb71ff67d3e3ddd29e534cf7a85605a9e", 0x92}], 0x1, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000240)=""/247, &(0x7f00000000c0)=0xf7) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40486311, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1733.088183] binder: BINDER_SET_CONTEXT_MGR already set 03:57:37 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2904) 03:57:37 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = getuid() syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x9, &(0x7f00000018c0)=[{&(0x7f0000000140)="e83ef1720aa738873bf2bff9fe48938e8eab12b9e0d400f8", 0x18, 0x10000}, {&(0x7f00000001c0)="961d6bc80238f45ef59ee2a725", 0xd, 0x9}, {&(0x7f0000000240)="9132f602edb1debe13b43f45b92f475db93f26a3575b50646ee554a95abe1c54df16711758b6cdc79721fa3635888f0b30ed5b4880ee344a70e148a33cd17d6068f4b624b686d17e609b65283971b0dda120764688ee80d2afa7e55a1b02fc60d4761a1ba713a95917d354e8af4f77f1bd8d659df703bb5c360b786b105839232ff4545f7fb0e10ac856943422e84cd517a8a53b3d7f2a76c2b9dc74f177ed1fb2341b86b1f490f2c832f10f3fde01bc7e5fcd95", 0xb4, 0x3ffc00000000000}, {&(0x7f00000003c0)="0455458775533cb439928f4176d8ef452cb265aa174d7c510bbdd22d5c10aa60a8c2eb14a94dbbaf6c4dedc512a69d9aa837cf569c4f94f2a9c9b3937bee0784a8253d90df80a59c2274bdfb941ea868a3fd3d7d7e6e57214f84929677c200574747487b28f8be5877b0017d9ffec67199d0cad44b946a685dcb7c1f32c393dd420741bd162fa0185c00212cda0ed6a6c0358eb499538aae37d3ab8c91b33a72a61a87e61e520928c6136a3dd2f3797928ab25fc121be1b7ed23f9f7c86ed50a1fab0f94daf173", 0xc7, 0x35a0}, {&(0x7f0000000600)="0054075a50435de19da9568f429e109f5978d5b4251a188c07b930f2bcade94de14115f1ec623d503b7695f7ca345279e412c887cd45e3c1ee7c56cfac4e35adc5e3c807840b7d983a12fc3ea551db06a20278a89192d929313ab7d89fcae69c96f11b5ea14236cdd7b128ba930e70bc475ab0f8cce6df7af1697c3f4acd8620fe870a0a01791ca5b02fa8aeafc279ec8d9d7b7663afda709c7ad468350bff80cf846ee7f1bda10b3e8f28b1b8a64599c8411d56f0b30a384b89b54f2f5cdf7afb9fb3b412473ed2cde7544e658a38f32c90a24a3148c1ec12f145c1fb982ce5402b3e7aa36e97ac671498910fce593e1d3d54c8e9a94e0e1e2f2c51fde13a0d065815c926bd295efb554a0c4b4e3d30b8240b8d2ccea3f947c5e3c8401f403015a001c435f7cabf7262d432ef1d815f68fce9289a457a10a52425e46fbcf1e0de8209cc42297cef395a8caf08cf7e2a02246379e98ed3d32d6f35e58a7a6984acde3ff8d308559205a52b2fc5be7d1bb81da20fee940b69bee7f007bb4f8ccf8add56ca10f001b7fd8b9e9b074e23cba774da46be3a0cabe6260897f3dc75df97a5ebf8c76f6cac9df98b7fc9ddcdea9579d129975e0a8fd05135c64c61dd15ef6590b1489a7dbdccc777bdd3d8821c0bdb20585135bcfbcd6205fcb608887670abfff96c80cd548389b3461943e074616823fcd31a1e992906125f02a99f241368d1be314774cb2d50f3c02e40e97bca1c88b5e282be4b8bd66320b30c84cbe55178953c64a24f85d8791e3be63ac81734f30aecfb0b35fd44554eac18c8a75b7a17cae0886973086e92fbee8e670174b9737d85bfdd2efc74287a8345d27e7e097fb3bc4770707d83fe78849b19c3fc82926513eb955d4c3698e8dcae0c5e5ccd0e8e722ce446df53dfbb3b0ec971e253642410f3b2f034545b4bea3cfbe8af707c5f523bd346bee364ade9cfe318e20f4d7d8ba1989de655d12b49af7a64dbb0d7736ccd2be240f80bc8d5bd1e256f9f5d5d9828146f274807c28a5af880a415e621d26dda6c2b7611b5bf30f41514ec2163a846f06acf57f2e95118c3aff9cf5015b975265d2952b8cb064842676530bfc2723b7fc055e3a0221c0dbae51b7ed09afd20558c32df24c9abeb00b15c879ca9defe50b540ca9975b667cc7bf355ae967884a8724996d5651d0657e6e4b04300732f9687a334bf8fdd299b6d598983993bae1ed984478074c9c1768ba38a97ac816040b836604b3e98c4cb2f64fe46c85cdeab07bf206988055e0e745a45f6a9d4ec3c8a6a05374e772deea7f3ec1fa64e8de3eb4ac003641a6867fd0d12e965ee260f00b6f4c9ef2853538ff621082085e1349e43128496e9c6ca32817ec0c6077736e9c93100c718618ca803c66a6e4d99e012fbc6e40e10ae26a0f57f5ba45cde19c193330e0591340f8bbaffe4e8d215f38e635bd6bbc61f025828caf8e773c404f6ae5e19052ce45d31ccf6e2085ceff94c87cda074fa9e2ac6c03cd622d0b91c22ef38dcdbd13362705c5c810929ab52d43ef410b2b897dc2de4165282b1971dd2795cf5d80ebc2a6a4eb66f7547e7fac4d897f5eecfc6a5668ae13e651cfaf9a9b0e86733804d8c5cdc1b1fd31124afc590b07e8725d28ce263570833c46713a84b146f16a0ce0569ef7210d7313d6044f9fc0126dcde2f6261676aa4652bbcdf60733b86a9ece6e5078dc5a6ac5e978c83b46c4d8a4217501189871b0c1a3e80d5dbfa6145f62527008f0d32f2ecbd163da8ed3bd5e1d26ffb67ea7b62ff8a14665611ce4b0b96d51071deaee02f25d8a5f8e0f7d4744cf19b087c708a6bb2d9e33486206a4083de09003e64b59fa745efba27eec24b09cdd12a537a30715e20948f8f2bcef31fcedba65da98faa26479901ed9b0cc648765c7ebf29501a16222b30dd62cb7b46d5fc342c0bf7d7f446243228fb205023909b0d78e1b1c7a74fa778ba12fb8aabc1e45a7c3b8671862c89d4b1121f80fee9e479c4fdd161d9f0902a2535eef14e7f3812ed81b76cda5d3f217a8c1cf7b4e91a33738306c8c50379b98cde4f784b88ebe401a55384054126e1e7044720778a6f9e3a4706ec17cdedcff3041256717b4e5851e3f9b721fea03f63ffbf536a806df738e11f2e76281c74f76469c489c65b1a0e380845ebd4d469bb2c37b209a4e7f9d7ccd4f02fdbcc6ee8094b27044313a3290151be0af6eb68cb70e73572045dc9c645dcec887177ef81404f4ff30c933c98a11410835ae7789d9fd9f593154d374bba88a86cba7ba7067fd01c5103754167923e43a8797d02eca481cdd46fa0f51ca0d0fbcea2a53d3754df7e82f0877e15d4d1aa132f1d48ecb4b026506bfdbb7d4cf5a394766465b0834681f15b456583eea9243518e4a1ddddccca1f32968a949f19d53e53ba34f988484762039f89a8bb6a018d9d9b6ea75ca4f5dfd56a2a491d9f4c2eb52a8e156851d47c54a58f714b6bb6b2a77d6c5619d79e39d5d2578b154b0d606d130f5604cdc5bd5af27dce6a1f7f7370251d9ad3429826ea2dc6bf7464c5254c470ff065181e971032ac9f832b6b7cb39038bc724b627715cd9abf351b903ee0d2e5ca10660c5c73946afbb9319a02c61a642b572122beee747db7fba19e24eab0f847e8ab70caa3872be52ce9ae8011b25b9fdaf41c0eed0cf2b1f1fef11d8cad032256e405acde70de5ad13f7841bd5ccd2bf99fe84b541adaf9464630cba8beac73bba8d0f42b125a650cf71ceb2e775200bc498ff74eda058fd308c0466149c204a858139f1b67c3968c770d1c6385e22f1ad96bd7fe10186b5983125135165580a3e650b6c330e766d08f2679b789dba134e950bd60ce6a8d43ad44a642d2a3a1450b251e71e8c0d94382256a9f8f8d9c72fc82aed78d6500d533e583ec29b2fcea4c8e2112ce2e6b12f869064c2d2f14388590a807af6cf4a67042396a83843dcec9bddec56d1e7eb8ec3d8edf1f36e58a64d18cc96acd4c1be8a8c21e3a11c8941baae81a0982b5c0408c73f9546b247e9ab514b29d5ef8b91c198a4d809a64ea02f860229135f303af08e808f57974098b570a09a7362436bdc8e9b8acde0d7b4993f5de90b37c0d56c98ab2205c4b4cb03be541625e15eeb563d666d57dd2d0d99b936d904197ce17b039c464356685762d8340118463668745b0c2a0bd370f985c5c5f7c26ec3d0496416e7d020a31c936bbb37fad335c74249cdd1c3a5ee7b5daac02c652583768e35d8be4af806e0f2a58b5fb7c5ff218c07925d38915e4ba5e854e6136206bd6c0821e5bd10ea1df2b638b3c184b0b5f261e30da4297660d01e54d9721b75f5d22eab6d6d99d146d0292b01df934c9c54caba1ef753ab34f212b7e4638376c9a5b19e83cd5e50b2d429515e0c8f6198565d9bb0945d03d9c32c6465f3ce1232499cd1b863c0db04c790e2dbc506b0f93ede9baeebf89da16e8ca9e74a3f056d0c08e041dd8362e9d0781695c48ae1dac7bb43bab6744f7bd7bdf6c6d488aff9c367489c27458c6ede7889f5f413395bf343de7c8868c4b8b230bf31e6b56a2dfc9020d8fccb6d7f8e3b0763a756c326dcf3f001af1beb202bd62ce0ee4ba2b785f5214301df7a877ad298707552560f7ae44a64ee858d982af46c0799108d7003523fe0703a3ef50915d9666cd90a37d28f59873dc74f4f195ef9473a3e8db31d8dda80c7c7680b7ca62b4b8246464a40365bc5a781fa83a8b737a71f63cb6ef30eb3a2e8be83635fef9b9e4470e6a511e48429a39c031994e5463434cdbee828cb106ea1d7e56ce443a75b253e351665d03509fc30ad76d2b3f7c4c3b08584d22cd08f0d34aedaca2b2356bc1bed8fe93dfc815e66c52d985228beb1208efaa1f7409a7d0e6dfacd12d7ccb6601a7182783f523275e5abf4e0919d55344e39ea83d32603c9018a3952db32a42a2146bc882afeb9c47ff6aedc2412ab682c3fcf8825f5c663d6eeee7ffc52d23d26f8e4fc6289102eed0430a1bb9c99f233d113173a8dbb46ecf0605ef5745dcf8901cb0f7c4bb3e133c4bacf1d9bd530a943abf96739b7d0e3e2bad496e42a7ff5c00ceb5fae26b642c5b64cd2806105bcc47018f496cdae72ed293416ff7d1e954776855bfc4446fa295bb4d5af005b2e52bd33ca413a8da9f5dfdda917b8f573a15a1bd8c4882838b58b392d1966ab340745014d92a3cd877d900db5c758005cea4f9c3bc7e2b87990fd821f86da32d5934187b1b9efbf19a946e9b0254e22c8e5583da7e4e780d821172188db9ac892640e642093131d7abd3cd7bc6694163d8d087622bf2ea17a6006e33a1571a9873d4f9cd9f8722cbe507ec571e89d9d32e3fb1332ec7a15dfae9cd546d0eb7226fa503d8889ce9c9dbb8cbaa7bfbfc35e3714e183b2f6700f9f212f90ec39b7fd7591fbd869172150b20fc232b4e2a8678647abfb164593010fc8e7b5753fdd277bc53e2e617da13dbda85ebd57d2c70537b8ca8dd32c5b369de1853ba0000a8e9899b675dc36834bf34f352b42880a92f0d206cb080889ccb354c914d34646b8912f349ca09bf033b56ba684af5face5844d90d6f5249e513034d7a4d53b137f5ff9033f2476762bd980892063f7c0e7e777d5a15555e2d8ae8e9d2de4e2fd1ae1b078ac59bcccedcc74ce7cbe09cfef0844436e1cd3b0845d6134ac7017299b0fa9e9053ff3cd8c349b2a39f6215f39706b4c2e285f474a56b2977433091c87e4eb4badbfeae8009cc17491fd30f5f3b9629f8fbaffb448829c1e580ce40dfd48bae817977c080a38e1fc5235066b0eaa0dbcfa923d8727ff9e33d4de1d1ee8371e7d91c17a2c71ef7fc54a87b266c61c6827b74e806ab57e6f53eb474a0698284ee358492a194ba6fce709897f890c4998160239bd6a47f6c25cc0f083215e4efa394072e8ec6c8787ebbd4f433c16b57c8ed2b366dec5f9f23e36e5b51c7165ad32379493977b7a644bc721e3c06ae5d5550f836b609f878e563820bf1613952b3216ebe2ffe8a87c37a4d6ea669e650d893d2481f5726905a1d7d3594dd7340991e601ea6b3e245b270bf4807413da9be5a0f7e86d6e79b6aab1143906e28af82d060de768f0814062ccb255c201d01293208530c31927be5a402cc5d36a021d933292d87a71856a5874fc13218b05cedda74648e678011c2c11c3ee9d985e46d7b57cbeebd7a6b5001c626b5002d35a515a1bd749db1eb4c6962609d9512649f0b175eb2e16323907139b1aa83dbd09d2a65ec929a86cd68dc333416d0eae45708f196b0e1c57c8f501b398eab795eaf54f8605e9ec256f4d60ed1c7ab7dbe39ae05064a49c6e48af9609bcba543a202b1563efda256d0faffbd72c625904ac5b213606a763eebca998b03b5216e5abe64a2f65afb33d71810aeb2d92f7cd999a39c924b5bade1f8a5137804ec214c4d0870a903b9b72fc0ffc3717ffc41ceddb0a176e0446ef02d71ea8d510ee6a50a9725be0b0077f2e6e57bfbf60b3b248beeced521e8f8de63b0859fcb4ebbe458ba006535cc7d2ba06d89c25ae3134eec40dab03c52b033b46224323280df39a650004b3f9429a3e3943258ef334ee1ef8013503d7e69c9346b3d71c0d92c3b5d9aba13a23a0b240810407a907e0e8a5216a2256c3629a5928c2c99e40170c6b3002bc90830dba8b9dd32ec27121c6038cb6c9a287d96beaa9d51343e2871ff3aad970bb1a12fbc233e6e01044e2932d78643f7d2b71224419396b5038bbf11aae84ee905eae263b7daa1", 0x1000, 0x81}, {&(0x7f0000000300)="bc2373b292ed05e173458744c6c4d90a7faafad1c4670065401a46f570c752a921bb60fbec321d00772e5a971ed6e75880", 0x31, 0x7f}, {&(0x7f0000001700)="619ac7785554bd95883b6c34532164dd5b14b85e36ee2c487853fbe0e51a7c3e8e5503b8d8a7191712309c60b59004988dd1a8fcbf618724ed1bdec6a5b4a15a306109062e77da48a82fcfafb98e780d347813f8d31f81d0fa4e6e37389ba860fb056e86c842baba91b1ac58d1729241dafc64c67b318cec48ec67afca167369e5de420acc1a87839c2baa", 0x8b, 0x8}, {&(0x7f00000017c0)="75da88e137da68e2280cfeefca508c100a510b49ed14c4bf2e5df01885df1fc65c3c72d69259847a0074c7ad85ee6f17199b7fffcbca6672b4d313306992f8c067e727f1cf7f7a6889a1becc8cf004c0f3ccca2353468f84ca2402cc0a83bc49a7c6064f4c778b5afaa9a5e42508781f49323652cebec487eddeb232fe5de61ffe696eb04ff06da04c1ae62d51e0b6f4b755f18249da2970f80e59ea069e8bdc5d7361dc60d047d23060d1358c45666b814a72a0a5f6141a8cc953f7c387003af92e", 0xc2, 0x9}, {&(0x7f0000000340)="4aaab09ab431c066e2cdf5077aae5dfff4d603e9", 0x14, 0x6}], 0x401, &(0x7f00000019c0)=ANY=[@ANYBLOB='quota=on,lockproto=lock_nolock,smackfsfloor=\\,uid>', @ANYRESDEC=r2, @ANYBLOB="2c646566756f4e742578743d73787361246d5f75207f000000757365723d706f7369785f61946a71dd", @ANYRESDEC=r2, @ANYBLOB=',\x00']) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:57:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x463044000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1733.203321] binder: 23743:23744 unknown command 0 [ 1733.209707] binder: BINDER_SET_CONTEXT_MGR already set [ 1733.215575] binder: 23743:23744 unknown command 0 [ 1733.329511] QAT: Invalid ioctl [ 1733.438210] binder: 23763:23765 unknown command 0 03:57:38 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x14000000) [ 1733.529693] binder: BINDER_SET_CONTEXT_MGR already set [ 1733.567352] QAT: Invalid ioctl 03:57:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:38 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x6d3872d54108f565) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x7f, @local, 0x4e22, 0x1, 'ovf\x00', 0x2, 0x0, 0x6c}, {@remote, 0x4e21, 0x2, 0x4, 0x3, 0x100000001}}, 0x44) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000003c0)={0x6, 0x0, [{0x200, 0x4, 0x0, 0x0, @adapter={0x9, 0x2, 0x0, 0x6, 0xffffffffffff0001}}, {0x81, 0x1, 0x0, 0x0, @adapter={0x0, 0x0, 0x1c3, 0x80, 0x3}}, {0x510, 0x7, 0x0, 0x0, @adapter={0x2, 0x80000000, 0x67, 0x511, 0xfffffffffffffffd}}, {0x5, 0x0, 0x0, 0x0, @adapter={0x1, 0x100000000, 0x9, 0x6, 0x80000000}}, {0x3, 0x4, 0x0, 0x0, @msi={0x80000000, 0x100000001, 0x1f}}, {0x5, 0x0, 0x0, 0x0, @irqchip={0x800, 0xf29}}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="0c65ab7ae45c732e6661740002044108f800000000005041bf4cfb85a7c46e1e7f782364ab768e8ca1e4b1356493f38e2524651a5fe4e5608b2ee5dc88381235e7e966c0abddd871bd2b2e4eb1ec560c0efab0f71012707444f929d2f9caaece87f14e5fc3506faa8f6fd3cc9019fa8ac0df057ecfed675a26b81d177763dd88fb8d873746f793e51f06a1628642d74e8380fc1e07db282d26c6b0b4dafc01e0cf5116c0d7f2b8387417c661821e3c57b338fb006a6c56ca3122b9b109b976ac9cf99c17fa65f1e0c840a85bae5d73ba058e55ae29", 0xd5}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x3) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1733.814933] binder: 23799:23800 unknown command 0 [ 1733.824229] binder: BINDER_SET_CONTEXT_MGR already set [ 1733.829757] binder: 23799:23800 unknown command 0 03:57:38 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f0000000080)=0x4) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:38 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x3200) [ 1734.018051] FAT-fs (loop2): invalid media value (0x00) [ 1734.032806] binder: 23811:23823 unknown command 0 [ 1734.064622] binder: BINDER_SET_CONTEXT_MGR already set [ 1734.091231] binder: 23811:23823 unknown command 0 03:57:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1734.275174] binder: 23852:23853 unknown command 0 [ 1734.281499] binder: BINDER_SET_CONTEXT_MGR already set [ 1734.288990] binder: 23852:23853 unknown command 0 [ 1734.289112] binder_thread_release: 6 callbacks suppressed [ 1734.299773] binder_release_work: 8 callbacks suppressed 03:57:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000240)={0x5, &(0x7f0000000900)=[{}, {}, {}, {}, {}]}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, &(0x7f00000001c0)='vfat\x00') ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000180)) 03:57:39 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)={0xa8, 0x46e, "c5c671c204e247f9681de7bea3f19b137eae5b75c1bae0ee3d846e6556b88bdff33ddea79209687fe8f1c8567cd6fc0146292f66e20363eea2b91959aae6df540dae29429e37f861a1c128636e93cca14551e0b9e4974c5195057a7502d46ad7cdf15edfc35440bb65a5d45b0dab6d63223a2791630d808fa39bdeab598201848567e1193d3b08768f8c772227f5393e0980b80fc119a75b85b5a1a00fd4ee54"}, 0x8000) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) getsockname$packet(r2, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000a40)={r5, @local, @loopback}, 0xc) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1734.347508] binder_send_failed_reply: 6 callbacks suppressed 03:57:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:39 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1700) [ 1734.517246] binder: 23868:23870 unknown command 0 03:57:39 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) eventfd2(0xfffffffffffffffd, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1734.555182] binder: BINDER_SET_CONTEXT_MGR already set 03:57:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x163404000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) r2 = semget(0x2, 0x7, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x20, 0x9]) timer_getoverrun(0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0xff, 0x80000001}, 'port0\x00', 0x10, 0x20, 0x80, 0x400, 0x4, 0x0, 0x5, 0x0, 0x1, 0x401}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "3754a6496895e2a2471e089a21633394097f21e0"}, 0x15, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="6f81f437e23ccd34", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="ddd1ed892a7b352a4857b5dbdf79"], @ANYBLOB="090009009aff080009000000e10e0000943bc7c699f5ce83c7ea582541e286afbbe51253fe8dbf8d625e633ee47b64236eba746a1b2c9dbd17337190cd1c6fbdc99babacff5ab0e755e062703eee5990ba9e6596455cf98612bdf9815e6c0758a92dd66b97322eb6b089c184f601ff5a2a892308fc5eb5614f7195a4ed84b565b5ff48000258ae2d0c8c503936de127bf9bd73c3b813de846a4f20f9f7aa8fd0a7495fba56ad89cc93ada6a97afbdee66e93664f54600ec2ee6a510a3d4da9d06adfbf6ac05c363a8d68d4ca76822deb8ac6394b2426fcb6dfcc43596ead1105e0be6a5b3ab4447e350b19d5c6bd52f49727ccf2174021490935b8ff54afc85b26285e121d38d499bc2e3f6e9b5ef339b9ee5cd1262f1bb713e48b7c48c0f1124e5ad1e21813b383ceef6ed0e10db25fa15cd2e18b132cc8a54d6f46812c75e07632e997f956ada3b7c48d242b06dbe6599878272afd7993a1a866999d7b4abc235223d28b84b14668c185424784e903cc30f595a55f3069f688d95bc050df03aad107715e899874d716c0de9492e00b456e1725e22f135330fb6130061afb91eec12d6e41fa4a332ab3b8b5dc99f1aed9416bc2edebb709ed7441ebd33a1d1f9bed3ce3f4a575d5282b05b3bd1051d60f603cc3eb80fc00f30a7a02db49acfcbeb9378a8f450e7660420a727390e101c41781bc2dfb72c3e19536be1b1d06fec38de951a29f8cc008076a1a56c921bfb5f5671697fd2a153423e3c72505b57adef57d845136113f9a6fc3fede9b9fb76c11ad8d0e0e0f8f68c92b7daeb2fa3b891c91fd29e2c807a71e9205531abfb3daff09f67a5675492e0aec606ba512735c9f06e8c5dfe9d655ce5e7e6da2badef8ea18bcc759077930c0e6c624ce33a4e9df83f32265ed93c759c6bed725734ebe1e3c229efb47b0a848a78efb0450a9a7f01b177f92176834936b9f1e60aab630535873cb3b815cf124351622e3f19adbafad02f41ba16892aff838ecd39448a8bef63942aa06c546bdcff237727507d657603e1c9aad088c4343b0e0eec4a6b9327cf09e6eca78c6803b021c0260884a23d1d76ab7c80571873fb0baf90475922add3eb1b1627a2b5a11a86800998b9e74602873ce38b77e08ee594952f040411841a2ab4eecf10bdec931abefa08076d76ce741538c449b829ff23a01a79263560ea93d4b2cd23d601de7b51c75e6dc3812262f4eef31776d7988bf5edfcb61b8702c18e196fdbbe04aa73e5eb50939c9cc31d07bdcd6689f91c7d4d62dd401bbc00f064e2d92e037a048ea4c05ea81a7b636794c9ffe75366dd294d6eba94220184514f926b8109b2c091a691dcd085325e3f87d81e91d76667c9b0be6becad0445361248498f06c0bb888ccd63f19b03054c2db1fdddb079b6485187ebb75ee7c436e2feede04ee734acadc80b368e7a0beebe8a2f52b7e36189c0eb039cab5e6bfc221c0b579b27312ebd8199f62cf0ed1e327878aa6300dceb8b9d6a9ebdb374ca86fce2bc2f80bcaa3f64faff979a3d0e7b9c54c3316503dc18cf06597f7949ae3b3176ed9d241ba1040ff6b204ca7b149ca0c35d9a87b74b0d6db2adb434faa245a6423555a349f8e74d9bec0de3dc2622a20316d7ede2842de16221be656db3fdf0b45a0941c3f7ace12b6f093b9eaf2cf56d5b0733cf363aa00e0e98b9e318cee95cd096197d878a64947494809de25fdcf7b866f1a99abd54815b82110ed3d00f6b2a9043d8b4acfb0cf9d4ec366b84fb84cf1b72ae2defc1b955e56d2ce50098cc82682959768d5c126ac9005fcd585982371708d92ab7592b007c05b6bfa6c459319609558fb8da98ce877b8dbdb6489536572ea60e58020c15e5808517ceaeccd48762345412ec0ad004c1953e656785b6f05a8ecb8689c08e1766a413fb2328ccc6f186d3f22153b8969cffe52abb988f61983fbb414b59196fd8a5962ac45378feb50e3744a627a9e3c6bc2785c12e22c44b47ef27fb41bd60281e8114e1b2b1036b08918e35e8dfa88ce982ecc24a6c83f8657402261750dff3df6351fa19336ce5bf210d890dc18fcb1cd7f7c200d3a83ea56365772ab00b97521bfbbfa8a5cd11658f861de81df8453e1681ad65f513bcc116277a3b18b5e5dcab4e6e198839100142fe4e69c3c158c4c1aef0801ff9355296d537f0447c4d619f5fc3da8be9e79a7fbc8439b042da454e87b55620a80dd3063e24c745c2dca1a005ffc7abf702b732dbcc03a728eacca2c9bc8c8d5e4daa85dc0e9369b7d8f8782d5347c49e35073c9391c05f081345529e1a75e0b0387b47cf05bdff16f2892201261333b692b6fd4cdb31861a4cf6e80ea37eb679dba089c4bf44e55d68814324788d4da380e5874412ead9479d268a2d79b4e42617371160949f6858e23b14c453bfe7909fa9697408e81c2b5b087c141547b3bb1420bc9ec036c2068a6d628e3a076686f2278cb0f1533893d7cd74bdfed67093bfa59370f83fa67365f92c1736077f36e7a47e0752e9444444950990abb920cc08563bf30c4d027da46193ab0bc1163966ccdd0b79bc84c50a3fb17c478c318d837247d44ddfbbd141ae154df2dff67470b27ff13b1eac220938369b8acee32e953096f48521f90445dfdd4b963ee4a6a7b437e1fe696c7a079650d1bf8a6ecd775fbe85be923c64ced2ec26e75c0bfa15b8342257c4456aa4b03f6a966c6a526ca11eff48f117169f54b586db87f618ae2fb365df8f59a6f296f6aaaa3f7da8224c7c0114a0f23ffba121bd46367be5aceb3942b45d25f548d755d05cd3117fc05aeaa4dd2247e4c0e13330679e3668b94b7562b66a2a88c2a1f323ac5ccba1ced14f77f2bec350b268e26660bfd9eb9c5133d969c7e8235ce8e5fe51a28b679c5ba6942ea3c94813b7e6f3b9ef16067b3953b4f0cddccd9a8c6965bbdf7954deda22542629b82c17162b7124fd4952e3130855cc5bc8010f583fb2b3e7f3a33596e9fa3c53d4920ea48694b51307f32fe82ed55e58e351d9178ecdcba6282a094e997fd232d5b9eba6f614ac4b644657e71c32cf7ed506aa0d6aa17d17f409cd1bf658e99d97121c44b63f3242537d099f7ceb02e01a01d3422e620358d643c333fbb2093947229f7ac449f26edda2af5ed00dc173a915855e4f3c2326f6a450f4ba4ef0b374288e6ad88be38089b436bd97b5e6633c94dbb8efd6af1e080209431024b79bc7830a05d67ba0ea005c8756256262dc0650774c865c2b54d5e112bdb1c868c210ca6e71ad39ae39331b0105cfaf7c3acf14408fcc0c3b6daa3a3737c823fbb2c4573afd0aa36d12567b7c6b8b23b75ecd8ff99bd42a479580f8f88683f09562df2e0a3b7f75ba231edb47a3ae3ce3809829270845325dd5df10595bdb3b2250d697b37cc28a9ee1df9ee6d64a032c56f7dfe99d234d90edc8f7c8afbb5a128b4026b4cf4b5d81738c74cc4d1d217795cfa05a42d0310e1560e8ada084020cfbf46fe1a08dc4a0f7ff8e07fb15ea2b65b35ec8e04c73d4513c45026de49e900dd877f8717536882f110c6c95170213461e18d8cdd57ee84de2f65555bce0a70d79cbf9914fbb6ea536b631ccb8efb40142ba29f0b070ab2e922298f3673a03651bf201a8f9dc92a73a82dc5bf076159ec75991b4420a1ccfb8f375fbbaacc1c42f9ff583c0339a61c65375acaa7e8e264b97092e20b70038b4255ccbe37dd27aaf7ff8dc0244ea21811d4a3c5ffdc87d963c16e029c118459abb26fe47cce0acd8bbd11dfbff1173ec5a49bd10dbf8ff2e71142cd27e5a1836be69193a702cd4831ef6151e483aea30ac0ac10577b5ea8c5f8ef481ff357516c20bb63759854c27ce44d0d78544061880d0dc85e25af04ddd77607e596ad911f8cc916ae81cf12f9ef5bf04e8bf38a7843c2ea0b41d751482755312e24e7c38ee1852ee00afaa583a5d8f0d07b14bcafc85d240bfd0c11f4d0e1803431434e8f9ea2d8eb228fb23d224fe4aa2ef78c14181690138adbc8aa14050d51d03895b9b77969af12999b755c47a40258aa673efb10da191000e590b58e56a6f41a273dfa685d1521a55b9459cdf99d19100854b7b722e4659d8db26bc7f382d99b012a3db0bf4b8cfd947f4adc429d80a5b50abb0f6adb407bfb1194bad1a276ccbae138201d10c8ecd46696e2ec04f90b083b319e43ce1ceea647cbaca3f65edcbe339329ec19aea8518968afe6a4c2254506e65b9f31aea1d654ec69a13256b231661ecac07a8432188015a39eb0d4b4a6808df1694974f14c1093c28fc95c688306033f788b33f5dabd951c0a0a465daf1052b358455966f4ab27d3dc00b2d2224689d19d44dbbc520f0fd9beca44b03b2e0e4f017aa27dc49fcc261721f041bcdd3af7607913686247312c5876d4c1485b8209e98be3747a29013a9e938737d9cd9456dfe58ae79ca429c98a0c9147858a5ac5f7585536d0fd3464d4044f033332e4ed2ac21bb65daeccfa64bcac4d442feffcb721a579732e9b8ffce4697c35ed6976ba37f88274fa6ad0bd0b499332f13c02c806f22da545f879ed5c07844d5d07efd621f6c7e5a5d58cd1f19876ee93d65828c8a1870c12f76a4cf8281bd0f876cad76d3b7b2d9465cc2993499477d601efd7800a76192ac2e3cb845157208d1120986b17bd223c71e4a61378007343b31397f3e9dcbad2acdd3cfe6297c9d0ccb529f0991ce2d9f9354b3141135b2f54512fc2f4df9a2a8517be5578d6d0c8f725fe8249b477b4fabc74a3157abaff9f2403a15164b08a9c635b7d5e98502ae0b1e9f38589f71f02f20a1aa743e6a22ab861dcf29bdc6d86a9febb4fdfd7242d32b119e70873f24d190f03fcdc174c497400b59de36172b3da4b34f44107fca859abc9ba40eed0753f92558ed0ba30fe4490cb37dd132988c177b22671d02c5a9918eaab4dc2ff12f216076c10d905142ad43bbf8379516dc80eaa8d9aa12b4396a4b5c6350757ee3a08cd9ede258c08e0a617e8368dc24f376e9f5f0476aff71e00a06ddfdcb00cafe7c48f5a93512b55efb55abe04eee915da05ef3634066c9f2c459c3a6523829382fe23a79eb02b6be7d7927071cf439a68a2e3737979fa14ccb4f50c60b0cd24c792091f565eba616e727496c50a768a86d10b9881bd3e17b037972c2245a7a76da1db0da8a2de39f6435a7a341ff2dff2bdedca8a6f73c7fd3d9944aaec464474426c8b0ee5732eac5497aca84019643bff44b8b95144a9ee141d002a929e0c5020f63d9d8a0592e48f3d346af00a13d31a8c689d4e86dd291ab2d4813df312cd08faacfb2af251f26e207c4bf763e7f7660aa042bdf23feceff21c32454bd284bbf8d2c99028fab7492e3963a3e6ea1e7149d3cb8e02c2189e9a5d31f7920d43b83291f5b2b2bf25f3cd1224d52af90bee48ddb79b410277e57c4063d97aba06737bddc90b5e9567cdcda84d5d8dcf8caa1af49f147a02d82253c005d69b6c2eb2365a497b69d195d72b0f37239398a819ea2aac687f52cc852f97d237ef1c9dfed27edc34d0d50b991352ffce23e3a5cf38a4dd7458072990603c542e553e1033d048fadec1a38af11d336e30030599ed183c54060a72b1f5090f60a3fc8e07507afeb85976474a4079ce8ac7f6f98aaeb846677e3bef866a1835546de2152e7a5d720ac807e8b91cb58f4108e7f1ce1de8d1d0295ca36bd977946f991073eaf34221ec8b31f3f58ad2548ee61f970779fdffce71ead3c4728a1c0ad9e27940ad420403c9d2928d4f7bad87bab90abf6a2903be504ccbaad0408f12"]) [ 1734.754183] binder: 23897:23899 unknown command 0 03:57:39 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r2 = shmget$private(0x0, 0x3000, 0x12c, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) 03:57:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1263484000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1734.804835] binder: BINDER_SET_CONTEXT_MGR already set [ 1734.942128] binder: 23917:23921 unknown command 0 03:57:39 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x4, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:39 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xf00000000000000) 03:57:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000280)=r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0xa}, &(0x7f00000000c0)=0x0) timer_getoverrun(r4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r6) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000580)) r7 = dup2(0xffffffffffffffff, r5) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="2b0000000300080000000000000000000600000000000000000b656d306b657972696e6700008e04c8f8a50b0616ab340000000000"], 0x2b) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:40 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xfdffffff00000000) [ 1735.285900] binder: 23949:23957 unknown command 0 03:57:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf630c40, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1735.315910] binder: BINDER_SET_CONTEXT_MGR already set 03:57:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000140)="1935c72d5b591e84736af22eceee49bd4c4d7595aa437f2fde382008530c99ecfcaf385aa73677cfb6a132372abc83d6e8e4afb46a52", &(0x7f0000000240)=""/146}, 0x18) 03:57:40 executing program 2: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x2, 0x70, 0x7, 0xf, 0x8a8, 0x7, 0x0, 0x7, 0x0, 0xc, 0x1, 0xff, 0xffffffffffffff7f, 0x3e6c, 0xe4, 0x7, 0x100, 0x44342d26, 0x0, 0x10001, 0x5, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x6a, 0x2, 0x9, 0xfff, 0x7f, 0x6, 0x3f, 0x1, 0x591c1eff, 0x200, 0x7, 0x8, 0x0, 0x3, 0x4, @perf_config_ext={0x6, 0x3}, 0x4011, 0x9, 0xfff, 0x1, 0x2, 0x0, 0x7}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x1ff, 0x3f, 0x80000001, 0xffff}}) [ 1735.384257] binder: 23966:23967 unknown command 0 03:57:40 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1735.576291] binder: 23979:23984 unknown command 0 03:57:40 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x13000000) [ 1735.618304] binder: BINDER_SET_CONTEXT_MGR already set [ 1735.668821] binder: 23979:24000 unknown command 0 03:57:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630c, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x10000, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8000, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) ioctl$KVM_NMI(r1, 0xae9a) 03:57:40 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$xdp(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, 0x2, r1, 0x1}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8676cd6d55a808bdb8006d45", 0xc}, {&(0x7f0000000240)="16878ad2605ec24f1a11dbe4ee675104804f7d43108ed59f8ebf5b776b54725cb961ec42d74c7f5e35c2f4e5f8803782b76cbd28d41e877698b53edb895708bf1ed56c492e766886213f62ad", 0x4c}], 0x2, 0x0, 0x0, 0x40800}, 0x81) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) timer_create(0x0, &(0x7f0000000340)={0x0, 0x39, 0x5, @thr={&(0x7f0000001700)="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", &(0x7f0000002700)="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"}}, &(0x7f00000003c0)=0x0) timer_getoverrun(r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = request_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='^vboxnet1selinux\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, r4, r5) r6 = dup2(r0, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r8 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r8, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) personality(0x0) fsetxattr$security_evm(r7, &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@ng={0x4, 0xa, "5cb4065f5ddf009598e4af21c95aec10ca9f"}, 0x14, 0x3) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0xfffffffffffffffc, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_bt(r2, 0x8907, &(0x7f0000000080)="6f1cebf797161e7324a779981c9f580c8039aa55bba8488cfb2291cba2242696812781728c20c7f5810a0eec884355b9d15427e5") setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x863104000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1735.913916] binder: 24015:24017 unknown command 0 [ 1735.929969] binder: BINDER_SET_CONTEXT_MGR already set 03:57:40 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1736.052953] binder: 24033:24034 unknown command 0 03:57:40 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1b000000) [ 1736.120802] binder: BINDER_SET_CONTEXT_MGR already set 03:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:41 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000300)=""/94, 0x5e}, &(0x7f0000000140), 0x10}, 0x20) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x68) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r5, 0xe4f1}, 0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x7, 0x30000000000, 0x4, {0xf, @sdr={0x73774f5b, 0x3}}}) [ 1736.354326] binder: 24060:24066 unknown command 0 03:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40086310, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:41 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000240)={[{0xff, 0x7, 0x7fffffff, 0x5, 0x9, 0x100, 0xcef, 0xc00000000000000, 0x0, 0x40, 0x1, 0x0, 0x10000}, {0x0, 0x0, 0x7f, 0x1000, 0x8001, 0x2000000000000000, 0x7f, 0x5, 0x39e0, 0x7fffffff, 0x8000, 0x100000000, 0xc1}, {0x77, 0x1000, 0x8, 0x8, 0x7, 0x3, 0x7, 0xa43, 0x20, 0x400, 0x9, 0x268f, 0x101}], 0x9e}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x19, 0x7, 0x2, {0x10, '!keyringvboxnet1'}}, 0x19) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x20}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3, 0x33}, &(0x7f00000001c0)=0x8) timer_getoverrun(0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000240)=0x4a, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:41 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x52200, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000780)=@assoc_value={0x0, 0x73}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)={r1, 0xc6, "18e2c8a452e302879c0c15f4bca4b54981d8b771cf43605ffaf90e3a923ba4d6e7020600b9683e76a2b91324585ea19e499162c60e488350eaac263f2fb401a3321610221562b55bb1ec736fb5d1084a9c357247b87f9950e658ec7cef8919d1a881a271c3b78e9cbbe5de828cef39777e2d3f7005f020b02f05b89e40f47765bd8ea6194802718aa5d1d612062455624e7c3315b96255b7621f719c65a67a0b09abd8cf894b0af92eceb0425f5d4edb22d46056570570fb56365ede1856d46f61cbd15599c3"}, &(0x7f0000000640)=0xce) unshare(0x8000000) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80000000, 0x101000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000880)="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", 0x103) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1}}], 0x1, 0x0, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000340)=""/222, &(0x7f00000000c0)=0xde) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0x50, &(0x7f0000000680)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)=r6, 0x4) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x7, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x484c2, 0x0) r8 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="07000000981efd3ca55d"], &(0x7f0000000140)=0xf) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000280)={r9, 0x800, 0x5}, &(0x7f0000000300)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 03:57:41 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xfbffffff) 03:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x963104000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1736.524071] binder: 24083:24085 unknown command 0 [ 1736.530097] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.642511] binder: 24098:24099 unknown command 0 03:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x263044000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)={0x10}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000001c0)=0x600210) r4 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {0x0}], 0x2) getpeername$packet(r3, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) getuid() fcntl$getown(r2, 0x9) gettid() ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000800)) sendmsg$nl_route(r4, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000840)={&(0x7f00000033c0)=@dellink={0x2c, 0x11, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x9208, 0x31}, [@IFLA_VF_PORTS={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="d347548f6e4b6274b6e9608161eeb57d936fff38b89eb366e2e6df4bb4ad0bc277e01879753fb8c3ebd73aba17a581f0f67d106e0cdbe40f", 0x38, 0x0, 0x0, 0x0) sendfile(r3, r4, &(0x7f00000ddff8), 0x102002700) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000180)={0x5, "7b1c6a8b6665aa1dc3db46310aa8549c848695ef3237fb10a96428dcbf9474f3", 0x3, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x4, 0x0, 0x6}, 0x2}}, 0x18) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) [ 1736.843537] binder_thread_write: 16 callbacks suppressed [ 1736.877092] binder: 24118:24123 unknown command 0 [ 1736.895247] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.900625] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 1736.914524] binder_transaction: 8 callbacks suppressed [ 1736.921910] binder: 24118:24123 unknown command 0 [ 1736.942472] binder_release_work: 13 callbacks suppressed 03:57:41 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x42f) 03:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008630a, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000001c0)=0x600210) r4 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {0x0}], 0x2) getpeername$packet(r3, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) getuid() fcntl$getown(r2, 0x9) gettid() ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000800)) sendmsg$nl_route(r4, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000840)={&(0x7f00000033c0)=@dellink={0x2c, 0x11, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x9208, 0x31}, [@IFLA_VF_PORTS={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="d347548f6e4b6274b6e9608161eeb57d936fff38b89eb366e2e6df4bb4ad0bc277e01879753fb8c3ebd73aba17a581f0f67d106e0cdbe40f", 0x38, 0x0, 0x0, 0x0) sendfile(r3, r4, &(0x7f00000ddff8), 0x102002700) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000180)={0x5, "7b1c6a8b6665aa1dc3db46310aa8549c848695ef3237fb10a96428dcbf9474f3", 0x3, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x4, 0x0, 0x6}, 0x2}}, 0x18) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 03:57:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) sendmmsg$alg(r1, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000240)="c042e3a5b5308f71e5d22516d8eb9d1e8d7e7010ba1c0efb5b44141af36136303813a55321dbf5edc2c13d60ad7fba0f79965ff4cd721733d35484b5ff95b5ccdaf230d0998b0fa5c228482bdffbacc327254e2ef15c79043653f9ed06cb6bb0feb016a76ea2e8308a6b339bc2a513931518e503d2ccd289e8b5219b85bec2a906ea5d0acf7b4b42d5e9ebd69c080129303f9f7c99541a5271a34827c99b153f3bfca6c1de9ad2339b4504513e2b36ba7ac5ccba752df60b8c708899a48a", 0xbe}], 0x2, &(0x7f0000000900)=[@iv={0x118, 0x117, 0x2, 0xff, "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"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xd3, "244ce41406cac81521be0979d12f43bb5ee8b84abd13502667c340c88bcef76488f7b59729ab906d22c0e47fd4e5b83ed682037dbf30b3218da5f0f2acdf731ae6bcd4587e170160d296e23a8a89b0bddffa7734b64699ff34f45a7b0f038cc9fea46260a3aa8ff5b154b860b1a7d48cd6c5c8924b92a54c1b6c79515d4cba249407dcad3c95d691f117178d280b26608d73ff5a71d7fe17b5c294ca6f26cf1c47d96e6752dd8f67656abd4a38388f3a4da1913c819084fa272fdce61fc422c171d036fe3594ebd9197181cfefb29131d6dc14"}], 0x230, 0x20000001}, {0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=[@op={0x18}, @iv={0xd8, 0x117, 0x2, 0xc0, "fabaf1c4fdc90ed034e8da557ccc892d0abf5ca4b90af30f39fad10f65f00a575cb2b8c12690b5bf3cb54938d90fa9efe482150aeb0aaadf16da316cec9d8834e4122da2970a0c689226e3379f859e7675c37dc40867c435be001b72b89b4fbdf2ed27beadfd2e89973738bd7b2f56d42c3bb4b1dfca96649f19e69a9daa970273d854be7579e7d15ea336d8ffee25a94de9888bff8c3132fa9d7a7622c02bdd490a6ae0d4c3d0df52f818f677718d57a45dab375035a25445037557d233d9da"}], 0xf0, 0x40}, {0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="b05aa801d9b57a30cba8975056f1505089dbc045d267c3a4738dc45301c42ebc498974563836d9fdf6013fb84950ad6a7b917fc24e8b98bb4e9690c9a3d4c4366ae8cd3f7b7fa76f4067c4186d2e0ee5293dfe6841652c3fbc1724c9433f7d3876ecf30be66f572c2b03f8d4bf", 0x6d}, {&(0x7f0000000600)="9ba1b1331de867dfb973e01bbdf715c116cfdb1bcc7ea6e5ada3d8a3b77a3829d637a300ab2521bbe9e9f31c857cde19f3394ff3970c2634a32a2b0252d1b5240f260a5c0a60435c9ff550d56fe9446794e2d5448356f55516c4febb81b54172a05608bed0b4864e54dd56aa4ce40b0617b2db50f9253eea0dfc2bf786c4b67dbec513feb24cca0b6fa5bd7ece33702cdef6c155524a678f21563796872c224a703d24a7a63c151edb5b9d49a40f5202f75e67970a9afa0f3719d9e0bf7a158b0804ae095e14e41692cc9230cf61ded575a2", 0xd2}], 0x2, &(0x7f0000000b40)=[@iv={0x20, 0x117, 0x2, 0xa, "934dae458b379f345d39"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xe8, 0x117, 0x2, 0xd0, "40124bf820259cfd98ad64db1c6d8cc016dd1145410f6f852dd3871032c858a092a7004ab82fffd5fa4c042a7a3ea1a09f67d66cc54a6c11b18c20cc35522c7a458eac27788b1814c549b4e3a16482e75beb51930791f2d9585fe46cb34f28deb5003bdf1ac85a41c54fc1e20c8ad967436696c68d1dd498848da8436e2afc11d2a25f12101ac906332594ec48e330d835bbd9f5b44e4db4f7838e2d0920f64623579d4964980f46c4915f00e94ddb677614ad106efd80eda7152396cbe6620763e79dd5d6414ca072d48a5835784319"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8001}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x110, 0x117, 0x2, 0xf9, "c53f0f28a243f5e080ecc5a54f8e063bdfca931ab2a1e320251ad47c0222dffe4ab3cd76163c9593131027dc6f2672eee69bb51a648d00ce2662f3ab8b0004ef2113a9ee16ee315b4ad40eee99e8a239c783d1ea7f0864b8d5047bab73aa0f19cd85f9750e449e0fd1eca4b1020407d02f233bcd8f86df30ab9213d92c938b8c7ccdd393099bbfd0bd33f5dcdf291de11c4088f2387d40e61e10feb6f40b3c8439cd652914e504ee27dcf02a0d035626bda1127d865a03370dabaad95d73be538dee7165bfec97f8c7868dcc2cf21c0814b5f53e639f6532956251e19dd6f666e5d81c1a3a405e0d3381e0dc58ff7bc3cdb096208640459981"}], 0x2c0, 0x10}, {0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000700)="7145f6db2e31bcd316d79f931b9b404b0fa79e4af87a8b68ac0e10168db2aee11bdfb1f50d3f2dc4346dd773608a7608e5addcad2f1575528e26b3e473d47b4dfb7fcbac3120319e8740c9212df211266ff8b481649d76e78273424cd3edb752b169ca364fd78d3b017dc2c92c225b23a027a8454f56ea08f21241af9ab26cac4c91c88ea663f076eca1825e5967139dae952b339b43bf1a7562f4b1d975210b977e2a92d7e51753e35b6bc8a5", 0xad}, {&(0x7f0000000e00)="6e2091a35a73b116a068093ed24c0a0a5e069564e14655ca143c9db3b6d2a3c0413e9a4474ecd2d8e14fe70df242deea2140cfa6a705fbf82380267a21649faa5303192c0de3bd1f449baae38b2510af15", 0x51}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000000e80)="74bcc51e6beb193d04ea2195556f2c1a2a0de4a96cb603957409ee818e13d57d64d98773d0c09fa1d839ccc2096cae30431c04fab2aef0198884d76bd2c2fbf7515327dd4c3cf3b62ce22265124bde277ef00761f1279fe0f4f2675b262751509b3174a8804aed0d971cdc7c9c116eb464584fe8b35b501278e935cef9635acb077b2ed9f6f644f52dc1cf9375d1", 0x8e}, {&(0x7f0000000f40)="1e8b5d117c446e9139a7db4365db46bb7d8ffb6969f03104b3eb26f10583ec05fed365dcab94a1003bea028e94dba651dfa5c0707a55b89d8790500340b66cf28677eabfb3b3cfa54b42caa8a05fc4f0bbb4ddfdddf262", 0x57}, {&(0x7f0000000fc0)="801acc4c2972967f697a4b5e8eb685af05f3cbca171637bb1a129dc39e34a3207c95c4522b74e8a479ee42e70ae449178ffb8ad0e9130f65ac9b4cb172418ddde311595c51799b20d243e69b810cad920a9d832fe0b1324b69c696a64d103c8f64857db77479aa69168721f3b1dd4a56a3714d369a87b2a00b", 0x79}], 0x6, 0x0, 0x0, 0x4000000}], 0x4, 0x4c004) 03:57:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000280)={0x7, 0x4, 0xf09}, 0xc) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r5 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1737.060399] binder: 24137:24138 unknown command 0 [ 1737.072494] binder: BINDER_SET_CONTEXT_MGR already set [ 1737.243889] binder: 24154:24163 unknown command 0 [ 1737.321369] binder_alloc_mmap_handler: 11 callbacks suppressed [ 1737.335218] binder: BINDER_SET_CONTEXT_MGR already set 03:57:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf630c4000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:42 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xa) 03:57:42 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000140)={0x4000000000, 0x67180000000}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000003c0)=""/133, &(0x7f00000001c0)=0x85) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) write$binfmt_elf32(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x387) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0x90) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) timer_create(0x2, &(0x7f0000000580)={0x0, 0x2d, 0x0, @thr={&(0x7f00000004c0)="426b9947d6da23b741739090e437285d9d31f9da170f65acc47ada52ad0fd6b9ee3be57a9df400603bbd28272e5aed84f4977c8495fff073e4112d46561492e745d802bb44579e76bfef9d3a1220a570f61d642e599f67a12d7675f462ac1f1cd3173d9ab7a52a4c94fc2f1017f1bb7caa4e748b4993b16c2cce535fab213a634666cf4b75882e1656da", &(0x7f0000000300)}}, &(0x7f00000005c0)=0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000640)={{}, {r5, r6+10000000}}, &(0x7f0000000680)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x9}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000700)={0x5, 0x201, 0x4, 0x4, r7}, 0x10) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000480), &(0x7f0000000340)=0xfffffffffffffea6) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1737.476506] binder: 24182:24183 unknown command 0 [ 1737.494472] binder: BINDER_SET_CONTEXT_MGR already set [ 1737.501061] binder: 24182:24183 unknown command 0 03:57:42 executing program 3 (fault-call:4 fault-nth:0): r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uinput\x00', 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x2d, 0x1, @thr={&(0x7f0000000240)="072246b6bc9ac7d6224aef982f31c792c1966277962e2bca8fdbd9d248895407114956c0b84120886de6ecf5d5dbafdd94318948aa0a886f329b1a22fdce25a15575add8814602d9455ddff3623d8324f530a021afd96c3a60a7028b710816c2c7778b8ee17f61c5ccf809bd94b84678f17c33d1572ccb2eb7741dda7f5777886cb5609762138bb69ba4717e0d1633da34d473e651f0e3f61904575d4a445a0b4af84a6caf3b1b0eeaba567beeccc91700d56d7962425a3fef75940030296ca1eae013612676b8ebff", &(0x7f00000003c0)="3d809250c1b2984b48b423200db2bc15937c64ff8e7e4495118bbc916ae00fb5ee0a05d30fe8b24b417a3ea50d851886f934e2348532a5376a9b5ac88ed3708da936475fde31f668f2cca09d30929dbe884839e8bc352bfa38354af89a7cf5f12ff6737bb9f6017c96a1631330018ae871ab15fa951a4c5a432db68e7af26f344f2d23769b3afa0eba5bd8bd4e2e2f6d3ea0e6939a198ad4b9cf0d900956d24653a5df0275b3cb3022a273e1f14d6c3aaf30e9852576e29bd474ad5348549d1c65c86778a951b039e38d293d2eacdb4ec63c3a6f10409accc487879254986e49c8d70af17a49"}}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}, {r2, r3+10000000}}, &(0x7f0000000340)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) timer_getoverrun(0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r7 = dup2(0xffffffffffffffff, r6) r8 = getpid() perf_event_open(&(0x7f0000000600)={0x4, 0x70, 0x1, 0xfffffffffffffffd, 0x4, 0x10501de2, 0x0, 0x8, 0x100a, 0xf, 0x9, 0x1000, 0x8000, 0x1, 0x401, 0x100, 0xffffffffffffffff, 0x2c, 0x8d5, 0x9, 0x80000001, 0x4, 0x3b24, 0xef, 0x4, 0x3, 0x2, 0x7, 0x54e, 0x8, 0x5b8, 0xfffffffffffff1e7, 0x7, 0x2, 0xffffffff, 0x6, 0x1, 0x45b7886f, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000004c0), 0xd}, 0x800, 0x401, 0x4, 0x4, 0x2, 0xfffffffffffffc00, 0x4}, r8, 0x10, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7de3c5b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000001700)=""/4096) ioctl$TIOCEXCL(r4, 0x540c) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:42 executing program 2 (fault-call:4 fault-nth:0): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1737.609834] binder: 24188:24189 unknown command 0 [ 1737.615804] binder: BINDER_SET_CONTEXT_MGR already set [ 1737.621372] binder: 24188:24189 unknown command 0 [ 1737.756338] binder: 24204:24205 unknown command 0 [ 1737.766550] CPU: 0 PID: 24210 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1737.774040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.774047] Call Trace: [ 1737.774072] dump_stack+0x244/0x39d [ 1737.774095] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1737.774113] ? __lock_acquire+0x62f/0x4c20 [ 1737.774139] should_fail.cold.4+0xa/0x17 [ 1737.786088] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1737.786126] ? lock_release+0xa00/0xa00 [ 1737.786138] ? perf_trace_sched_process_exec+0x860/0x860 [ 1737.786156] ? dput.part.25+0x241/0x860 [ 1737.795410] ? zap_class+0x640/0x640 [ 1737.795437] ? find_held_lock+0x36/0x1c0 [ 1737.795471] ? __lock_is_held+0xb5/0x140 [ 1737.795496] ? zap_class+0x640/0x640 [ 1737.795512] ? perf_trace_sched_process_exec+0x860/0x860 [ 1737.795535] __should_failslab+0x124/0x180 [ 1737.795555] should_failslab+0x9/0x14 [ 1737.851483] kmem_cache_alloc_node_trace+0x270/0x740 [ 1737.856591] ? lock_downgrade+0x900/0x900 [ 1737.860728] ? check_preemption_disabled+0x48/0x280 [ 1737.865741] __get_vm_area_node+0x130/0x3a0 [ 1737.870057] __vmalloc_node_range+0xc4/0x750 [ 1737.874483] ? snd_seq_pool_init+0x8b/0x320 [ 1737.878807] ? snd_seq_pool_init+0x8b/0x320 [ 1737.883121] vmalloc+0x6f/0x80 [ 1737.886308] ? snd_seq_pool_init+0x8b/0x320 [ 1737.890616] snd_seq_pool_init+0x8b/0x320 [ 1737.894757] snd_seq_write+0x7ad/0x8d0 [ 1737.898641] ? snd_seq_client_enqueue_event+0x510/0x510 [ 1737.903996] ? proc_fail_nth_write+0x9e/0x210 [ 1737.908487] ? proc_cwd_link+0x1d0/0x1d0 [ 1737.912550] __vfs_write+0x119/0x9f0 [ 1737.916267] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1737.921196] ? snd_seq_client_enqueue_event+0x510/0x510 [ 1737.926553] ? kernel_read+0x120/0x120 [ 1737.930434] ? apparmor_path_rmdir+0x30/0x30 [ 1737.934843] ? apparmor_file_permission+0x24/0x30 [ 1737.939685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1737.945215] ? security_file_permission+0x1c2/0x220 [ 1737.950224] ? rw_verify_area+0x118/0x360 [ 1737.954381] vfs_write+0x1fc/0x560 [ 1737.957916] ksys_write+0x101/0x260 [ 1737.961536] ? __ia32_sys_read+0xb0/0xb0 [ 1737.965591] ? trace_hardirqs_off_caller+0x310/0x310 [ 1737.970688] __x64_sys_write+0x73/0xb0 [ 1737.974570] do_syscall_64+0x1b9/0x820 [ 1737.978469] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1737.983823] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1737.988743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1737.993578] ? trace_hardirqs_on_caller+0x310/0x310 [ 1737.998588] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1738.003598] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1738.008607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1738.013447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.018622] RIP: 0033:0x457679 [ 1738.021804] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1738.040692] RSP: 002b:00007f10e5ed3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1738.048407] RAX: ffffffffffffffda RBX: 00007f10e5ed3c90 RCX: 0000000000457679 [ 1738.055676] RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000003 [ 1738.062935] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1738.070201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10e5ed46d4 [ 1738.077464] R13: 00000000004c6205 R14: 00000000004dadf8 R15: 0000000000000005 [ 1738.102863] syz-executor3: vmalloc: allocation failure: 24000 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 1738.106501] binder: BINDER_SET_CONTEXT_MGR already set [ 1738.124535] CPU: 0 PID: 24210 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1738.131919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.141299] Call Trace: [ 1738.143901] dump_stack+0x244/0x39d [ 1738.147535] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1738.152725] warn_alloc.cold.116+0xb7/0x1bd [ 1738.157036] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 1738.161870] ? __get_vm_area_node+0x130/0x3a0 [ 1738.166358] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1738.171364] ? lock_downgrade+0x900/0x900 [ 1738.175500] ? check_preemption_disabled+0x48/0x280 [ 1738.180511] ? __get_vm_area_node+0x2e5/0x3a0 [ 1738.185012] __vmalloc_node_range+0x472/0x750 [ 1738.189521] ? snd_seq_pool_init+0x8b/0x320 [ 1738.193833] vmalloc+0x6f/0x80 [ 1738.197038] ? snd_seq_pool_init+0x8b/0x320 [ 1738.201350] snd_seq_pool_init+0x8b/0x320 [ 1738.205495] snd_seq_write+0x7ad/0x8d0 [ 1738.209381] ? snd_seq_client_enqueue_event+0x510/0x510 [ 1738.214734] ? proc_fail_nth_write+0x9e/0x210 [ 1738.219219] ? proc_cwd_link+0x1d0/0x1d0 [ 1738.223284] __vfs_write+0x119/0x9f0 [ 1738.226990] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1738.231909] ? snd_seq_client_enqueue_event+0x510/0x510 [ 1738.237270] ? kernel_read+0x120/0x120 [ 1738.241155] ? apparmor_path_rmdir+0x30/0x30 [ 1738.245564] ? apparmor_file_permission+0x24/0x30 [ 1738.250396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1738.255927] ? security_file_permission+0x1c2/0x220 [ 1738.260939] ? rw_verify_area+0x118/0x360 [ 1738.265081] vfs_write+0x1fc/0x560 [ 1738.268637] ksys_write+0x101/0x260 [ 1738.272269] ? __ia32_sys_read+0xb0/0xb0 [ 1738.276334] ? trace_hardirqs_off_caller+0x310/0x310 [ 1738.281453] __x64_sys_write+0x73/0xb0 [ 1738.285331] do_syscall_64+0x1b9/0x820 [ 1738.289205] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1738.294556] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1738.299472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1738.304303] ? trace_hardirqs_on_caller+0x310/0x310 [ 1738.309306] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1738.314323] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1738.319353] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1738.324193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.329372] RIP: 0033:0x457679 [ 1738.332565] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1738.351463] RSP: 002b:00007f10e5ed3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1738.359156] RAX: ffffffffffffffda RBX: 00007f10e5ed3c90 RCX: 0000000000457679 [ 1738.366421] RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000003 [ 1738.373675] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1738.380930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10e5ed46d4 [ 1738.388184] R13: 00000000004c6205 R14: 00000000004dadf8 R15: 0000000000000005 [ 1738.431918] binder: 24204:24222 unknown command 0 03:57:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd630000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1738.539877] Mem-Info: [ 1738.543220] active_anon:159129 inactive_anon:476 isolated_anon:0 [ 1738.543220] active_file:17348 inactive_file:36905 isolated_file:0 [ 1738.543220] unevictable:0 dirty:163 writeback:0 unstable:0 [ 1738.543220] slab_reclaimable:13342 slab_unreclaimable:110150 [ 1738.543220] mapped:55375 shmem:532 pagetables:1743 bounce:0 [ 1738.543220] free:1191270 free_pcp:763 free_cma:0 [ 1738.619533] Node 0 active_anon:638676kB inactive_anon:1904kB active_file:69492kB inactive_file:147120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221500kB dirty:652kB writeback:0kB shmem:2128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1738.619996] binder: 24232:24233 unknown command 0 03:57:43 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', r1}) [ 1738.651879] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1738.683805] binder: BINDER_SET_CONTEXT_MGR already set [ 1738.706233] lowmem_reserve[]: 0 2818 6321 6321 03:57:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:43 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x27) [ 1738.712455] Node 0 DMA32 free:2887356kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888780kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1424kB local_pcp:72kB free_cma:0kB [ 1738.741410] lowmem_reserve[]: 0 0 3503 3503 03:57:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1738.745863] Node 0 Normal free:1866784kB min:37364kB low:46704kB high:56044kB active_anon:632420kB inactive_anon:1604kB active_file:69492kB inactive_file:147120kB unevictable:0kB writepending:652kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:8160kB pagetables:6824kB bounce:0kB free_pcp:2196kB local_pcp:796kB free_cma:0kB [ 1738.807901] binder: 24236:24237 unknown command 0 [ 1738.812257] lowmem_reserve[]: 0 0 0 0 [ 1738.835364] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 03:57:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000580)='security.ima\x00', &(0x7f0000000680)=@ng={0x4, 0x11, "d6aa"}, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ppp\x00', 0x440, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000700), &(0x7f0000000740)=0x4) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000140)="03e173d55c904ae483491f628da6fb4fa7d8eeefdd55f8ca564ddd341a61d45811432367e74e480a26d656", 0x2b, 0x80000001}, {&(0x7f00000001c0)="98030902ba5ceb5ed35e97c6c80e0205f7e965e58d58a3b69ecb7bdedd72dcfc4a2b851b18b3c1cb3f0c9d768532e210863436fac92bc4e47e2e6a97dcbe207d737368f1ebea8747f0d474f3cc5cf9428bc510c6192fed94fe84ff3d57b4cbd45be7ba9691b32ff4d4579a6140169a1c078f32fb0e6f5dfae415e4e7e611287f2a143b9594361447a25a40b865579a2a68dfd03966b7159e6f4ea2ee20350967fa4a", 0xa2, 0xb92}, {&(0x7f0000000280)="89b51936d480f03dd1137fd0a58f3fdc777954fa8af9d587a76ac7af453f4380592cbfe87edc6a558ce8f6cfb4651506c851c0428780db5a65ee73bd46ed6b5fd7dfa9ca1fd70e79", 0x48, 0x7fffffff}, {&(0x7f00000003c0)="d8f236ac813f7007ae6c21862f18cd9d3346946644dad77f00f4c2d9552b31dabf399be7e8a00e67bf53abf3652a1ae4101b06fadc4c8800b2512dae68276e1e33232fdbfab8a93df40c8dc3c16f80f6ea3bd82c32000e4dcfcb76aa676f607e3618e899b6f790ac819f88a29ec28b86b8e56b84bd305fc6539c6a4bf836ed41dbe90322dfb6eadf00a01e2accc1b9823e0eb94b478b79c993d24c9f305d3639fe91af014b6ad6e9cc09be4fe5691c49e4505655cc54cf55b75e00ec4d622ff22b7263", 0xc3, 0x1}], 0x220044, &(0x7f0000000600)={[{@nobarrier='nobarrier'}, {@nodecompose='nodecompose'}, {@session={'session', 0x3d, 0x8}}, {@creator={'creator', 0x3d, "4875c793"}}], [{@measure='measure'}, {@obj_type={'obj_type'}}]}) syz_open_dev$sndmidi(&(0x7f00000004c0)='/dev/snd/midiC#D#\x00', 0xfff, 0x400080) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40046302, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1738.908072] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 703*4096kB (M) = 2887356kB 03:57:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x100000000000000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1738.994912] binder: 24263:24264 unknown command 0 [ 1739.030735] Node 0 Normal: 635*4kB (UME) 1028*8kB (UME) 2311*16kB (UME) 1714*32kB (UME) 745*64kB (UME) 97*128kB (UME) 16*256kB (UME) 30*512kB (UME) 10*1024kB (UME) 15*2048kB (M) 400*4096kB (UM) = 1861500kB [ 1739.067869] 54431 total pagecache pages [ 1739.072236] 0 pages in swap cache [ 1739.075847] Swap cache stats: add 0, delete 0, find 0/0 [ 1739.081360] Free swap = 0kB [ 1739.085432] Total swap = 0kB [ 1739.088619] 1965979 pages RAM [ 1739.092048] 0 pages HighMem/MovableOnly [ 1739.092301] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.096162] 342853 pages reserved 03:57:43 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:43 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0xa) 03:57:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x1000000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:57:43 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x500000000000000) 03:57:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40046307, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7ef8, 0x40) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240)=0x6, 0x4) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) prctl$PR_SET_UNALIGN(0x6, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0a0000007e2305de80944fefdf8913881fdb76e96ebc1f23eb6f3859da8016a4e51f4c94639e78a2bc812db339766451e7c3201424299332411d7511128306d66108424e23c0d014b8ac3d0f62e68385ab335886aea2458c4779f2644a706a2d9eb1917b1e7d5719"], &(0x7f00000000c0)=0x12) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r5, 0x2}, 0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1739.131200] 0 pages cma reserved 03:57:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0xc}, 0x20) restart_syscall() r2 = dup3(r0, r1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) [ 1739.269470] binder: 24296:24297 unknown command 0 [ 1739.322028] binder_release_work: 11 callbacks suppressed 03:57:44 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) membarrier(0x63, 0x0) restart_syscall() dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1739.445234] binder: 24310:24311 unknown command 0 [ 1739.479342] binder: BINDER_SET_CONTEXT_MGR already set 03:57:44 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x29000000) 03:57:44 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x500000000000000) 03:57:44 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1739.525632] binder_thread_release: 6 callbacks suppressed [ 1739.532090] binder_send_failed_reply: 6 callbacks suppressed 03:57:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb91, 0x200800) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x0, 0x0, 0x2}, 0x1000}}, 0x18) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x20) restart_syscall() accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r3, 0x2) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 03:57:44 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1739.687089] binder: 24334:24341 unknown command 0 03:57:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000080)={0x6, "b46737c7ace8197ef3068cfb3a83d0c403149e5a89c748b9ce3f76a37d70deb7", 0x7, 0x8, 0x9, 0x8, 0x15, 0x2, 0x5}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) [ 1739.743560] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.786513] binder: 24334:24350 unknown command 0 03:57:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() r2 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="4ef528912e7ae550df69ef3e2cd75da46ca9527c9e0bcc083c7e59e4a8ac50afdf8cc1f417f9531815d0fcceec22112de4", 0x31, 0xfffffffffffffffa) r4 = request_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='efivarfs\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r2, r3, r4}, &(0x7f0000000400)=""/202, 0xca, &(0x7f0000000580)={&(0x7f0000000500)={'md5\x00'}, &(0x7f0000000540)="fe3824608df91558b4e005610d52d01d05a8d44bfd2f31e1816f33236e6307b06f8bfeec4541188e4a9f3c", 0x2b}) dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='efivarfs\x00', 0x2000, &(0x7f00000000c0)='self}\x00') 03:57:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:44 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1f4, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:44 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x68000000) [ 1739.943455] binder: 24371:24372 unknown command 0 03:57:44 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x500000000000000) [ 1739.978993] binder: BINDER_SET_CONTEXT_MGR already set 03:57:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:44 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x10, r3) dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r4, &(0x7f0000000080)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'posix_acl_access'}, 0x28, 0xfffffffffffffffa) [ 1740.108517] binder: 24385:24389 unknown command 0 [ 1740.128891] binder: BINDER_SET_CONTEXT_MGR already set 03:57:44 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="f60000002aee0100000010000000000002000000"], 0x14}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000140)=0xf) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000900)={{0x0, 0x0, 0x2, 0x3, 'syz0\x00', 0x5}, 0x1, [0x6, 0x100000001, 0x0, 0x8, 0x8, 0x9, 0x7ff, 0x40, 0x7f, 0x20, 0x400, 0x9, 0x3, 0x3, 0xfffffffffffffffc, 0x0, 0x8000, 0x8, 0x9, 0x2, 0x5, 0x4, 0x5, 0x6, 0x3, 0x10000, 0xfffffffffffffffc, 0x0, 0x800, 0x0, 0xff, 0x0, 0x9, 0x80000001, 0x2, 0x2, 0x1ff, 0xffffffffffffffe0, 0x8, 0x7, 0x6, 0x9, 0x0, 0x7, 0x20, 0x427, 0x100000000, 0x5, 0x4, 0x7ff, 0x0, 0x1, 0x100000000, 0xf65, 0x7, 0x6, 0x80000000, 0x5, 0x100000001, 0x8, 0x7, 0xd63, 0x400, 0xfffffffffffffff8, 0xf17, 0x8, 0xff, 0x0, 0x9, 0x20, 0x80000000, 0x0, 0x4, 0x3c5, 0x7f, 0x3, 0x3, 0x81, 0xff36, 0xfd46, 0x8, 0x4, 0x7, 0xffff, 0xfffffffffffffff9, 0x8001, 0x7fff, 0x2, 0x0, 0x3, 0x200, 0x2, 0x8, 0x96, 0x1bd, 0x1, 0x2, 0x3, 0x200, 0x9fe, 0x39, 0x9, 0xd62, 0x3, 0xffffffff, 0x0, 0x4, 0x0, 0x5, 0x100, 0x2, 0x400, 0x0, 0x7fff, 0x7, 0x2, 0x3, 0x10001, 0x1, 0x7, 0x2, 0x6, 0x100000000, 0x2, 0x0, 0x6a, 0x20, 0x612], {0x77359400}}) umount2(&(0x7f0000000380)='./file0\x00', 0x0) socket$pppoe(0x18, 0x1, 0x0) 03:57:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) [ 1740.337669] binder: 24414:24415 unknown command 0 03:57:45 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x28040000) 03:57:45 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0xffffff95, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1740.392731] binder: BINDER_SET_CONTEXT_MGR already set 03:57:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() r2 = dup3(r0, r1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x88, 0x5, 0x7, "6458f77bce113321d9fdb3836ef4b5e1", "4b8dbb2bc965c98837366ef777bc78bf38d34b8e99f3d4a7951f89cf534954b7328830e07e8a71e502cb7dbfb8ba5f9637822a1848769e702ab21f7a65eca6f7fa280205f33da4c665b4c630e67255f65d03fef38993322aab5b9aca9b1a64dbb33fbc1458c1c6db4ffe42a8b5763be6c73091"}, 0x88, 0x3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000080)={0x6, "b46737c7ace8197ef3068cfb3a83d0c403149e5a89c748b9ce3f76a37d70deb7", 0x7, 0x8, 0x9, 0x8, 0x15, 0x2, 0x5}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x400000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:57:45 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x2600000000000000, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1740.591810] binder: 24446:24449 unknown command 0 [ 1740.623589] binder: BINDER_SET_CONTEXT_MGR already set 03:57:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x174, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40086303, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) sendto$unix(r2, &(0x7f00000000c0)="0c6733aee1f3642083001240e4b3784e5b42ab34b92bc78482ca3133e9f71c22c39a51e9e5c12e2c3a2c4e40a5f4d1fdc970a84d998f68cd45106d7d0688e414b0917a63556eff1347", 0x49, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:57:45 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2d000000) 03:57:45 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0xf401000000000000, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1740.822463] binder: 24477:24478 unknown command 0 [ 1740.860619] binder: BINDER_SET_CONTEXT_MGR already set 03:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:45 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x5000000, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() r2 = dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7fff, 0x4a2, 0x42d, 0x7b, 0xba}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000100)=0x1008) 03:57:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x42002, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r3}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000200)={0xfffffffffffffff9, 0xffffffffffffff00}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x3, 0x318, [0x20000540, 0x0, 0x0, 0x20000640, 0x20000780], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x390) [ 1740.987857] binder: 24498:24499 unknown command 0 [ 1740.998309] binder: BINDER_SET_CONTEXT_MGR already set 03:57:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0xde3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 03:57:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:57:45 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x2300, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) [ 1741.109201] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 03:57:45 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2) 03:57:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1741.210215] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 1741.216280] binder: 24531:24532 unknown command 0 03:57:46 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x22, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x68, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, r3/1000+10000}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, &(0x7f000002c000)) close(r1) [ 1741.257185] binder: BINDER_SET_CONTEXT_MGR already set 03:57:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa630840, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x2c, @multicast2, 0x4e21, 0x0, 'nq\x00', 0x4, 0x5, 0x4c}, 0x2c) [ 1741.393799] binder: 24555:24556 unknown command 0 [ 1741.415116] binder: BINDER_SET_CONTEXT_MGR already set 03:57:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 03:57:46 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0xf0, 0x40}]}, 0xc, 0x3) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00354c438fe50b89aa716d30fd015b7988ee2807ac3f31b21993fe9879d73459e7abb1f954836404749f838a72143e6da918ac459e", 0x0) fcntl$notify(r0, 0x402, 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x3f000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334000000000002", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) 03:57:46 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x2100000000000000, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) 03:57:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:46 executing program 2: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x3e8, 0x4000000, 0x8569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x636, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5015, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="7bce36feceeb355311d72ab38170ffd8a7dbeaa56a09d2ce3073c886b3c82e00334c38d08af7d9a0c524231aad5ae00bddda7c4b22581ae8a70f8708b34d4493d0c043fd8cd766bd134de2f8bff9f2a188f8296c413e696e4f2af013f21af34f9e4710e9b273fdbcfe96d311c28bb003cd5622116101f9cdd3cb86788da5d29fb7cb14a3deb505626e1bbc891c2cfed623369d63decc70e72d362d586827a3fab7022288a5535c0f262b4a0ee51caf8240d417ce0599c7a37a8561dd605bf163cd6334fa4972dd63a59aa3", 0xcb, 0x3}, {&(0x7f0000000280)="193791b96093eea23b2cd079de3fa2d08b6c7a46d60cbae7c04f235a6c18c171c7756fc485f7ffbe2cb0a47998be3dbc31f9debb71a9d7ecbe7355bd4970f6690224c14b02ac1599f169fcbc59a4229b722aff2c158f44245f572887b343e0f08c8d7584a1e4ae6ac09e829717a63a111e59369275d41e76163fbe79da4fe3c1d4100282c7d7994ed1acde1aa610167b04b5dffc43caff262a0f6219aae28ae913307b4d04ab04eea8d667ca3a36ad3b17cd0790646adf882d", 0xb9, 0x3ff}], 0x40, &(0x7f0000000480)={[{@errors_remount='errors=remount-ro'}, {@uid={'uid', 0x3d, r1}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fsname={'fsname', 0x3d, '.}#'}}]}) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) restart_syscall() dup3(r0, r2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:57:46 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0xf401, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1741.614725] jfs: Unrecognized mount option "mask=^MAY_APPEND" or missing value [ 1741.659867] binder: 24594:24597 unknown command 0 [ 1741.696546] binder: BINDER_SET_CONTEXT_MGR already set 03:57:46 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback}}, 0x0, 0x7, 0x0, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getuid() getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000005c0)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x2b) 03:57:46 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x2000, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1741.722125] jfs: Unrecognized mount option "mask=^MAY_APPEND" or missing value [ 1741.733293] binder: 24594:24597 unknown command 0 03:57:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x16000, 0x0) restart_syscall() r2 = dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000000)={{0x2b, @rand_addr=0x7, 0x4e22, 0x0, 'lblc\x00', 0x1, 0x10000, 0x4f}, {@local, 0x4e24, 0x1, 0x3f13, 0xfffffffffffffffa, 0x7}}, 0x44) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:57:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}}], 0x40086303, 0x0, 0x0}) 03:57:46 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x4, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1741.921496] binder_thread_write: 17 callbacks suppressed [ 1741.952844] binder: 24624:24625 unknown command 0 03:57:46 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310008000000000000313b00000000000000000000000000000000000000e2050000000000ccbffddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x2600, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffd}, @connect}], 0xffffff76) [ 1741.970427] binder: BINDER_SET_CONTEXT_MGR already set [ 1741.983140] binder_alloc_new_buf_locked: 11 callbacks suppressed [ 1741.999250] binder_transaction: 11 callbacks suppressed [ 1742.026039] binder: 24624:24625 unknown command 0 [ 1742.037902] binder_release_work: 13 callbacks suppressed [ 1888.601784] INFO: task syz-executor5:24578 blocked for more than 140 seconds. [ 1888.609198] Not tainted 4.20.0-rc6+ #371 [ 1888.613814] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1888.621835] Call Trace: [ 1888.624424] __schedule+0x8cf/0x21d0 [ 1888.628132] ? __lock_acquire+0x62f/0x4c20 [ 1888.632395] ? zap_class+0x640/0x640 [ 1888.636114] ? __sched_text_start+0x8/0x8 [ 1888.640261] ? zap_class+0x640/0x640 [ 1888.644008] ? zap_class+0x640/0x640 [ 1888.647741] ? __debug_object_init+0x57d/0x1290 [ 1888.652466] ? find_held_lock+0x36/0x1c0 [ 1888.656529] schedule+0xfe/0x460 [ 1888.659886] ? __mutex_lock+0xafa/0x16f0 [ 1888.663985] ? __schedule+0x21d0/0x21d0 [ 1888.667964] ? kasan_check_read+0x11/0x20 [ 1888.672146] ? do_raw_spin_unlock+0xa7/0x330 [ 1888.676550] ? do_raw_spin_trylock+0x270/0x270 [ 1888.681125] ? ww_mutex_lock.part.8+0xf0/0xf0 [ 1888.685653] ? mutex_destroy+0x200/0x200 [ 1888.689724] schedule_preempt_disabled+0x13/0x20 [ 1888.694517] __mutex_lock+0xaff/0x16f0 [ 1888.698407] ? blkdev_put+0x34/0x540 [ 1888.702153] ? mutex_trylock+0x2b0/0x2b0 [ 1888.706213] ? __lock_acquire+0x62f/0x4c20 [ 1888.710439] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1888.715582] ? mark_held_locks+0x130/0x130 [ 1888.719819] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1888.725411] ? __call_rcu.constprop.55+0x3ea/0x950 [ 1888.730337] ? __call_rcu.constprop.55+0x3ea/0x950 [ 1888.735307] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1888.739899] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1888.745213] ? debug_object_deactivate+0x450/0x450 [ 1888.750138] ? call_rcu+0xb/0x10 [ 1888.753540] ? trace_hardirqs_off_caller+0x310/0x310 [ 1888.758650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1888.764215] ? locks_remove_posix+0x47d/0x840 [ 1888.768711] ? vfs_lock_file+0xe0/0xe0 [ 1888.772642] ? trace_hardirqs_off_caller+0x310/0x310 [ 1888.778271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1888.783843] ? fsnotify+0x50e/0xef0 [ 1888.787472] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1888.793044] ? locks_remove_file+0x3c6/0x5c0 [ 1888.797452] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1888.803031] ? ima_file_free+0x132/0x650 [ 1888.807095] ? fsnotify_first_mark+0x350/0x350 [ 1888.811711] ? blkdev_put+0x540/0x540 [ 1888.815513] mutex_lock_nested+0x16/0x20 [ 1888.819566] ? mutex_lock_nested+0x16/0x20 [ 1888.823836] blkdev_put+0x34/0x540 [ 1888.827379] ? blkdev_put+0x540/0x540 [ 1888.831175] blkdev_close+0x8b/0xb0 [ 1888.834839] __fput+0x385/0xa30 [ 1888.838121] ? get_max_files+0x20/0x20 [ 1888.842049] ? trace_hardirqs_on+0xbd/0x310 [ 1888.846378] ? kasan_check_read+0x11/0x20 [ 1888.850518] ? task_work_run+0x1af/0x2a0 [ 1888.854639] ? trace_hardirqs_off_caller+0x310/0x310 [ 1888.859739] ? filp_close+0x1cd/0x250 [ 1888.863579] ____fput+0x15/0x20 [ 1888.866860] task_work_run+0x1e8/0x2a0 [ 1888.870748] ? task_work_cancel+0x240/0x240 [ 1888.875104] ? copy_fd_bitmaps+0x210/0x210 [ 1888.879338] ? do_syscall_64+0x9a/0x820 [ 1888.883436] exit_to_usermode_loop+0x318/0x380 [ 1888.888017] ? __bpf_trace_sys_exit+0x30/0x30 [ 1888.892547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1888.898083] do_syscall_64+0x6be/0x820 [ 1888.902003] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1888.907369] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1888.912328] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1888.917169] ? trace_hardirqs_on_caller+0x310/0x310 [ 1888.922219] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1888.927237] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1888.932116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1888.937298] RIP: 0033:0x411131 [ 1888.940491] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1888.959423] RSP: 002b:00007ffc0ac62440 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1888.967157] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000411131 [ 1888.974458] RDX: 0000000000000000 RSI: 00000000007312a0 RDI: 0000000000000005 [ 1888.981763] RBP: 0000000000000000 R08: 0000000000731298 R09: 0000000000000000 [ 1888.989038] R10: 00007ffc0ac62360 R11: 0000000000000293 R12: 0000000000000000 [ 1888.996336] R13: 0000000000000001 R14: 0000000000000221 R15: 0000000000000005 [ 1889.003650] INFO: task syz-executor5:24587 blocked for more than 140 seconds. [ 1889.010912] Not tainted 4.20.0-rc6+ #371 [ 1889.015515] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1889.023516] Call Trace: [ 1889.026103] __schedule+0x8cf/0x21d0 [ 1889.029812] ? mark_held_locks+0x130/0x130 [ 1889.034084] ? __sched_text_start+0x8/0x8 [ 1889.038229] ? print_usage_bug+0xc0/0xc0 [ 1889.042332] ? mark_held_locks+0x130/0x130 [ 1889.046562] ? zap_class+0x640/0x640 [ 1889.050271] ? zap_class+0x640/0x640 [ 1889.054100] ? __lock_acquire+0x62f/0x4c20 [ 1889.058346] ? find_held_lock+0x36/0x1c0 [ 1889.062447] schedule+0xfe/0x460 [ 1889.065825] ? __mutex_lock+0xafa/0x16f0 [ 1889.069879] ? __schedule+0x21d0/0x21d0 [ 1889.073887] ? kasan_check_read+0x11/0x20 [ 1889.078032] ? do_raw_spin_unlock+0xa7/0x330 [ 1889.082475] ? do_raw_spin_trylock+0x270/0x270 [ 1889.087056] ? ww_mutex_lock.part.8+0xf0/0xf0 [ 1889.091544] ? mutex_destroy+0x200/0x200 [ 1889.095649] schedule_preempt_disabled+0x13/0x20 [ 1889.100404] __mutex_lock+0xaff/0x16f0 [ 1889.104327] ? __blkdev_get+0x19b/0x13c0 [ 1889.108390] ? mutex_trylock+0x2b0/0x2b0 [ 1889.112495] ? zap_class+0x640/0x640 [ 1889.116203] ? zap_class+0x640/0x640 [ 1889.119911] ? __lock_acquire+0x62f/0x4c20 [ 1889.124202] ? find_held_lock+0x36/0x1c0 [ 1889.128365] ? get_gendisk+0xd2/0x380 [ 1889.132203] ? lock_downgrade+0x900/0x900 [ 1889.136353] ? lock_release+0xa00/0xa00 [ 1889.140318] ? perf_trace_sched_process_exec+0x860/0x860 [ 1889.145802] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1889.150730] ? get_disk_and_module+0xf0/0xf0 [ 1889.155179] ? kasan_check_write+0x14/0x20 [ 1889.159421] ? up_read+0x225/0x2c0 [ 1889.162994] ? down_read+0x8d/0x120 [ 1889.166623] ? up_read_non_owner+0x100/0x100 [ 1889.171027] ? __down_interruptible+0x700/0x700 [ 1889.175734] ? blkdev_ioctl+0x21b0/0x21b0 [ 1889.179885] mutex_lock_nested+0x16/0x20 [ 1889.183973] ? mutex_lock_nested+0x16/0x20 [ 1889.188205] __blkdev_get+0x19b/0x13c0 [ 1889.192131] ? check_disk_change+0x140/0x140 [ 1889.196545] blkdev_get+0xc1/0xb50 [ 1889.200094] ? bdget+0x5b0/0x5b0 [ 1889.203496] ? do_raw_spin_trylock+0x270/0x270 [ 1889.208075] ? apparmor_capable+0x6c0/0x6c0 [ 1889.212433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1889.217966] ? errseq_sample+0xe5/0x130 [ 1889.221973] ? _copy_to_user+0x110/0x110 [ 1889.226036] ? _raw_spin_unlock+0x2c/0x50 [ 1889.230182] blkdev_open+0x1fb/0x280 [ 1889.233929] do_dentry_open+0x499/0x1250 [ 1889.237990] ? bd_acquire+0x2c0/0x2c0 [ 1889.241891] ? chown_common+0x730/0x730 [ 1889.245865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1889.251405] ? security_inode_permission+0xd2/0x100 [ 1889.256473] ? inode_permission+0xb2/0x560 [ 1889.260725] vfs_open+0xa0/0xd0 [ 1889.264041] path_openat+0x12bc/0x5150 [ 1889.267926] ? rcu_softirq_qs+0x20/0x20 [ 1889.271927] ? unwind_dump+0x190/0x190 [ 1889.275826] ? path_lookupat.isra.43+0xc00/0xc00 [ 1889.280576] ? unwind_get_return_address+0x61/0xa0 [ 1889.285551] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1889.290568] ? expand_files.part.8+0x571/0x9a0 [ 1889.295190] ? find_held_lock+0x36/0x1c0 [ 1889.299263] ? __alloc_fd+0x347/0x6e0 [ 1889.303100] ? lock_downgrade+0x900/0x900 [ 1889.307250] ? getname+0x19/0x20 [ 1889.310618] ? kasan_check_read+0x11/0x20 [ 1889.314799] ? do_raw_spin_unlock+0xa7/0x330 [ 1889.319212] ? do_raw_spin_trylock+0x270/0x270 [ 1889.323834] ? __lock_is_held+0xb5/0x140 [ 1889.327895] ? __check_object_size+0xb1/0x782 [ 1889.332425] ? _raw_spin_unlock+0x2c/0x50 [ 1889.336570] ? __alloc_fd+0x347/0x6e0 [ 1889.340380] do_filp_open+0x255/0x380 [ 1889.344213] ? may_open_dev+0x100/0x100 [ 1889.348199] ? get_unused_fd_flags+0x122/0x1a0 [ 1889.352809] ? __alloc_fd+0x6e0/0x6e0 [ 1889.356619] do_sys_open+0x568/0x700 [ 1889.360327] ? filp_open+0x80/0x80 [ 1889.363913] ? trace_hardirqs_off_caller+0x310/0x310 [ 1889.369023] ? do_sys_ftruncate+0x449/0x550 [ 1889.373389] __x64_sys_open+0x7e/0xc0 [ 1889.377188] do_syscall_64+0x1b9/0x820 [ 1889.381068] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1889.386466] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1889.391393] ? trace_hardirqs_on_caller+0x310/0x310 [ 1889.396443] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1889.401455] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1889.408156] ? __switch_to_asm+0x40/0x70 [ 1889.412254] ? __switch_to_asm+0x34/0x70 [ 1889.416313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1889.421157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1889.426382] RIP: 0033:0x4112b1 [ 1889.429579] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1889.448504] RSP: 002b:00007fa8cd5a8a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1889.456251] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004112b1 [ 1889.463549] RDX: 00007fa8cd5a8afa RSI: 0000000000000002 RDI: 00007fa8cd5a8af0 [ 1889.470821] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1889.478123] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000009 [ 1889.485560] R13: 0000000000000001 R14: 00000000004d9c28 R15: 00000000ffffffff [ 1889.492889] INFO: task syz-executor4:24582 blocked for more than 140 seconds. [ 1889.500151] Not tainted 4.20.0-rc6+ #371 [ 1889.504772] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1889.512774] Call Trace: [ 1889.515359] __schedule+0x8cf/0x21d0 [ 1889.519073] ? __sched_text_start+0x8/0x8 [ 1889.523262] ? kasan_check_read+0x11/0x20 [ 1889.527413] ? mark_held_locks+0xc7/0x130 [ 1889.531552] ? print_usage_bug+0xc0/0xc0 [ 1889.535659] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1889.540414] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1889.545025] ? retint_kernel+0x2d/0x2d [ 1889.548911] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1889.553875] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1889.558640] schedule+0xfe/0x460 [ 1889.562037] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1889.566794] ? __schedule+0x21d0/0x21d0 [ 1889.570764] ? retint_kernel+0x2d/0x2d [ 1889.574695] ? _raw_spin_unlock_irq+0x56/0x80 [ 1889.579191] rwsem_down_read_failed+0x371/0x710 [ 1889.583897] ? rwsem_down_write_failed_killable+0x10/0x10 [ 1889.589429] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1889.594224] ? retint_kernel+0x2d/0x2d [ 1889.598118] ? lock_acquire+0x268/0x520 [ 1889.602132] ? perf_trace_sched_process_exec+0x860/0x860 [ 1889.607589] ? __get_super.part.11+0x107/0x2e0 [ 1889.612548] call_rwsem_down_read_failed+0x18/0x30 [ 1889.617490] down_read+0x9b/0x120 [ 1889.620942] ? __get_super.part.11+0x207/0x2e0 [ 1889.625651] ? __down_interruptible+0x700/0x700 [ 1889.630332] __get_super.part.11+0x207/0x2e0 [ 1889.634859] get_super+0x2d/0x50 [ 1889.638227] fsync_bdev+0x17/0xc0 [ 1889.641787] invalidate_partition+0x35/0x60 [ 1889.646105] drop_partitions.isra.14+0xe1/0x200 [ 1889.650768] ? delete_partition+0x2c0/0x2c0 [ 1889.655201] ? apparmor_cred_transfer+0x590/0x590 [ 1889.660049] rescan_partitions+0x72/0x8e0 [ 1889.664320] __blkdev_reread_part+0x1ad/0x230 [ 1889.668817] blkdev_reread_part+0x26/0x40 [ 1889.673131] loop_reread_partitions+0x163/0x190 [ 1889.677819] ? __loop_update_dio+0x6b0/0x6b0 [ 1889.682332] ? __loop_update_dio+0x1be/0x6b0 [ 1889.686743] loop_set_status+0xb95/0x1010 [ 1889.690891] loop_set_status64+0xaa/0x100 [ 1889.695153] ? loop_set_status_old+0x920/0x920 [ 1889.699764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1889.705416] ? ns_capable_common+0x13f/0x170 [ 1889.709822] lo_ioctl+0x90e/0x1d60 [ 1889.713469] ? find_held_lock+0x36/0x1c0 [ 1889.717528] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1889.721415] blkdev_ioctl+0x98e/0x21b0 [ 1889.726388] ? blkpg_ioctl+0xc10/0xc10 [ 1889.730274] ? lock_downgrade+0x900/0x900 [ 1889.734536] ? check_preemption_disabled+0x48/0x280 [ 1889.739564] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1889.744609] ? kasan_check_read+0x11/0x20 [ 1889.748762] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1889.754144] ? rcu_softirq_qs+0x20/0x20 [ 1889.758127] ? __fget+0x4d1/0x740 [ 1889.761584] ? ksys_dup3+0x680/0x680 [ 1889.765422] ? __might_fault+0x12b/0x1e0 [ 1889.769575] ? lock_downgrade+0x900/0x900 [ 1889.773834] block_ioctl+0xee/0x130 [ 1889.777457] ? blkdev_fallocate+0x400/0x400 [ 1889.781883] do_vfs_ioctl+0x1de/0x1790 [ 1889.785768] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1889.791217] ? ioctl_preallocate+0x300/0x300 [ 1889.795743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1889.800502] ? retint_kernel+0x2d/0x2d [ 1889.804499] ? ksys_ioctl+0x62/0xd0 [ 1889.808126] ? ksys_ioctl+0x98/0xd0 [ 1889.811861] ksys_ioctl+0xa9/0xd0 [ 1889.815312] __x64_sys_ioctl+0x73/0xb0 [ 1889.819201] do_syscall_64+0x1b9/0x820 [ 1889.823214] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1889.828578] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1889.833615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1889.838457] ? trace_hardirqs_on_caller+0x310/0x310 [ 1889.843582] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1889.848597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1889.854244] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1889.859260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1889.864218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1889.869405] RIP: 0033:0x457679 [ 1889.872708] Code: Bad RIP value. [ 1889.876064] RSP: 002b:00007fc84e1b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1889.883885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 1889.891152] RDX: 0000000020000380 RSI: 0000000000004c04 RDI: 0000000000000005 [ 1889.898538] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1889.905918] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc84e1b66d4 [ 1889.913284] R13: 00000000004c097f R14: 00000000004d1ac8 R15: 00000000ffffffff [ 1889.920568] INFO: task syz-executor4:24647 blocked for more than 140 seconds. [ 1889.927950] Not tainted 4.20.0-rc6+ #371 [ 1889.932623] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1889.940603] Call Trace: [ 1889.943324] __schedule+0x8cf/0x21d0 [ 1889.947037] ? mark_held_locks+0x130/0x130 [ 1889.951273] ? __sched_text_start+0x8/0x8 [ 1889.955547] ? print_usage_bug+0xc0/0xc0 [ 1889.959612] ? mark_held_locks+0x130/0x130 [ 1889.963953] ? zap_class+0x640/0x640 [ 1889.967662] ? zap_class+0x640/0x640 [ 1889.971365] ? __lock_acquire+0x62f/0x4c20 [ 1889.975729] ? find_held_lock+0x36/0x1c0 [ 1889.979793] schedule+0xfe/0x460 [ 1889.983277] ? __mutex_lock+0xafa/0x16f0 [ 1889.987334] ? __schedule+0x21d0/0x21d0 [ 1889.991310] ? kasan_check_read+0x11/0x20 [ 1889.995575] ? do_raw_spin_unlock+0xa7/0x330 [ 1889.999981] ? do_raw_spin_trylock+0x270/0x270 [ 1890.004675] ? ww_mutex_lock.part.8+0xf0/0xf0 [ 1890.009170] ? mutex_destroy+0x200/0x200 [ 1890.013352] schedule_preempt_disabled+0x13/0x20 [ 1890.018109] __mutex_lock+0xaff/0x16f0 [ 1890.022107] ? __blkdev_get+0x19b/0x13c0 [ 1890.026260] ? mutex_trylock+0x2b0/0x2b0 [ 1890.030318] ? zap_class+0x640/0x640 [ 1890.034143] ? zap_class+0x640/0x640 [ 1890.037858] ? __lock_acquire+0x62f/0x4c20 [ 1890.042206] ? find_held_lock+0x36/0x1c0 [ 1890.046275] ? get_gendisk+0xd2/0x380 [ 1890.050069] ? lock_downgrade+0x900/0x900 [ 1890.054332] ? lock_release+0xa00/0xa00 [ 1890.058303] ? perf_trace_sched_process_exec+0x860/0x860 [ 1890.063854] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1890.068781] ? get_disk_and_module+0xf0/0xf0 [ 1890.073304] ? kasan_check_write+0x14/0x20 [ 1890.077537] ? up_read+0x225/0x2c0 [ 1890.081089] ? down_read+0x8d/0x120 [ 1890.084827] ? up_read_non_owner+0x100/0x100 [ 1890.089239] ? __down_interruptible+0x700/0x700 [ 1890.094021] ? blkdev_ioctl+0x21b0/0x21b0 [ 1890.098175] mutex_lock_nested+0x16/0x20 [ 1890.102341] ? mutex_lock_nested+0x16/0x20 [ 1890.106574] __blkdev_get+0x19b/0x13c0 [ 1890.110466] ? check_disk_change+0x140/0x140 [ 1890.114995] blkdev_get+0xc1/0xb50 [ 1890.118540] ? bdget+0x5b0/0x5b0 [ 1890.122009] ? do_raw_spin_trylock+0x270/0x270 [ 1890.126604] ? apparmor_capable+0x6c0/0x6c0 [ 1890.130922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1890.136580] ? errseq_sample+0xe5/0x130 [ 1890.140553] ? _copy_to_user+0x110/0x110 [ 1890.144719] ? _raw_spin_unlock+0x2c/0x50 [ 1890.148870] blkdev_open+0x1fb/0x280 [ 1890.152701] do_dentry_open+0x499/0x1250 [ 1890.156760] ? bd_acquire+0x2c0/0x2c0 [ 1890.160560] ? chown_common+0x730/0x730 [ 1890.164650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1890.170191] ? security_inode_permission+0xd2/0x100 [ 1890.175311] ? inode_permission+0xb2/0x560 [ 1890.179553] vfs_open+0xa0/0xd0 [ 1890.182936] path_openat+0x12bc/0x5150 [ 1890.186933] ? rcu_softirq_qs+0x20/0x20 [ 1890.190900] ? unwind_dump+0x190/0x190 [ 1890.194921] ? path_lookupat.isra.43+0xc00/0xc00 [ 1890.199672] ? unwind_get_return_address+0x61/0xa0 [ 1890.204710] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1890.209727] ? expand_files.part.8+0x571/0x9a0 [ 1890.214417] ? find_held_lock+0x36/0x1c0 [ 1890.218479] ? __alloc_fd+0x347/0x6e0 [ 1890.222392] ? lock_downgrade+0x900/0x900 [ 1890.226549] ? getname+0x19/0x20 [ 1890.229915] ? kasan_check_read+0x11/0x20 [ 1890.234183] ? do_raw_spin_unlock+0xa7/0x330 [ 1890.238591] ? do_raw_spin_trylock+0x270/0x270 [ 1890.243301] ? __lock_is_held+0xb5/0x140 [ 1890.247362] ? __check_object_size+0xb1/0x782 [ 1890.251963] ? _raw_spin_unlock+0x2c/0x50 [ 1890.256106] ? __alloc_fd+0x347/0x6e0 [ 1890.259930] do_filp_open+0x255/0x380 [ 1890.263842] ? may_open_dev+0x100/0x100 [ 1890.267825] ? get_unused_fd_flags+0x122/0x1a0 [ 1890.272514] ? __alloc_fd+0x6e0/0x6e0 [ 1890.276317] do_sys_open+0x568/0x700 [ 1890.280025] ? filp_open+0x80/0x80 [ 1890.283694] ? trace_hardirqs_off_caller+0x310/0x310 [ 1890.288805] __x64_sys_open+0x7e/0xc0 [ 1890.292713] do_syscall_64+0x1b9/0x820 [ 1890.296596] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1890.302071] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1890.307001] ? trace_hardirqs_on_caller+0x310/0x310 [ 1890.312123] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1890.317140] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1890.323911] ? __switch_to_asm+0x40/0x70 [ 1890.327967] ? __switch_to_asm+0x34/0x70 [ 1890.332137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1890.336983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1890.342280] RIP: 0033:0x4112b1 [ 1890.345470] Code: ff ff 41 8b 74 24 68 49 8b 7c 24 70 ff 15 9f 83 24 00 85 c0 0f 85 3d fe ff ff 48 8b 3d a0 c3 24 00 8b 05 a2 c3 24 00 48 85 ff <41> 89 44 24 28 74 13 e8 63 a0 ff ff 48 85 c0 49 89 44 24 10 0f 84 [ 1890.364526] RSP: 002b:00007fc84e1737a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1890.372358] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004112b1 [ 1890.379621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fc84e173850 [ 1890.386991] RBP: 000000000072c040 R08: 000000000000000f R09: 0000000000000000 [ 1890.394354] R10: 00007fc84e1749d0 R11: 0000000000000293 R12: 00007fc84e1746d4 [ 1890.401718] R13: 00000000004c57c5 R14: 00000000004d9dd8 R15: 00000000ffffffff [ 1890.408999] INFO: task blkid:24590 blocked for more than 140 seconds. [ 1890.415702] Not tainted 4.20.0-rc6+ #371 [ 1890.420274] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1890.428372] Call Trace: [ 1890.430966] __schedule+0x8cf/0x21d0 [ 1890.434797] ? mark_held_locks+0x130/0x130 [ 1890.439033] ? __sched_text_start+0x8/0x8 [ 1890.444051] ? print_usage_bug+0xc0/0xc0 [ 1890.448123] ? mark_held_locks+0x130/0x130 [ 1890.452469] ? zap_class+0x640/0x640 [ 1890.456186] ? zap_class+0x640/0x640 [ 1890.459904] ? find_held_lock+0x36/0x1c0 [ 1890.464087] schedule+0xfe/0x460 [ 1890.467450] ? __mutex_lock+0xafa/0x16f0 [ 1890.471510] ? __schedule+0x21d0/0x21d0 [ 1890.475625] ? kasan_check_read+0x11/0x20 [ 1890.479782] ? do_raw_spin_unlock+0xa7/0x330 [ 1890.484294] ? do_raw_spin_trylock+0x270/0x270 [ 1890.488874] ? ww_mutex_lock.part.8+0xf0/0xf0 [ 1890.493474] ? mutex_destroy+0x200/0x200 [ 1890.497545] schedule_preempt_disabled+0x13/0x20 [ 1890.502406] __mutex_lock+0xaff/0x16f0 [ 1890.506289] ? __blkdev_get+0x19b/0x13c0 [ 1890.510348] ? mutex_trylock+0x2b0/0x2b0 [ 1890.514532] ? zap_class+0x640/0x640 [ 1890.518244] ? zap_class+0x640/0x640 [ 1890.522194] ? __lock_acquire+0x62f/0x4c20 [ 1890.526435] ? find_held_lock+0x36/0x1c0 [ 1890.530510] ? get_gendisk+0xd2/0x380 [ 1890.534437] ? lock_downgrade+0x900/0x900 [ 1890.538587] ? lock_release+0xa00/0xa00 [ 1890.542676] ? perf_trace_sched_process_exec+0x860/0x860 [ 1890.548123] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1890.553165] ? get_disk_and_module+0xf0/0xf0 [ 1890.557578] ? kasan_check_write+0x14/0x20 [ 1890.561909] ? up_read+0x225/0x2c0 [ 1890.565442] ? down_read+0x8d/0x120 [ 1890.569070] ? up_read_non_owner+0x100/0x100 [ 1890.573600] ? __down_interruptible+0x700/0x700 [ 1890.578272] ? blkdev_ioctl+0x21b0/0x21b0 [ 1890.582531] mutex_lock_nested+0x16/0x20 [ 1890.586588] ? mutex_lock_nested+0x16/0x20 [ 1890.590837] __blkdev_get+0x19b/0x13c0 [ 1890.594876] ? check_disk_change+0x140/0x140 [ 1890.599293] blkdev_get+0xc1/0xb50 [ 1890.602952] ? bdget+0x5b0/0x5b0 [ 1890.606317] ? do_raw_spin_trylock+0x270/0x270 [ 1890.610899] ? apparmor_capable+0x6c0/0x6c0 [ 1890.615334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1890.620870] ? errseq_sample+0xe5/0x130 [ 1890.624974] ? _copy_to_user+0x110/0x110 [ 1890.629034] ? _raw_spin_unlock+0x2c/0x50 [ 1890.633425] blkdev_open+0x1fb/0x280 [ 1890.637143] do_dentry_open+0x499/0x1250 [ 1890.641202] ? bd_acquire+0x2c0/0x2c0 [ 1890.645248] ? chown_common+0x730/0x730 [ 1890.649227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1890.655063] ? security_inode_permission+0xd2/0x100 [ 1890.660084] ? inode_permission+0xb2/0x560 [ 1890.664748] vfs_open+0xa0/0xd0 [ 1890.668029] path_openat+0x12bc/0x5150 [ 1890.672152] ? rcu_softirq_qs+0x20/0x20 [ 1890.676129] ? unwind_dump+0x190/0x190 [ 1890.680025] ? path_lookupat.isra.43+0xc00/0xc00 [ 1890.685016] ? unwind_get_return_address+0x61/0xa0 [ 1890.689942] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1890.695183] ? expand_files.part.8+0x571/0x9a0 [ 1890.699767] ? find_held_lock+0x36/0x1c0 [ 1890.704054] ? __alloc_fd+0x347/0x6e0 [ 1890.707851] ? lock_downgrade+0x900/0x900 [ 1890.712226] ? getname+0x19/0x20 [ 1890.715601] ? kasan_check_read+0x11/0x20 [ 1890.719747] ? do_raw_spin_unlock+0xa7/0x330 [ 1890.724415] ? do_raw_spin_trylock+0x270/0x270 [ 1890.728995] ? __lock_is_held+0xb5/0x140 [ 1890.733320] ? __check_object_size+0xb1/0x782 [ 1890.737827] ? _raw_spin_unlock+0x2c/0x50 [ 1890.742257] ? __alloc_fd+0x347/0x6e0 [ 1890.746068] do_filp_open+0x255/0x380 [ 1890.749865] ? may_open_dev+0x100/0x100 [ 1890.754095] ? get_unused_fd_flags+0x122/0x1a0 [ 1890.758698] ? __alloc_fd+0x6e0/0x6e0 [ 1890.762733] do_sys_open+0x568/0x700 [ 1890.766446] ? filp_open+0x80/0x80 [ 1890.769988] ? trace_hardirqs_off_caller+0x310/0x310 [ 1890.775338] __x64_sys_open+0x7e/0xc0 [ 1890.779507] do_syscall_64+0x1b9/0x820 [ 1890.783639] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1890.789001] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1890.794155] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1890.798998] ? trace_hardirqs_on_caller+0x310/0x310 [ 1890.804274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1890.809810] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1890.815050] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1890.819899] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1890.825387] RIP: 0033:0x7f0b3133e120 [ 1890.829106] Code: Bad RIP value. [ 1890.832704] RSP: 002b:00007fff7e40bc58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1890.840406] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0b3133e120 [ 1890.847907] RDX: 00007fff7e40df3f RSI: 0000000000000000 RDI: 00007fff7e40df3f [ 1890.855390] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 1890.862882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001c06030 [ 1890.870147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 1890.877660] [ 1890.877660] Showing all locks held in the system: [ 1890.884276] 1 lock held by khungtaskd/1019: [ 1890.888585] #0: 00000000d7436ce0 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 1890.897505] 1 lock held by rsyslogd/5987: [ 1890.901859] #0: 000000009ea0cd8e (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 1890.909841] 2 locks held by getty/6078: [ 1890.914025] #0: 00000000e55d85f9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1890.922496] #1: 0000000027608c0d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1890.931409] 2 locks held by getty/6079: [ 1890.935612] #0: 000000001238b910 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1890.944085] #1: 0000000081b8ad2b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1890.953164] 2 locks held by getty/6080: [ 1890.957126] #0: 000000004709c686 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1890.965593] #1: 00000000fa361e74 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1890.974659] 2 locks held by getty/6081: [ 1890.978621] #0: 0000000016025f8e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1890.987085] #1: 0000000063de715e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1890.996161] 2 locks held by getty/6082: [ 1891.000126] #0: 000000005d6676d0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1891.008597] #1: 00000000e6b9e1d0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1891.017661] 2 locks held by getty/6083: [ 1891.021832] #0: 00000000dd73ef19 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1891.030066] #1: 000000006f508629 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1891.039156] 2 locks held by getty/6084: [ 1891.043329] #0: 0000000032a2c21b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1891.051564] #1: 000000005e1200c6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1891.060655] 1 lock held by syz-executor5/24578: [ 1891.065540] #0: 00000000e67d8a5e (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x34/0x540 [ 1891.073654] 1 lock held by syz-executor5/24579: [ 1891.078311] 1 lock held by syz-executor5/24587: [ 1891.083264] #0: 00000000e67d8a5e (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19b/0x13c0 [ 1891.091840] 3 locks held by syz-executor4/24582: [ 1891.096673] #0: 00000000c3feb6a0 (&lo->lo_ctl_mutex/1){+.+.}, at: lo_ioctl+0x8e/0x1d60 [ 1891.105055] #1: 00000000e67d8a5e (&bdev->bd_mutex){+.+.}, at: blkdev_reread_part+0x1e/0x40 [ 1891.113781] #2: 00000000ee673676 (&type->s_umount_key#65){++++}, at: __get_super.part.11+0x207/0x2e0 [ 1891.123388] 1 lock held by syz-executor4/24647: [ 1891.128060] #0: 00000000e67d8a5e (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19b/0x13c0 [ 1891.136540] 1 lock held by blkid/24590: [ 1891.140500] #0: 00000000e67d8a5e (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19b/0x13c0 [ 1891.149076] [ 1891.150701] ============================================= [ 1891.150701] [ 1891.157944] NMI backtrace for cpu 1 [ 1891.161567] CPU: 1 PID: 1019 Comm: khungtaskd Not tainted 4.20.0-rc6+ #371 [ 1891.168566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.177903] Call Trace: [ 1891.180482] dump_stack+0x244/0x39d [ 1891.184107] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1891.189303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1891.194852] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 1891.199575] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 1891.204758] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 1891.210029] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1891.215209] watchdog+0xb51/0x1060 [ 1891.218752] ? hungtask_pm_notify+0xb0/0xb0 [ 1891.223071] ? __kthread_parkme+0xce/0x1a0 [ 1891.227307] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1891.232399] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1891.237503] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1891.242101] ? trace_hardirqs_on+0xbd/0x310 [ 1891.246424] ? kasan_check_read+0x11/0x20 [ 1891.250564] ? __kthread_parkme+0xce/0x1a0 [ 1891.254792] ? trace_hardirqs_off_caller+0x310/0x310 [ 1891.259888] ? trace_hardirqs_off_caller+0x310/0x310 [ 1891.264984] ? lockdep_init_map+0x9/0x10 [ 1891.269051] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1891.274153] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1891.279776] ? __kthread_parkme+0xfb/0x1a0 [ 1891.284006] ? hungtask_pm_notify+0xb0/0xb0 [ 1891.288319] kthread+0x35a/0x440 [ 1891.291678] ? kthread_stop+0x900/0x900 [ 1891.295645] ret_from_fork+0x3a/0x50 [ 1891.300980] NMI backtrace for cpu 0 [ 1891.300985] CPU: 0 PID: 24579 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371 [ 1891.300990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.300993] RIP: 0010:__lock_acquire+0x842/0x4c20 [ 1891.301002] Code: 55 ff ff 4c 8b 9c 24 90 00 00 00 85 c0 0f 84 4d 09 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 70 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 7e 30 00 00 41 8b 47 20 25 00 80 04 00 3d [ 1891.301006] RSP: 0018:ffff88817dcf6660 EFLAGS: 00000806 [ 1891.301012] RAX: 0000000000000000 RBX: 0000000073efa79d RCX: ffff8881bb8ba980 [ 1891.301016] RDX: 1ffff11037717539 RSI: 0000000000000000 RDI: 0000000000000000 [ 1891.301020] RBP: ffff88817dcf69e8 R08: ffff8881bb8ba9c8 R09: 0000000000000008 [ 1891.301024] R10: 0000000000000028 R11: ffff8881bb8ba100 R12: 0000000000000000 [ 1891.301028] R13: 0000000061e31a18 R14: 533d52eed5d2c1b5 R15: ffff8881bb8ba9a8 [ 1891.301032] FS: 00007fa8cd5ca700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 [ 1891.301036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1891.301040] CR2: ffffffffff600400 CR3: 00000001bacd9000 CR4: 00000000001406f0 [ 1891.301044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1891.301048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1891.301050] Call Trace: [ 1891.301053] ? print_usage_bug+0xc0/0xc0 [ 1891.301056] ? __switch_to_asm+0x40/0x70 [ 1891.301059] ? __switch_to_asm+0x34/0x70 [ 1891.301062] ? __switch_to_asm+0x40/0x70 [ 1891.301064] ? zap_class+0x640/0x640 [ 1891.301067] ? mark_held_locks+0x130/0x130 [ 1891.301070] ? zap_class+0x640/0x640 [ 1891.301073] ? __lock_is_held+0xb5/0x140 [ 1891.301076] ? find_held_lock+0x36/0x1c0 [ 1891.301079] ? find_get_entry+0xa87/0x1120 [ 1891.301081] ? lock_downgrade+0x900/0x900 [ 1891.301085] ? check_preemption_disabled+0x48/0x280 [ 1891.301088] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1891.301091] ? kasan_check_read+0x11/0x20 [ 1891.301094] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1891.301097] ? check_preemption_disabled+0x48/0x280 [ 1891.301100] ? rcu_softirq_qs+0x20/0x20 [ 1891.301103] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1891.301106] ? xas_load+0x43/0x1e0 [ 1891.301109] ? find_get_entry+0xaae/0x1120 [ 1891.301112] ? find_held_lock+0x36/0x1c0 [ 1891.301114] lock_acquire+0x1ed/0x520 [ 1891.301117] ? find_get_entry+0x2e3/0x1120 [ 1891.301120] ? lock_downgrade+0x900/0x900 [ 1891.301123] ? check_preemption_disabled+0x48/0x280 [ 1891.301126] ? lock_release+0xa00/0xa00 [ 1891.301129] ? kasan_check_read+0x11/0x20 [ 1891.301131] ? rcu_softirq_qs+0x20/0x20 [ 1891.301134] find_get_entry+0x319/0x1120 [ 1891.301137] ? find_get_entry+0x2e3/0x1120 [ 1891.301140] ? filemap_map_pages+0x1a20/0x1a20 [ 1891.301143] ? mark_held_locks+0xc7/0x130 [ 1891.301146] ? retint_kernel+0x2d/0x2d [ 1891.301149] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1891.301152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1891.301156] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1891.301158] ? kasan_check_write+0x14/0x20 [ 1891.301161] ? finish_task_switch+0x2f4/0x910 [ 1891.301164] ? zap_class+0x640/0x640 [ 1891.301167] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1891.301171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1891.301174] ? pagecache_get_page+0x2d8/0xf00 [ 1891.301177] ? add_to_page_cache_lru+0xdb0/0xdb0 [ 1891.301180] ? print_usage_bug+0xc0/0xc0 [ 1891.301183] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1891.301186] ? __might_sleep+0x95/0x190 [ 1891.301188] pagecache_get_page+0x12f/0xf00 [ 1891.301192] ? add_to_page_cache_lru+0xdb0/0xdb0 [ 1891.301194] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1891.301197] ? __find_get_block+0x2f7/0xf20 [ 1891.301200] ? __find_get_block+0x2f7/0xf20 [ 1891.301203] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1891.301206] ? trace_hardirqs_on+0xbd/0x310 [ 1891.301209] ? __getblk_gfp+0x2b3/0xd50 [ 1891.301212] ? trace_hardirqs_off_caller+0x310/0x310 [ 1891.301215] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1891.301219] ? check_preemption_disabled+0x48/0x280 [ 1891.301222] ? __find_get_block+0x3be/0xf20 [ 1891.301224] ? retint_kernel+0x2d/0x2d [ 1891.301227] ? try_to_free_buffers+0xc80/0xc80 [ 1891.301231] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1891.301233] ? unlock_page+0x2c2/0x4c0 [ 1891.301236] ? wake_up_page_bit+0x6f0/0x6f0 [ 1891.301239] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1891.301242] ? init_page_buffers+0x433/0x570 [ 1891.301245] ? __set_page_dirty_buffers+0x810/0x810 [ 1891.301248] __getblk_gfp+0x3aa/0xd50 [ 1891.301251] ? prepare_to_wait+0x1b3/0x3f0 [ 1891.301254] ? __find_get_block+0xf20/0xf20 [ 1891.301257] ? io_schedule+0x1c/0x70 [ 1891.301259] ? __wait_on_bit+0x92/0x130 [ 1891.301262] ? __wait_on_bit+0x130/0x130 [ 1891.301265] ? kasan_check_write+0x14/0x20 [ 1891.301268] ? __brelse+0x104/0x180 [ 1891.301271] ? block_commit_write+0x30/0x30 [ 1891.301273] __bread_gfp+0x2d/0x310 [ 1891.301276] fat__get_entry+0x5a6/0xa40 [ 1891.301279] ? __put_user_ns+0x60/0x60 [ 1891.301281] ? copy_overflow+0x30/0x30 [ 1891.301284] ? inode_sb_list_add+0x213/0x2f0 [ 1891.301287] ? lock_downgrade+0x900/0x900 [ 1891.301290] fat_get_short_entry+0x13c/0x2c0 [ 1891.301293] fat_subdirs+0x142/0x290 [ 1891.301295] ? fat_dir_ioctl+0x1b0/0x1b0 [ 1891.301298] ? _raw_spin_unlock+0x2c/0x50 [ 1891.301301] ? inode_sb_list_add+0x213/0x2f0 [ 1891.301304] ? evict_inodes+0x610/0x610 [ 1891.301306] ? no_open+0x10/0x10 [ 1891.301309] ? _raw_spin_unlock+0x2c/0x50 [ 1891.301312] fat_fill_super+0x2a9f/0x4310 [ 1891.301315] ? fat_flush_inodes+0x1a0/0x1a0 [ 1891.301318] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1891.301321] ? vsnprintf+0x20d/0x1b60 [ 1891.301324] ? pointer+0x900/0x900 [ 1891.301326] ? snprintf+0xae/0xe0 [ 1891.301329] ? vsprintf+0x40/0x40 [ 1891.301332] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1891.301335] ? set_blocksize+0x2c1/0x340 [ 1891.301337] vfat_fill_super+0x31/0x40 [ 1891.301340] mount_bdev+0x30c/0x3e0 [ 1891.301342] ? vfat_mount+0x40/0x40 [ 1891.301345] vfat_mount+0x34/0x40 [ 1891.301348] mount_fs+0xae/0x31d [ 1891.301351] vfs_kern_mount.part.35+0xdc/0x4f0 [ 1891.301353] ? may_umount+0xb0/0xb0 [ 1891.301356] ? _raw_read_unlock+0x2c/0x50 [ 1891.301359] ? __get_fs_type+0x97/0xc0 [ 1891.301361] do_mount+0x581/0x31f0 [ 1891.301364] ? check_preemption_disabled+0x48/0x280 [ 1891.301367] ? copy_mount_string+0x40/0x40 [ 1891.301370] ? copy_mount_options+0x5f/0x430 [ 1891.301373] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1891.301377] ? kmem_cache_alloc_trace+0x353/0x750 [ 1891.301380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1891.301383] ? copy_mount_options+0x315/0x430 [ 1891.301386] ksys_mount+0x12d/0x140 [ 1891.301388] __x64_sys_mount+0xbe/0x150 [ 1891.301391] do_syscall_64+0x1b9/0x820 [ 1891.301394] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1891.301397] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1891.301400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1891.301404] ? trace_hardirqs_on_caller+0x310/0x310 [ 1891.301407] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1891.301418] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1891.301422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1891.301424] RIP: 0033:0x45a0ea [ 1891.301433] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1891.301436] RSP: 002b:00007fa8cd5c9a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1891.301444] RAX: ffffffffffffffda RBX: 00007fa8cd5c9b30 RCX: 000000000045a0ea [ 1891.301448] RDX: 00007fa8cd5c9ad0 RSI: 0000000020000100 RDI: 00007fa8cd5c9af0 [ 1891.301452] RBP: 0000000020000100 R08: 00007fa8cd5c9b30 R09: 00007fa8cd5c9ad0 [ 1891.301456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1891.301460] R13: 0000000000000000 R14: 00000000004d9c28 R15: 00000000ffffffff [ 1891.305892] Kernel panic - not syncing: hung_task: blocked tasks [ 1892.036817] CPU: 1 PID: 1019 Comm: khungtaskd Not tainted 4.20.0-rc6+ #371 [ 1892.043816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1892.053155] Call Trace: [ 1892.055741] dump_stack+0x244/0x39d [ 1892.059374] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1892.064559] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1892.069576] panic+0x2ad/0x55c [ 1892.072763] ? add_taint.cold.5+0x16/0x16 [ 1892.076907] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 1892.082354] ? nmi_trigger_cpumask_backtrace+0x1f9/0x22a [ 1892.087802] ? nmi_trigger_cpumask_backtrace+0x1d1/0x22a [ 1892.093251] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 1892.098783] watchdog+0xb62/0x1060 [ 1892.102324] ? hungtask_pm_notify+0xb0/0xb0 [ 1892.106643] ? __kthread_parkme+0xce/0x1a0 [ 1892.110868] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1892.115960] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1892.121057] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1892.125636] ? trace_hardirqs_on+0xbd/0x310 [ 1892.129950] ? kasan_check_read+0x11/0x20 [ 1892.134108] ? __kthread_parkme+0xce/0x1a0 [ 1892.138335] ? trace_hardirqs_off_caller+0x310/0x310 [ 1892.143439] ? trace_hardirqs_off_caller+0x310/0x310 [ 1892.148535] ? lockdep_init_map+0x9/0x10 [ 1892.152597] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1892.157694] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1892.163224] ? __kthread_parkme+0xfb/0x1a0 [ 1892.167452] ? hungtask_pm_notify+0xb0/0xb0 [ 1892.171769] kthread+0x35a/0x440 [ 1892.175129] ? kthread_stop+0x900/0x900 [ 1892.179096] ret_from_fork+0x3a/0x50 [ 1892.184105] Kernel Offset: disabled [ 1892.187730] Rebooting in 86400 seconds..