4800, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 795.891829] binder: 9647:9653 ioctl c0306201 20a20000 returned -14 [ 795.906683] binder: 9647:9654 unknown command 0 [ 795.911733] binder: 9647:9654 ioctl c0306201 20a20000 returned -22 [ 795.972361] hfs: can't find a HFS filesystem on dev loop1 03:42:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_\natch_time'}}]}) 03:42:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0x3f00000000000000}}], 0x30) 03:42:06 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x1000000, 0x0, 0x0}) 03:42:06 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4c00, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:06 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0) 03:42:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0x4000000000000000}}], 0x30) [ 796.324250] binder: 9672:9677 ioctl c0306201 20a20000 returned -14 [ 796.363601] hfs: can't find a HFS filesystem on dev loop1 03:42:07 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 796.406270] binder: 9672:9689 unknown command 0 [ 796.411023] binder: 9672:9689 ioctl c0306201 20a20000 returned -22 03:42:07 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x2000000, 0x0, 0x0}) 03:42:07 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x42440000, 0x0, 0x0, 0x0, 0x0) 03:42:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0xbf00000000000000}}], 0x30) 03:42:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 796.686809] binder: 9709:9714 ioctl c0306201 20a20000 returned -14 [ 796.718941] hfs: can't find a HFS filesystem on dev loop1 [ 796.761139] binder: 9709:9720 unknown command 0 [ 796.789793] binder: 9709:9720 ioctl c0306201 20a20000 returned -22 03:42:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_%atch_time'}}]}) 03:42:07 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6800, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0xcef6b05bad000000}}], 0x30) 03:42:07 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x4d500000, 0x0, 0x0, 0x0, 0x0) 03:42:07 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x3000000, 0x0, 0x0}) 03:42:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0xfdffffff00000000}}], 0x30) [ 796.995081] hfs: can't find a HFS filesystem on dev loop1 [ 797.027867] binder: 9731:9739 ioctl c0306201 20a20000 returned -14 03:42:07 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6c00, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:07 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4000000, 0x0, 0x0}) [ 797.043972] binder: 9731:9740 unknown command 0 [ 797.051123] binder: 9731:9740 ioctl c0306201 20a20000 returned -22 03:42:07 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7400, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:07 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x53540000, 0x0, 0x0, 0x0, 0x0) [ 797.239097] binder: 9751:9754 ioctl c0306201 20a20000 returned -14 [ 797.321282] binder: 9751:9759 unknown command 0 03:42:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0xfeffffff00000000}}], 0x30) [ 797.341495] binder: 9751:9759 ioctl c0306201 20a20000 returned -22 [ 797.411443] hfs: can't find a HFS filesystem on dev loop1 [ 797.576905] EXT4-fs: 4 callbacks suppressed [ 797.576918] EXT4-fs (sda1): Unrecognized mount option "max_%atch_time=0x0000000000000000" or missing value [ 797.669079] EXT4-fs (sda1): Unrecognized mount option "max_%atch_time=0x0000000000000000" or missing value 03:42:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_b\ntch_time'}}]}) 03:42:08 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x5000000, 0x0, 0x0}) 03:42:08 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x5e020000, 0x0, 0x0, 0x0, 0x0) 03:42:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:08 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7a00, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 797.803773] binder: 9785:9791 ioctl c0306201 20a20000 returned -14 [ 797.847763] binder: 9785:9798 ioctl c0306201 20a20000 returned -14 03:42:08 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x1000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 797.891275] hfs: can't find a HFS filesystem on dev loop1 03:42:08 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6000000, 0x0, 0x0}) 03:42:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:08 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x60000000, 0x0, 0x0, 0x0, 0x0) 03:42:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 798.115720] binder: 9807:9813 ioctl c0306201 20a20000 returned -14 [ 798.179308] binder: 9807:9821 unknown command 0 [ 798.193141] binder: 9807:9821 ioctl c0306201 20a20000 returned -22 [ 798.242832] hfs: can't find a HFS filesystem on dev loop1 [ 798.294205] EXT4-fs (sda1): Unrecognized mount option "max_b [ 798.294205] tch_time=0x0000000000000000" or missing value [ 798.438767] EXT4-fs (sda1): Unrecognized mount option "max_b [ 798.438767] tch_time=0x0000000000000000" or missing value 03:42:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_b%tch_time'}}]}) 03:42:09 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x2000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:09 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7000000, 0x0, 0x0}) 03:42:09 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, 0x0) 03:42:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:09 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x3000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 798.632854] hfs: can't find a HFS filesystem on dev loop1 [ 798.665990] binder: 9838:9848 ioctl c0306201 20a20000 returned -14 03:42:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:09 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xb2000000, 0x0, 0x0, 0x0, 0x0) [ 798.739343] binder: 9838:9856 unknown command 0 [ 798.744100] binder: 9838:9856 ioctl c0306201 20a20000 returned -22 03:42:09 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x12000000, 0x0, 0x0}) 03:42:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:09 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 798.921561] hfs: can't find a HFS filesystem on dev loop1 [ 799.022597] binder: 9870:9873 ioctl c0306201 20a20000 returned -14 [ 799.130618] EXT4-fs (sda1): Unrecognized mount option "max_b%tch_time=0x0000000000000000" or missing value [ 799.253601] EXT4-fs (sda1): Unrecognized mount option "max_b%tch_time=0x0000000000000000" or missing value 03:42:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_ba\nch_time'}}]}) 03:42:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:09 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, 0x0) 03:42:09 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x20000000, 0x0, 0x0}) 03:42:09 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x5000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 799.449723] binder: 9895:9901 ioctl c0306201 20a20000 returned -14 03:42:10 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 799.514760] hfs: can't find a HFS filesystem on dev loop1 [ 799.537042] binder: 9895:9909 unknown command 0 [ 799.543062] binder: 9895:9909 ioctl c0306201 20a20000 returned -22 03:42:10 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xebffffff, 0x0, 0x0, 0x0, 0x0) 03:42:10 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x3f000000, 0x0, 0x0}) 03:42:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:10 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 799.763808] binder: 9921:9922 ioctl c0306201 20a20000 returned -14 [ 799.807125] hfs: can't find a HFS filesystem on dev loop1 [ 799.826289] binder: 9921:9930 unknown command 0 [ 799.831131] binder: 9921:9930 ioctl c0306201 20a20000 returned -22 [ 799.960018] EXT4-fs (sda1): Unrecognized mount option "max_ba [ 799.960018] ch_time=0x0000000000000000" or missing value [ 800.063344] EXT4-fs (sda1): Unrecognized mount option "max_ba [ 800.063344] ch_time=0x0000000000000000" or missing value 03:42:10 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xf4ffffff, 0x0, 0x0, 0x0, 0x0) 03:42:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_ba%ch_time'}}]}) 03:42:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:10 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x48000000, 0x0, 0x0}) 03:42:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:10 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x12000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 800.196325] binder: 9955:9957 ioctl c0306201 20a20000 returned -14 [ 800.215961] binder: 9955:9960 unknown command 0 [ 800.220815] binder: 9955:9960 ioctl c0306201 20a20000 returned -22 [ 800.249694] hfs: can't find a HFS filesystem on dev loop1 03:42:10 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x20000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:10 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4c000000, 0x0, 0x0}) 03:42:10 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xf5ffffff, 0x0, 0x0, 0x0, 0x0) 03:42:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 800.463760] binder: 9972:9975 ioctl c0306201 20a20000 returned -14 03:42:11 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x3f000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 800.573598] hfs: can't find a HFS filesystem on dev loop1 [ 800.581350] binder: 9972:9990 unknown command 0 [ 800.601556] binder: 9972:9990 ioctl c0306201 20a20000 returned -22 [ 800.751478] EXT4-fs (sda1): Unrecognized mount option "max_ba%ch_time=0x0000000000000000" or missing value [ 800.899036] EXT4-fs (sda1): Unrecognized mount option "max_ba%ch_time=0x0000000000000000" or missing value 03:42:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_bat\th_time'}}]}) 03:42:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:11 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, 0x0) 03:42:11 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x60000000, 0x0, 0x0}) 03:42:11 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x48000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 801.032185] binder: 10010:10014 ioctl c0306201 20a20000 returned -14 03:42:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 801.084750] hfs: can't find a HFS filesystem on dev loop1 [ 801.112176] binder: 10010:10025 unknown command 0 03:42:11 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4c000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 801.130453] binder: 10010:10025 ioctl c0306201 20a20000 returned -22 03:42:11 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x68000000, 0x0, 0x0}) 03:42:11 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfbffffff, 0x0, 0x0, 0x0, 0x0) 03:42:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 801.329418] binder: 10035:10038 ioctl c0306201 20a20000 returned -14 [ 801.385657] binder: 10035:10041 ioctl c0306201 20a20000 returned -14 [ 801.460182] hfs: can't find a HFS filesystem on dev loop1 03:42:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_bat\nh_time'}}]}) 03:42:12 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x60000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:12 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6c000000, 0x0, 0x0}) 03:42:12 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:12 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xff0f0000, 0x0, 0x0, 0x0, 0x0) 03:42:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:12 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x68000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 801.810199] hfs: can't find a HFS filesystem on dev loop1 [ 801.838244] binder: 10061:10070 ioctl c0306201 20a20000 returned -14 03:42:12 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 801.906110] binder: 10061:10076 unknown command 0 [ 801.914485] binder: 10061:10076 ioctl c0306201 20a20000 returned -22 03:42:12 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, 0x0) 03:42:12 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6c000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:12 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x74000000, 0x0, 0x0}) 03:42:12 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 802.153490] binder: 10090:10092 ioctl c0306201 20a20000 returned -14 [ 802.201892] hfs: can't find a HFS filesystem on dev loop1 [ 802.216373] binder: 10090:10098 ioctl c0306201 20a20000 returned -14 03:42:13 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7a000000, 0x0, 0x0}) 03:42:13 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:13 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x74000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:13 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, 0x0) 03:42:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_bat%h_time'}}]}) 03:42:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:13 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:13 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7a000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 802.587465] binder: 10115:10126 ioctl c0306201 20a20000 returned -14 [ 802.711060] hfs: can't find a HFS filesystem on dev loop1 [ 802.729124] binder: 10115:10131 ioctl c0306201 20a20000 returned -14 03:42:13 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x100000000000000, 0x0, 0x0}) 03:42:13 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffeb, 0x0, 0x0, 0x0, 0x0) 03:42:13 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:13 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x100000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 802.959584] binder: 10141:10146 ioctl c0306201 20a20000 returned -14 [ 802.983716] hfs: can't find a HFS filesystem on dev loop1 [ 803.031038] binder: 10141:10154 ioctl c0306201 20a20000 returned -14 [ 803.220823] EXT4-fs: 3 callbacks suppressed [ 803.220839] EXT4-fs (sda1): Unrecognized mount option "max_bat%h_time=0x0000000000000000" or missing value [ 803.365699] EXT4-fs (sda1): Unrecognized mount option "max_bat%h_time=0x0000000000000000" or missing value 03:42:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batc\n_time'}}]}) 03:42:14 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff4, 0x0, 0x0, 0x0, 0x0) 03:42:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:14 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x200000000000000, 0x0, 0x0}) 03:42:14 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x200000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 803.507945] binder: 10172:10174 ioctl c0306201 20a20000 returned -14 [ 803.546517] binder: 10172:10180 unknown command 0 03:42:14 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x300000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 803.569197] binder: 10172:10180 ioctl c0306201 20a20000 returned -22 [ 803.608781] hfs: can't find a HFS filesystem on dev loop1 03:42:14 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x300000000000000, 0x0, 0x0}) 03:42:14 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff5, 0x0, 0x0, 0x0, 0x0) 03:42:14 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x400000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 803.814504] binder: 10196:10198 ioctl c0306201 20a20000 returned -14 03:42:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 803.858937] binder: 10196:10200 unknown command 0 [ 803.894142] binder: 10196:10200 ioctl c0306201 20a20000 returned -22 [ 804.002628] hfs: can't find a HFS filesystem on dev loop1 [ 804.116062] EXT4-fs (sda1): Unrecognized mount option "max_batc [ 804.116062] _time=0x0000000000000000" or missing value [ 804.236605] EXT4-fs (sda1): Unrecognized mount option "max_batc [ 804.236605] _time=0x0000000000000000" or missing value 03:42:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batc%_time'}}]}) 03:42:14 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x400000000000000, 0x0, 0x0}) 03:42:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:14 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x500000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:14 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, 0x0) [ 804.377729] binder: 10227:10230 ioctl c0306201 20a20000 returned -14 [ 804.409868] binder: 10227:10235 unknown command 0 03:42:15 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x600000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 804.421220] binder: 10227:10235 ioctl c0306201 20a20000 returned -22 03:42:15 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x500000000000000, 0x0, 0x0}) [ 804.471065] hfs: can't find a HFS filesystem on dev loop1 [ 804.589474] binder: 10247:10248 ioctl c0306201 20a20000 returned -14 03:42:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:15 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0) 03:42:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 804.669559] binder: 10247:10253 unknown command 0 [ 804.710153] binder: 10247:10253 ioctl c0306201 20a20000 returned -22 [ 804.808458] hfs: can't find a HFS filesystem on dev loop1 [ 804.942525] EXT4-fs (sda1): Unrecognized mount option "max_batc%_time=0x0000000000000000" or missing value [ 805.078421] EXT4-fs (sda1): Unrecognized mount option "max_batc%_time=0x0000000000000000" or missing value 03:42:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch\ntime'}}]}) 03:42:15 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x700000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:15 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x600000000000000, 0x0, 0x0}) 03:42:15 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, 0x0) 03:42:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 805.210600] binder: 10282:10284 ioctl c0306201 20a20000 returned -14 [ 805.261758] binder: 10282:10292 ioctl c0306201 20a20000 returned -14 03:42:15 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x1200000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) [ 805.320479] hfs: can't find a HFS filesystem on dev loop1 03:42:15 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x700000000000000, 0x0, 0x0}) 03:42:16 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:16 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 805.534547] binder: 10305:10308 ioctl c0306201 20a20000 returned -14 [ 805.599768] binder: 10305:10315 ioctl c0306201 20a20000 returned -14 [ 805.607843] hfs: can't find a HFS filesystem on dev loop1 [ 805.768929] EXT4-fs (sda1): Unrecognized mount option "max_batch [ 805.768929] time=0x0000000000000000" or missing value [ 805.875887] EXT4-fs (sda1): Unrecognized mount option "max_batch [ 805.875887] time=0x0000000000000000" or missing value 03:42:16 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:16 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x2000000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:16 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_\nime'}}]}) 03:42:16 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x1200000000000000, 0x0, 0x0}) [ 806.007981] binder: 10336:10339 ioctl c0306201 20a20000 returned -14 [ 806.041033] binder: 10336:10345 unknown command 0 03:42:16 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}}], 0x30) 03:42:16 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x3f00000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 806.058311] binder: 10336:10345 ioctl c0306201 20a20000 returned -22 03:42:16 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x2000000000000000, 0x0, 0x0}) [ 806.122920] hfs: can't find a HFS filesystem on dev loop1 03:42:16 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:16 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x4}}], 0x30) 03:42:16 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4800000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 806.303446] binder: 10358:10361 ioctl c0306201 20a20000 returned -14 [ 806.378295] hfs: can't find a HFS filesystem on dev loop1 [ 806.391685] binder: 10358:10370 unknown command 0 [ 806.421702] binder: 10358:10370 ioctl c0306201 20a20000 returned -22 [ 806.591217] EXT4-fs (sda1): Unrecognized mount option "max_batch_ [ 806.591217] ime=0x0000000000000000" or missing value [ 806.706254] EXT4-fs (sda1): Unrecognized mount option "max_batch_ [ 806.706254] ime=0x0000000000000000" or missing value 03:42:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_%ime'}}]}) 03:42:17 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4c00000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:17 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x3f00000000000000, 0x0, 0x0}) 03:42:17 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x7ffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:42:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x8}}], 0x30) [ 806.839068] binder: 10389:10394 ioctl c0306201 20a20000 returned -14 03:42:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xbf}}], 0x30) [ 806.922996] hfs: can't find a HFS filesystem on dev loop1 03:42:17 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4800000000000000, 0x0, 0x0}) 03:42:17 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6000000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:17 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xe000000000000, 0x0, 0x0, 0x0, 0x0) [ 807.133443] binder: 10413:10415 ioctl c0306201 20a20000 returned -14 03:42:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e02000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x1f00}}], 0x30) [ 807.181919] binder: 10413:10418 unknown command 0 03:42:17 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4c00000000000000, 0x0, 0x0}) [ 807.244165] hfs: can't find a HFS filesystem on dev loop1 [ 807.255550] binder: 10413:10418 ioctl c0306201 20a20000 returned -22 [ 807.435809] binder: 10430:10437 ioctl c0306201 20a20000 returned -14 [ 807.473990] binder: 10430:10442 unknown command 0 [ 807.483201] binder: 10430:10442 ioctl c0306201 20a20000 returned -22 03:42:18 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:18 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6800000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x3f00}}], 0x30) 03:42:18 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6000000000000000, 0x0, 0x0}) 03:42:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_t\nme'}}]}) 03:42:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 807.700878] binder: 10450:10455 ioctl c0306201 20a20000 returned -14 [ 807.720886] hfs: can't find a HFS filesystem on dev loop1 03:42:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x4000}}], 0x30) 03:42:18 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6c00000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 807.768413] binder: 10450:10463 unknown command 0 03:42:18 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, 0x0) [ 807.842731] binder: 10450:10463 ioctl c0306201 20a20000 returned -22 03:42:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xbf00}}], 0x30) 03:42:18 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6800000000000000, 0x0, 0x0}) 03:42:18 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7400000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 808.077214] binder: 10482:10485 ioctl c0306201 20a20000 returned -14 [ 808.085779] hfs: can't find a HFS filesystem on dev loop1 [ 808.111217] binder: 10482:10486 unknown command 0 03:42:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x40000}}], 0x30) [ 808.136886] binder: 10482:10486 ioctl c0306201 20a20000 returned -22 03:42:18 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6c00000000000000, 0x0, 0x0}) 03:42:18 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, 0x0) [ 808.349597] binder: 10498:10500 ioctl c0306201 20a20000 returned -14 [ 808.397710] binder: 10498:10500 ioctl c0306201 20a20000 returned -14 [ 808.411539] EXT4-fs: 2 callbacks suppressed [ 808.411553] EXT4-fs (sda1): Unrecognized mount option "max_batch_t [ 808.411553] me=0x0000000000000000" or missing value [ 808.462367] hfs: can't find a HFS filesystem on dev loop1 [ 808.541330] EXT4-fs (sda1): Unrecognized mount option "max_batch_t [ 808.541330] me=0x0000000000000000" or missing value 03:42:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_ti\ne'}}]}) 03:42:19 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x1000000}}], 0x30) 03:42:19 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7a00000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:19 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7400000000000000, 0x0, 0x0}) 03:42:19 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:19 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x4000000}}], 0x30) [ 808.722631] binder: 10517:10528 ioctl c0306201 20a20000 returned -14 03:42:19 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x630b}], 0x0, 0x0, 0x0}) [ 808.770273] binder: 10517:10531 unknown command 0 [ 808.776803] binder: 10517:10531 ioctl c0306201 20a20000 returned -22 [ 808.796559] hfs: can't find a HFS filesystem on dev loop1 03:42:19 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7a00000000000000, 0x0, 0x0}) 03:42:19 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:19 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x8000000}}], 0x30) [ 808.966317] binder: 10541:10542 ERROR: BC_REGISTER_LOOPER called without request [ 809.011446] binder: 10541:10542 ioctl c0306201 20a20000 returned -14 [ 809.033090] binder: 10544:10549 ioctl c0306201 20a20000 returned -14 [ 809.045391] hfs: can't find a HFS filesystem on dev loop1 03:42:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 809.102408] binder: 10544:10555 unknown command 0 [ 809.139325] binder: 10544:10555 ioctl c0306201 20a20000 returned -22 [ 809.214841] EXT4-fs (sda1): Unrecognized mount option "max_batch_ti [ 809.214841] e=0x0000000000000000" or missing value [ 809.414657] EXT4-fs (sda1): Unrecognized mount option "max_batch_ti [ 809.414657] e=0x0000000000000000" or missing value 03:42:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_ti%e'}}]}) 03:42:20 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x630c}], 0x0, 0x0, 0x0}) 03:42:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x1f000000}}], 0x30) 03:42:20 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x2, 0x0}) 03:42:20 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, 0x0) [ 809.557687] binder: 10575:10578 ioctl c0306201 20a20000 returned -14 [ 809.560192] binder: 10572:10577 ioctl c0306201 20a20000 returned -14 03:42:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x3f000000}}], 0x30) [ 809.613484] hfs: can't find a HFS filesystem on dev loop1 [ 809.658609] binder: 10575:10586 unknown command 0 03:42:20 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x630d}], 0x0, 0x0, 0x0}) [ 809.696058] binder: 10575:10586 ioctl c0306201 20a20000 returned -22 03:42:20 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:20 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3, 0x0}) 03:42:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x40000000}}], 0x30) [ 809.815419] binder: 10591:10593 ioctl c0306201 20a20000 returned -14 [ 809.917315] binder: 10597:10602 ioctl c0306201 20a20000 returned -14 [ 809.924035] hfs: can't find a HFS filesystem on dev loop1 03:42:20 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40046302}], 0x0, 0x0, 0x0}) [ 809.965126] binder: 10597:10609 unknown command 0 [ 809.973844] binder: 10597:10609 ioctl c0306201 20a20000 returned -22 [ 810.070974] binder: BC_ACQUIRE_RESULT not supported [ 810.085064] binder: 10613:10614 ioctl c0306201 20a20000 returned -22 [ 810.100851] EXT4-fs (sda1): Unrecognized mount option "max_batch_ti%e=0x0000000000000000" or missing value [ 810.184067] EXT4-fs (sda1): Unrecognized mount option "max_batch_ti%e=0x0000000000000000" or missing value 03:42:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_tim\n'}}]}) 03:42:20 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xbf000000}}], 0x30) 03:42:20 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4, 0x0}) 03:42:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:20 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs], 0x0, 0x0, 0x0}) [ 810.335322] binder: 10627:10630 ioctl c0306201 20a20000 returned -14 [ 810.367746] binder: 10627:10637 unknown command 0 03:42:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xfdffffff}}], 0x30) 03:42:21 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x5, 0x0}) [ 810.382661] binder: 10634:10639 ioctl c0306201 20a20000 returned -14 [ 810.389576] binder: 10627:10637 ioctl c0306201 20a20000 returned -22 [ 810.414268] hfs: can't find a HFS filesystem on dev loop1 03:42:21 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40046307}], 0x0, 0x0, 0x0}) 03:42:21 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, 0x0) [ 810.612855] binder: 10649:10651 ioctl c0306201 20a20000 returned -14 03:42:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 810.663975] binder: 10652:10657 ioctl c0306201 20a20000 returned -14 [ 810.681137] hfs: can't find a HFS filesystem on dev loop1 [ 810.681290] binder: 10649:10658 unknown command 0 03:42:21 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xfeffffff}}], 0x30) [ 810.712513] binder: 10649:10658 ioctl c0306201 20a20000 returned -22 [ 810.960144] EXT4-fs (sda1): Unrecognized mount option "max_batch_tim [ 810.960144] =0x0000000000000000" or missing value [ 811.068671] EXT4-fs (sda1): Unrecognized mount option "max_batch_tim [ 811.068671] =0x0000000000000000" or missing value 03:42:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_tim%'}}]}) 03:42:21 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6, 0x0}) 03:42:21 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40086303}], 0x0, 0x0, 0x0}) 03:42:21 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:21 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xfffffffd}}], 0x30) 03:42:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 811.183045] binder: 10680:10683 ioctl c0306201 20a20000 returned -14 [ 811.197492] binder: 10682:10686 ioctl c0306201 20a20000 returned -14 [ 811.215784] binder: 10680:10687 unknown command 0 [ 811.222633] binder: 10680:10687 ioctl c0306201 20a20000 returned -22 03:42:21 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7, 0x0}) [ 811.283942] hfs: can't find a HFS filesystem on dev loop1 03:42:21 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xfffffffe}}], 0x30) 03:42:21 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:22 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x4008630a}], 0x0, 0x0, 0x0}) [ 811.450410] binder: 10699:10702 ioctl c0306201 20a20000 returned -14 [ 811.527823] binder: 10699:10708 unknown command 0 [ 811.551029] binder: BC_ATTEMPT_ACQUIRE not supported [ 811.566956] binder: 10699:10708 ioctl c0306201 20a20000 returned -22 03:42:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xad5bb0f6ce}}], 0x30) 03:42:22 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x12, 0x0}) [ 811.577127] binder: 10707:10711 ioctl c0306201 20a20000 returned -22 [ 811.610193] hfs: can't find a HFS filesystem on dev loop1 [ 811.653664] EXT4-fs (sda1): Unrecognized mount option "max_batch_tim%=0x0000000000000000" or missing value [ 811.788103] binder: 10721:10726 ioctl c0306201 20a20000 returned -14 [ 811.808609] binder: 10721:10727 unknown command 0 [ 811.821680] binder: 10721:10727 ioctl c0306201 20a20000 returned -22 [ 811.889964] EXT4-fs (sda1): Unrecognized mount option "max_batch_tim%=0x0000000000000000" or missing value 03:42:22 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40086310}], 0x0, 0x0, 0x0}) 03:42:22 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x48, 0x0}) 03:42:22 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xc00000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x4000000000000}}], 0x30) 03:42:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0xa}}]}) [ 812.005108] binder: 10735:10739 ioctl c0306201 20a20000 returned -14 [ 812.045389] binder: 10736:10745 ioctl c0306201 20a20000 returned -14 [ 812.058379] binder: 10735:10748 unknown command 0 [ 812.070882] binder: 10735:10748 ioctl c0306201 20a20000 returned -22 03:42:22 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x400c630e}], 0x0, 0x0, 0x0}) [ 812.098635] hfs: can't find a HFS filesystem on dev loop1 03:42:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x100000000000000}}], 0x30) 03:42:22 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4c, 0x0}) 03:42:22 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xe00000000000000, 0x0, 0x0, 0x0, 0x0) [ 812.246541] binder: 10754:10757 ioctl c0306201 20a20000 returned -14 03:42:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:22 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x400c630f}], 0x0, 0x0, 0x0}) 03:42:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x400000000000000}}], 0x30) [ 812.354651] binder: 10762:10764 ioctl c0306201 20a20000 returned -14 [ 812.414934] hfs: can't find a HFS filesystem on dev loop1 [ 812.428773] binder: 10762:10773 unknown command 0 [ 812.437901] binder: 10762:10773 ioctl c0306201 20a20000 returned -22 [ 812.599509] binder: 10777:10779 ioctl c0306201 20a20000 returned -14 03:42:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x16}}]}) 03:42:23 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:23 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x60, 0x0}) 03:42:23 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x800000000000000}}], 0x30) 03:42:23 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40106308}], 0x0, 0x0, 0x0}) [ 812.779924] binder: 10792:10796 ioctl c0306201 20a20000 returned -14 [ 812.793348] binder: 10794:10799 ioctl c0306201 20a20000 returned -14 03:42:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:23 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x1f00000000000000}}], 0x30) [ 812.829403] hfs: can't find a HFS filesystem on dev loop1 [ 812.839658] binder: 10792:10803 ioctl c0306201 20a20000 returned -14 03:42:23 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40106309}], 0x0, 0x0, 0x0}) 03:42:23 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x68, 0x0}) 03:42:23 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:23 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x3f00000000000000}}], 0x30) [ 813.125300] binder: 10812:10819 ioctl c0306201 20a20000 returned -14 [ 813.182890] binder: 10821:10824 ioctl c0306201 20a20000 returned -14 [ 813.210313] hfs: can't find a HFS filesystem on dev loop1 03:42:23 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40400a00}], 0x0, 0x0, 0x0}) [ 813.272091] binder: 10821:10833 unknown command 0 [ 813.313680] binder: 10821:10833 ioctl c0306201 20a20000 returned -22 [ 813.394731] binder: 10838:10842 unknown command 1077938688 [ 813.401115] binder: 10838:10842 ioctl c0306201 20a20000 returned -22 03:42:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x25}}]}) 03:42:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:24 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x4000000000000000}}], 0x30) 03:42:24 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:24 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6c, 0x0}) 03:42:24 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40402500}], 0x0, 0x0, 0x0}) [ 813.605258] binder: 10848:10860 ioctl c0306201 20a20000 returned -14 [ 813.628066] hfs: can't find a HFS filesystem on dev loop1 03:42:24 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xbf00000000000000}}], 0x30) [ 813.656173] binder: 10859:10862 unknown command 1077945600 [ 813.662367] binder: 10848:10863 unknown command 0 [ 813.675824] binder: 10848:10863 ioctl c0306201 20a20000 returned -22 [ 813.692419] binder: 10859:10862 ioctl c0306201 20a20000 returned -22 03:42:24 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x74, 0x0}) 03:42:24 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x2300000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:24 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406301}], 0x0, 0x0, 0x0}) 03:42:24 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xcef6b05bad000000}}], 0x30) [ 813.900773] EXT4-fs: 4 callbacks suppressed [ 813.900793] EXT4-fs (sda1): Unrecognized mount option "max_batch_time%0x0000000000000000" or missing value [ 813.937321] binder: 10873:10877 ioctl c0306201 20a20000 returned -14 [ 813.992631] binder: 10873:10888 ioctl c0306201 20a20000 returned -14 [ 814.008097] binder: 10879:10884 ioctl c0306201 20a20000 returned -14 [ 814.032689] hfs: can't find a HFS filesystem on dev loop1 [ 814.157587] EXT4-fs (sda1): Unrecognized mount option "max_batch_time%0x0000000000000000" or missing value 03:42:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x2d}}]}) 03:42:24 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406302}], 0x0, 0x0, 0x0}) 03:42:24 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7a, 0x0}) 03:42:24 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:24 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xfdffffff00000000}}], 0x30) 03:42:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 814.321599] binder: 10903:10906 ioctl c0306201 20a20000 returned -14 [ 814.373535] binder: 10903:10914 unknown command 0 [ 814.380983] binder: 10907:10911 unknown command 1077961474 [ 814.393499] binder: 10907:10911 ioctl c0306201 20a20000 returned -22 [ 814.413428] hfs: can't find a HFS filesystem on dev loop1 03:42:25 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0xfeffffff00000000}}], 0x30) [ 814.433586] binder: 10903:10914 ioctl c0306201 20a20000 returned -22 03:42:25 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406303}], 0x0, 0x0, 0x0}) 03:42:25 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x300, 0x0}) 03:42:25 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:25 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x4}}], 0x30) [ 814.669354] binder: 10927:10931 unknown command 1077961475 [ 814.691092] binder: 10927:10931 ioctl c0306201 20a20000 returned -22 [ 814.707113] binder: 10929:10934 ioctl c0306201 20a20000 returned -14 03:42:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 814.754575] hfs: can't find a HFS filesystem on dev loop1 [ 814.765569] binder: 10929:10934 ioctl c0306201 20a20000 returned -14 [ 814.804091] EXT4-fs (sda1): Unrecognized mount option "max_batch_time-0x0000000000000000" or missing value [ 815.027539] EXT4-fs (sda1): Unrecognized mount option "max_batch_time-0x0000000000000000" or missing value 03:42:25 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406304}], 0x0, 0x0, 0x0}) 03:42:25 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x500, 0x0}) 03:42:25 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x4244000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x54}}]}) 03:42:25 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x8}}], 0x30) 03:42:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 815.178530] binder: 10959:10962 unknown command 1077961476 [ 815.191732] binder: 10958:10965 ioctl c0306201 20a20000 returned -14 03:42:25 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xbf}}], 0x30) [ 815.248886] hfs: can't find a HFS filesystem on dev loop1 [ 815.252936] binder: 10959:10962 ioctl c0306201 20a20000 returned -22 [ 815.257979] binder: 10958:10970 unknown command 0 [ 815.271328] binder: 10958:10970 ioctl c0306201 20a20000 returned -22 03:42:25 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x600, 0x0}) 03:42:25 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406305}], 0x0, 0x0, 0x0}) 03:42:26 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x4d50000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:26 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x1f00}}], 0x30) [ 815.516347] binder: 10981:10985 ioctl c0306201 20a20000 returned -14 [ 815.550659] binder: 10984:10986 unknown command 1077961477 [ 815.568717] binder: 10981:10991 ioctl c0306201 20a20000 returned -14 [ 815.589438] binder: 10984:10986 ioctl c0306201 20a20000 returned -22 03:42:26 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x700, 0x0}) 03:42:26 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x3f00}}], 0x30) [ 815.627532] hfs: can't find a HFS filesystem on dev loop1 [ 815.660956] EXT4-fs (sda1): Unrecognized mount option "max_batch_timeT0x0000000000000000" or missing value 03:42:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:26 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406306}], 0x0, 0x0, 0x0}) [ 815.854794] EXT4-fs (sda1): Unrecognized mount option "max_batch_timeT0x0000000000000000" or missing value [ 815.863845] binder: 11003:11008 ioctl c0306201 20a20000 returned -14 [ 815.879363] binder: 11006:11009 unknown command 1077961478 [ 815.899368] binder: 11003:11014 unknown command 0 03:42:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}) 03:42:26 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x5354000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:26 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x4000}}], 0x30) 03:42:26 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406307}], 0x0, 0x0, 0x0}) [ 815.901746] binder: 11006:11009 ioctl c0306201 20a20000 returned -22 [ 815.924093] binder: 11003:11014 ioctl c0306201 20a20000 returned -22 03:42:26 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x1200, 0x0}) 03:42:26 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xbf00}}], 0x30) [ 816.084951] hfs: can't find a HFS filesystem on dev loop1 [ 816.098142] binder: 11021:11025 unknown command 1077961479 [ 816.140810] binder: 11021:11025 ioctl c0306201 20a20000 returned -22 [ 816.166495] binder: 11031:11033 ioctl c0306201 20a20000 returned -14 03:42:26 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x5e02000000000000, 0x0, 0x0, 0x0, 0x0) [ 816.204196] binder: 11031:11033 ioctl c0306201 20a20000 returned -14 03:42:26 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406312}], 0x0, 0x0, 0x0}) 03:42:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:26 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x2000, 0x0}) 03:42:27 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x40000}}], 0x30) [ 816.364719] binder: 11041:11044 unknown command 1077961490 [ 816.448593] hfs: can't find a HFS filesystem on dev loop1 [ 816.470517] binder: 11041:11044 ioctl c0306201 20a20000 returned -22 [ 816.477789] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000002, [ 816.523408] binder: 11051:11055 ioctl c0306201 20a20000 returned -14 03:42:27 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406348}], 0x0, 0x0, 0x0}) [ 816.569612] binder: 11051:11061 unknown command 0 [ 816.579880] binder: 11051:11061 ioctl c0306201 20a20000 returned -22 [ 816.648665] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000002, 03:42:27 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x1000000}}], 0x30) 03:42:27 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x6000000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:27 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3f00, 0x0}) 03:42:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}) 03:42:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 816.758562] binder: 11070:11072 unknown command 1077961544 [ 816.839232] binder: 11070:11072 ioctl c0306201 20a20000 returned -22 [ 816.882842] hfs: can't find a HFS filesystem on dev loop1 [ 816.896932] binder: 11078:11084 ioctl c0306201 20a20000 returned -14 03:42:27 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x4000000}}], 0x30) [ 816.931045] binder: 11078:11088 unknown command 0 [ 816.944294] binder: 11078:11088 ioctl c0306201 20a20000 returned -22 03:42:27 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x4040634c}], 0x0, 0x0, 0x0}) 03:42:27 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4800, 0x0}) 03:42:27 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:42:27 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x8000000}}], 0x30) [ 817.137223] hfs: can't find a HFS filesystem on dev loop1 [ 817.148087] binder: 11102:11105 ioctl c0306201 20a20000 returned -14 [ 817.161585] binder: 11099:11104 unknown command 1077961548 [ 817.169945] binder: 11099:11104 ioctl c0306201 20a20000 returned -22 [ 817.190263] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000003, [ 817.201790] binder: 11102:11107 ioctl c0306201 20a20000 returned -14 03:42:27 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4c00, 0x0}) 03:42:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:27 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x8000000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:27 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406360}], 0x0, 0x0, 0x0}) 03:42:27 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x1f000000}}], 0x30) [ 817.399360] binder: 11121:11123 ioctl c0306201 20a20000 returned -14 [ 817.443036] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000003, [ 817.481285] binder: 11135:11137 unknown command 1077961568 [ 817.511001] binder: 11135:11137 ioctl c0306201 20a20000 returned -22 [ 817.535364] hfs: can't find a HFS filesystem on dev loop1 03:42:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}) 03:42:28 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6000, 0x0}) 03:42:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x3f000000}}], 0x30) 03:42:28 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406368}], 0x0, 0x0, 0x0}) 03:42:28 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x0) 03:42:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x40000000}}], 0x30) 03:42:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 817.760767] binder: 11149:11150 unknown command 1077961576 [ 817.786386] hfs: can't find a HFS filesystem on dev loop1 [ 817.806284] binder: 11149:11150 ioctl c0306201 20a20000 returned -22 [ 817.816862] binder: 11152:11159 ioctl c0306201 20a20000 returned -14 03:42:28 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x4040636c}], 0x0, 0x0, 0x0}) 03:42:28 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xb200000000000000, 0x0, 0x0, 0x0, 0x0) [ 817.875603] binder: 11152:11159 ioctl c0306201 20a20000 returned -14 03:42:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xbf000000}}], 0x30) 03:42:28 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6800, 0x0}) [ 818.028287] binder: 11170:11174 unknown command 1077961580 [ 818.058341] binder: 11170:11174 ioctl c0306201 20a20000 returned -22 03:42:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xfdffffff}}], 0x30) [ 818.073550] binder: 11177:11181 ioctl c0306201 20a20000 returned -14 [ 818.093741] binder: 11177:11184 unknown command 0 [ 818.093939] hfs: can't find a HFS filesystem on dev loop1 [ 818.146471] binder: 11177:11184 ioctl c0306201 20a20000 returned -22 03:42:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}) 03:42:28 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406374}], 0x0, 0x0, 0x0}) 03:42:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:28 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xebffffff00000000, 0x0, 0x0, 0x0, 0x0) 03:42:28 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6c00, 0x0}) 03:42:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xfeffffff}}], 0x30) [ 818.437622] binder: 11200:11206 unknown command 1077961588 [ 818.443442] binder: 11200:11206 ioctl c0306201 20a20000 returned -22 [ 818.468583] binder: 11207:11210 ioctl c0306201 20a20000 returned -14 03:42:29 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xfffffffd}}], 0x30) [ 818.508404] hfs: can't find a HFS filesystem on dev loop1 [ 818.536689] binder: 11207:11217 unknown command 0 [ 818.541615] binder: 11207:11217 ioctl c0306201 20a20000 returned -22 03:42:29 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7400, 0x0}) 03:42:29 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x4040637a}], 0x0, 0x0, 0x0}) 03:42:29 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xf4ffffff00000000, 0x0, 0x0, 0x0, 0x0) 03:42:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 818.723660] binder: 11227:11233 ioctl c0306201 20a20000 returned -14 03:42:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}) 03:42:29 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xfffffffe}}], 0x30) [ 818.779618] binder: 11222:11234 unknown command 1077961594 [ 818.798115] binder: 11222:11234 ioctl c0306201 20a20000 returned -22 [ 818.802649] binder: 11227:11238 unknown command 0 [ 818.813816] hfs: can't find a HFS filesystem on dev loop1 [ 818.823514] binder: 11227:11238 ioctl c0306201 20a20000 returned -22 03:42:29 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:42:29 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7a00, 0x0}) 03:42:29 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0) 03:42:29 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xad5bb0f6ce}}], 0x30) 03:42:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 819.112015] binder: 11255:11261 ioctl c0306201 20a20000 returned -14 [ 819.115845] binder: 11256:11263 ioctl c0306201 20a20000 returned -14 [ 819.131844] hfs: can't find a HFS filesystem on dev loop1 [ 819.150397] binder: 11256:11265 unknown command 0 [ 819.188212] binder: 11256:11265 ioctl c0306201 20a20000 returned -22 03:42:29 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x1000000, 0x0}) 03:42:29 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486312}], 0x0, 0x0, 0x0}) [ 819.249753] EXT4-fs: 4 callbacks suppressed [ 819.249768] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000006, 03:42:29 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x4000000000000}}], 0x30) 03:42:29 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x0) 03:42:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x100000000000000}}], 0x30) [ 819.421741] binder: 11279:11286 ioctl c0306201 20a20000 returned -14 [ 819.447685] hfs: can't find a HFS filesystem on dev loop1 [ 819.458011] binder: 11285:11287 ioctl c0306201 20a20000 returned -14 [ 819.482036] binder: 11285:11292 unknown command 0 [ 819.489823] binder: 11285:11292 ioctl c0306201 20a20000 returned -22 03:42:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}) 03:42:30 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x2}], 0x0, 0x0, 0x0}) 03:42:30 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x2000000, 0x0}) 03:42:30 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfbffffff00000000, 0x0, 0x0, 0x0, 0x0) 03:42:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x400000000000000}}], 0x30) [ 819.682262] binder: 11301:11305 ioctl c0306201 20a20000 returned -14 [ 819.753378] binder: 11303:11310 ioctl c0306201 20a20000 returned -14 [ 819.765526] binder: 11301:11305 ioctl c0306201 20a20000 returned -14 [ 819.792018] hfs: can't find a HFS filesystem on dev loop1 03:42:30 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3000000, 0x0}) 03:42:30 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x3}], 0x0, 0x0, 0x0}) 03:42:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x800000000000000}}], 0x30) [ 819.914801] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000007, 03:42:30 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xff0f000000000000, 0x0, 0x0, 0x0, 0x0) [ 819.972646] binder: 11327:11329 ioctl c0306201 20a20000 returned -14 [ 820.014549] binder: 11327:11333 unknown command 0 [ 820.030446] binder: 11330:11331 ioctl c0306201 20a20000 returned -14 03:42:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 820.072896] binder: 11327:11333 ioctl c0306201 20a20000 returned -22 [ 820.083837] hfs: can't find a HFS filesystem on dev loop1 03:42:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x1f00000000000000}}], 0x30) [ 820.208231] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000007, 03:42:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}]}) 03:42:30 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x4}], 0x0, 0x0, 0x0}) 03:42:30 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4000000, 0x0}) 03:42:30 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0) 03:42:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x3f00000000000000}}], 0x30) 03:42:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x4000000000000000}}], 0x30) [ 820.386679] binder: 11356:11361 ioctl c0306201 20a20000 returned -14 [ 820.400467] binder: 11358:11362 ioctl c0306201 20a20000 returned -14 [ 820.416936] binder: 11356:11364 unknown command 0 03:42:31 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x5}], 0x0, 0x0, 0x0}) [ 820.433398] binder: 11356:11364 ioctl c0306201 20a20000 returned -22 03:42:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 820.469936] hfs: can't find a HFS filesystem on dev loop1 03:42:31 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x5000000, 0x0}) 03:42:31 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xbf00000000000000}}], 0x30) [ 820.598689] binder: 11374:11375 ioctl c0306201 20a20000 returned -14 03:42:31 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6}], 0x0, 0x0, 0x0}) 03:42:31 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0) [ 820.758049] binder: 11387:11388 ioctl c0306201 20a20000 returned -14 [ 820.817157] binder: 11391:11394 ioctl c0306201 20a20000 returned -14 [ 820.828419] binder: 11387:11395 ioctl c0306201 20a20000 returned -14 [ 820.861814] hfs: can't find a HFS filesystem on dev loop1 [ 820.889745] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000008, [ 821.037835] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000008, 03:42:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x9}}]}) 03:42:31 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xcef6b05bad000000}}], 0x30) 03:42:31 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6000000, 0x0}) 03:42:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:31 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x7}], 0x0, 0x0, 0x0}) 03:42:31 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffff0700, 0x0, 0x0, 0x0, 0x0) [ 821.149091] hfs: can't find a HFS filesystem on dev loop1 [ 821.159772] binder: 11412:11414 ioctl c0306201 20a20000 returned -14 [ 821.189858] binder: 11419:11421 ioctl c0306201 20a20000 returned -14 03:42:31 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xfdffffff00000000}}], 0x30) 03:42:31 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x12}], 0x0, 0x0, 0x0}) [ 821.234176] binder: 11419:11428 ioctl c0306201 20a20000 returned -14 03:42:31 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0) 03:42:31 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7000000, 0x0}) 03:42:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0xfeffffff00000000}}], 0x30) [ 821.408756] hfs: can't find a HFS filesystem on dev loop1 [ 821.411227] binder: 11434:11437 ioctl c0306201 20a20000 returned -14 03:42:32 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x48}], 0x0, 0x0, 0x0}) [ 821.507957] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000009, [ 821.513637] binder: 11441:11444 ioctl c0306201 20a20000 returned -14 [ 821.563155] binder: 11441:11451 unknown command 0 [ 821.595473] binder: 11441:11451 ioctl c0306201 20a20000 returned -22 [ 821.604182] binder: 11453:11455 ioctl c0306201 20a20000 returned -14 03:42:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}) 03:42:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:32 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:42:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x4}}], 0x30) 03:42:32 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x12000000, 0x0}) [ 821.645398] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000009, 03:42:32 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x4c}], 0x0, 0x0, 0x0}) [ 821.744674] binder: 11463:11467 ioctl c0306201 20a20000 returned -14 [ 821.783041] binder: 11463:11467 ioctl c0306201 20a20000 returned -14 03:42:32 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x20000000, 0x0}) [ 821.828955] hfs: can't find a HFS filesystem on dev loop1 03:42:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x8}}], 0x30) 03:42:32 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, 0x0, 0x0, 0x0) [ 821.908059] binder: 11474:11478 ioctl c0306201 20a20000 returned -14 03:42:32 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x60}], 0x0, 0x0, 0x0}) [ 821.984197] binder: 11481:11483 ioctl c0306201 20a20000 returned -14 [ 822.023187] binder: 11481:11489 unknown command 0 03:42:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 822.058635] binder: 11481:11489 ioctl c0306201 20a20000 returned -22 [ 822.076930] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000000a, 03:42:32 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3f000000, 0x0}) [ 822.138760] binder: 11496:11497 ioctl c0306201 20a20000 returned -14 [ 822.199607] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000000a, 03:42:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xbf}}], 0x30) 03:42:32 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, 0x0, 0x0, 0x0) 03:42:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xb}}]}) 03:42:32 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x68}], 0x0, 0x0, 0x0}) [ 822.285009] binder: 11507:11508 ioctl c0306201 20a20000 returned -14 [ 822.345465] binder: 11507:11508 ioctl c0306201 20a20000 returned -14 [ 822.365285] binder: 11511:11518 ioctl c0306201 20a20000 returned -14 03:42:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6c}], 0x0, 0x0, 0x0}) 03:42:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x1f00}}], 0x30) 03:42:33 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x48000000, 0x0}) 03:42:33 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, 0x0, 0x0, 0x0) 03:42:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 822.537826] binder: 11522:11528 ioctl c0306201 20a20000 returned -14 [ 822.555298] binder: 11526:11529 ioctl c0306201 20a20000 returned -14 03:42:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x3f00}}], 0x30) 03:42:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x74}], 0x0, 0x0, 0x0}) [ 822.616131] binder: 11526:11535 unknown command 0 03:42:33 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, 0x0, 0x0, 0x0) [ 822.673753] binder: 11526:11535 ioctl c0306201 20a20000 returned -22 03:42:33 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4c000000, 0x0}) 03:42:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x4000}}], 0x30) [ 822.773675] binder: 11540:11545 ioctl c0306201 20a20000 returned -14 [ 822.896374] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000000b, [ 822.928177] binder: 11552:11557 ioctl c0306201 20a20000 returned -14 [ 822.981041] binder: 11552:11561 unknown command 0 [ 822.992905] binder: 11552:11561 ioctl c0306201 20a20000 returned -22 03:42:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xc}}]}) 03:42:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x7a}], 0x0, 0x0, 0x0}) 03:42:33 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, 0x0, 0x0, 0x0) 03:42:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xbf00}}], 0x30) 03:42:33 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x60000000, 0x0}) [ 823.097147] binder: 11565:11567 ioctl c0306201 20a20000 returned -14 03:42:33 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, 0x0, 0x0, 0x0) 03:42:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x40000}}], 0x30) 03:42:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x300}], 0x0, 0x0, 0x0}) [ 823.256080] binder: 11578:11580 ioctl c0306201 20a20000 returned -14 [ 823.303427] binder: 11578:11585 unknown command 0 03:42:33 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8, 0x0, 0x0, 0x0) [ 823.326439] binder: 11578:11585 ioctl c0306201 20a20000 returned -22 [ 823.336751] binder: 11584:11588 ioctl c0306201 20a20000 returned -14 03:42:34 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x500}], 0x0, 0x0, 0x0}) 03:42:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 823.562068] binder: 11599:11600 ioctl c0306201 20a20000 returned -14 03:42:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x1000000}}], 0x30) 03:42:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe}}]}) 03:42:34 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x9, 0x0, 0x0, 0x0) 03:42:34 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x600}], 0x0, 0x0, 0x0}) 03:42:34 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x68000000, 0x0}) [ 823.723116] binder: 11609:11614 ioctl c0306201 20a20000 returned -14 [ 823.755278] binder: 11612:11616 ioctl c0306201 20a20000 returned -14 03:42:34 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa, 0x0, 0x0, 0x0) 03:42:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 823.777961] binder: 11609:11619 unknown command 0 03:42:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x4000000}}], 0x30) [ 823.844453] binder: 11609:11619 ioctl c0306201 20a20000 returned -22 03:42:34 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb, 0x0, 0x0, 0x0) 03:42:34 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x700}], 0x0, 0x0, 0x0}) 03:42:34 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6c000000, 0x0}) 03:42:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x8000000}}], 0x30) 03:42:34 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc, 0x0, 0x0, 0x0) [ 824.091943] binder: 11637:11641 ioctl c0306201 20a20000 returned -14 [ 824.109268] binder: 11637:11643 unknown command 0 [ 824.135379] binder: 11640:11644 ioctl c0306201 20a20000 returned -14 [ 824.151524] binder: 11637:11643 ioctl c0306201 20a20000 returned -22 03:42:34 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x74000000, 0x0}) [ 824.328797] binder: 11654:11658 ioctl c0306201 20a20000 returned -14 [ 824.344894] EXT4-fs: 4 callbacks suppressed [ 824.344907] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000000e, [ 824.366073] binder: 11654:11661 unknown command 0 [ 824.371182] binder: 11654:11661 ioctl c0306201 20a20000 returned -22 03:42:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10}}]}) 03:42:35 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x1200}], 0x0, 0x0, 0x0}) 03:42:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe, 0x0, 0x0, 0x0) 03:42:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x1f000000}}], 0x30) 03:42:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7a000000, 0x0}) [ 824.503801] binder: 11665:11670 ioctl c0306201 20a20000 returned -14 03:42:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10, 0x0, 0x0, 0x0) 03:42:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x3f000000}}], 0x30) [ 824.552410] binder: 11668:11672 ioctl c0306201 20a20000 returned -14 03:42:35 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x2000}], 0x0, 0x0, 0x0}) [ 824.625347] binder: 11668:11679 ioctl c0306201 20a20000 returned -14 03:42:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x40000000}}], 0x30) 03:42:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x100000000000000, 0x0}) 03:42:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x23, 0x0, 0x0, 0x0) [ 824.776637] binder: 11684:11686 ioctl c0306201 20a20000 returned -14 [ 824.857624] binder: 11690:11694 ioctl c0306201 20a20000 returned -14 [ 824.913952] binder: 11690:11697 unknown command 0 [ 824.930000] binder: 11690:11697 ioctl c0306201 20a20000 returned -22 [ 824.964854] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000010, 03:42:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x12}}]}) 03:42:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xbf000000}}], 0x30) 03:42:35 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x3f00}], 0x0, 0x0, 0x0}) 03:42:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x60, 0x0, 0x0, 0x0) 03:42:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x200000000000000, 0x0}) [ 825.047255] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000010, [ 825.164770] binder: 11710:11712 ioctl c0306201 20a20000 returned -14 [ 825.172126] binder: 11713:11714 ioctl c0306201 20a20000 returned -14 03:42:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb2, 0x0, 0x0, 0x0) 03:42:35 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x4800}], 0x0, 0x0, 0x0}) 03:42:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xfdffffff}}], 0x30) [ 825.221747] binder: 11713:11722 ioctl c0306201 20a20000 returned -14 03:42:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x300000000000000, 0x0}) 03:42:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x25e, 0x0, 0x0, 0x0) 03:42:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xfeffffff}}], 0x30) [ 825.381689] binder: 11728:11733 ioctl c0306201 20a20000 returned -14 [ 825.415595] binder: 11732:11734 ioctl c0306201 20a20000 returned -14 [ 825.463583] binder: 11732:11738 unknown command 0 [ 825.485443] binder: 11732:11738 ioctl c0306201 20a20000 returned -22 [ 825.551785] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000012, [ 825.679414] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000012, 03:42:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x16}}]}) 03:42:36 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x4c00}], 0x0, 0x0, 0x0}) 03:42:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:36 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x400000000000000, 0x0}) 03:42:36 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300, 0x0, 0x0, 0x0) 03:42:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xfffffffd}}], 0x30) [ 825.808264] binder: 11756:11760 ioctl c0306201 20a20000 returned -14 [ 825.821762] binder: 11754:11761 ioctl c0306201 20a20000 returned -14 03:42:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xfffffffe}}], 0x30) 03:42:36 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x500, 0x0, 0x0, 0x0) [ 825.880645] binder: 11756:11766 unknown command 0 [ 825.916460] binder: 11756:11766 ioctl c0306201 20a20000 returned -22 03:42:36 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6000}], 0x0, 0x0, 0x0}) 03:42:36 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x500000000000000, 0x0}) 03:42:36 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x600, 0x0, 0x0, 0x0) [ 826.038975] binder: 11774:11777 ioctl c0306201 20a20000 returned -14 03:42:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 826.116908] binder: 11779:11781 ioctl c0306201 20a20000 returned -14 [ 826.182732] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000016, [ 826.192209] binder: 11779:11786 unknown command 0 [ 826.202683] binder: 11779:11786 ioctl c0306201 20a20000 returned -22 [ 826.297349] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000016, 03:42:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2d}}]}) 03:42:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xad5bb0f6ce}}], 0x30) 03:42:36 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6800}], 0x0, 0x0, 0x0}) 03:42:36 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x600000000000000, 0x0}) 03:42:36 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700, 0x0, 0x0, 0x0) 03:42:37 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x900, 0x0, 0x0, 0x0) 03:42:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x4000000000000}}], 0x30) [ 826.422540] binder: 11805:11807 ioctl c0306201 20a20000 returned -14 [ 826.427517] binder: 11800:11806 ioctl c0306201 20a20000 returned -14 [ 826.439905] binder: 11805:11808 unknown command 0 [ 826.449500] binder: 11805:11808 ioctl c0306201 20a20000 returned -22 03:42:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6c00}], 0x0, 0x0, 0x0}) 03:42:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x700000000000000, 0x0}) 03:42:37 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, 0x0) 03:42:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x100000000000000}}], 0x30) [ 826.694927] binder: 11820:11823 ioctl c0306201 20a20000 returned -14 [ 826.726477] binder: 11821:11825 ioctl c0306201 20a20000 returned -14 [ 826.800454] binder: 11821:11833 unknown command 0 [ 826.828645] binder: 11821:11833 ioctl c0306201 20a20000 returned -22 [ 826.905817] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000002d, [ 826.998490] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000002d, 03:42:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x48}}]}) 03:42:37 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb00, 0x0, 0x0, 0x0) 03:42:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x7400}], 0x0, 0x0, 0x0}) 03:42:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x400000000000000}}], 0x30) 03:42:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x1200000000000000, 0x0}) 03:42:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 827.134283] binder: 11849:11852 ioctl c0306201 20a20000 returned -14 [ 827.148849] binder: 11847:11855 ioctl c0306201 20a20000 returned -14 [ 827.173056] binder: 11849:11857 unknown command 0 03:42:37 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc00, 0x0, 0x0, 0x0) [ 827.181479] binder: 11849:11857 ioctl c0306201 20a20000 returned -22 03:42:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x800000000000000}}], 0x30) 03:42:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x7a00}], 0x0, 0x0, 0x0}) 03:42:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x2000000000000000, 0x0}) 03:42:37 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe00, 0x0, 0x0, 0x0) 03:42:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x1f00000000000000}}], 0x30) [ 827.373283] binder: 11868:11869 ioctl c0306201 20a20000 returned -14 [ 827.393322] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000048, [ 827.400050] binder: 11866:11867 ioctl c0306201 20a20000 returned -14 03:42:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4c}}]}) 03:42:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:38 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x1000000}], 0x0, 0x0, 0x0}) 03:42:38 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1020, 0x0, 0x0, 0x0) 03:42:38 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3f00000000000000, 0x0}) 03:42:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x3f00000000000000}}], 0x30) 03:42:38 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, 0x0) [ 827.689100] binder: 11896:11899 ioctl c0306201 20a20000 returned -14 [ 827.703739] binder: 11892:11898 ioctl c0306201 20a20000 returned -14 03:42:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x4000000000000000}}], 0x30) [ 827.742235] binder: 11892:11903 unknown command 0 [ 827.762501] binder: 11892:11903 ioctl c0306201 20a20000 returned -22 03:42:38 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x2000000}], 0x0, 0x0, 0x0}) 03:42:38 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4800000000000000, 0x0}) 03:42:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xbf00000000000000}}], 0x30) 03:42:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 827.952100] binder: 11912:11913 ioctl c0306201 20a20000 returned -14 [ 827.999545] binder: 11916:11919 ioctl c0306201 20a20000 returned -14 [ 828.078766] binder: 11916:11919 ioctl c0306201 20a20000 returned -14 03:42:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x60}}]}) 03:42:38 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2010, 0x0, 0x0, 0x0) 03:42:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xcef6b05bad000000}}], 0x30) 03:42:38 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x3000000}], 0x0, 0x0, 0x0}) 03:42:38 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4c00000000000000, 0x0}) 03:42:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xfdffffff00000000}}], 0x30) 03:42:38 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2300, 0x0, 0x0, 0x0) [ 828.347696] binder: 11937:11942 ioctl c0306201 20a20000 returned -14 [ 828.364197] binder: 11939:11943 ioctl c0306201 20a20000 returned -14 03:42:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 828.420231] binder: 11937:11945 unknown command 0 [ 828.454910] binder: 11937:11945 ioctl c0306201 20a20000 returned -22 03:42:39 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x4000000}], 0x0, 0x0, 0x0}) 03:42:39 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6000000000000000, 0x0}) 03:42:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xfeffffff00000000}}], 0x30) 03:42:39 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00, 0x0, 0x0, 0x0) [ 828.665433] binder: 11958:11961 ioctl c0306201 20a20000 returned -14 [ 828.669028] binder: 11956:11957 ioctl c0306201 20a20000 returned -14 [ 828.722990] binder: 11958:11967 unknown command 0 [ 828.748615] binder: 11958:11967 ioctl c0306201 20a20000 returned -22 03:42:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x68}}]}) 03:42:39 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x5000000}], 0x0, 0x0, 0x0}) 03:42:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x4}}], 0x30) 03:42:39 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0, 0x0, 0x0) 03:42:39 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6800000000000000, 0x0}) 03:42:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 828.968337] binder: 11982:11985 ioctl c0306201 20a20000 returned -14 [ 828.995994] binder: 11980:11987 ioctl c0306201 20a20000 returned -14 03:42:39 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4244, 0x0, 0x0, 0x0) 03:42:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x8}}], 0x30) 03:42:39 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6c00000000000000, 0x0}) 03:42:39 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6000000}], 0x0, 0x0, 0x0}) 03:42:39 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4442, 0x0, 0x0, 0x0) [ 829.210580] binder: 12001:12004 ioctl c0306201 20a20000 returned -14 03:42:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xbf}}], 0x30) [ 829.239390] binder: 12002:12005 ioctl c0306201 20a20000 returned -14 [ 829.320720] binder: 12001:12011 unknown command 0 [ 829.364850] binder: 12001:12011 ioctl c0306201 20a20000 returned -22 [ 829.480518] EXT4-fs: 6 callbacks suppressed [ 829.480533] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000068, 03:42:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6c}}]}) 03:42:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:40 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4d50, 0x0, 0x0, 0x0) 03:42:40 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x1f00}}], 0x30) 03:42:40 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7400000000000000, 0x0}) 03:42:40 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x7000000}], 0x0, 0x0, 0x0}) 03:42:40 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x504d, 0x0, 0x0, 0x0) [ 829.665162] binder: 12030:12031 ioctl c0306201 20a20000 returned -14 [ 829.669429] binder: 12026:12033 ioctl c0306201 20a20000 returned -14 03:42:40 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x3f00}}], 0x30) [ 829.725976] binder: 12030:12037 unknown command 0 [ 829.770304] binder: 12030:12037 ioctl c0306201 20a20000 returned -22 03:42:40 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x12000000}], 0x0, 0x0, 0x0}) 03:42:40 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7a00000000000000, 0x0}) 03:42:40 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5354, 0x0, 0x0, 0x0) 03:42:40 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x4000}}], 0x30) [ 829.943940] binder: 12048:12051 ioctl c0306201 20a20000 returned -14 [ 829.970845] binder: 12049:12052 ioctl c0306201 20a20000 returned -14 [ 830.021813] binder: 12049:12057 unknown command 0 [ 830.049821] binder: 12049:12057 ioctl c0306201 20a20000 returned -22 [ 830.177096] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000006c, [ 830.227588] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000006c, 03:42:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x74}}]}) 03:42:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:40 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5453, 0x0, 0x0, 0x0) 03:42:40 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x20000000}], 0x0, 0x0, 0x0}) 03:42:40 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xbf00}}], 0x30) 03:42:40 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x8}) mkdirat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x1ff) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x10100001d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="8130"], 0x0, 0x0, 0x0}) 03:42:40 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5e02, 0x0, 0x0, 0x0) [ 830.362305] binder: 12074:12077 ioctl c0306201 20a20000 returned -14 [ 830.387367] binder: 12076:12078 unknown command 12417 [ 830.425940] binder: 12076:12078 ioctl c0306201 20a20000 returned -22 03:42:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x40000}}], 0x30) 03:42:41 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x3f000000}], 0x0, 0x0, 0x0}) 03:42:41 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000000000004, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:41 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000, 0x0, 0x0, 0x0) [ 830.636877] binder: 12093:12096 ioctl c0306201 20a20000 returned -14 [ 830.667955] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000074, 03:42:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7a}}]}) 03:42:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x1000000}}], 0x30) 03:42:41 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x48000000}], 0x0, 0x0, 0x0}) 03:42:41 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb200, 0x0, 0x0, 0x0) 03:42:41 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404008000000eacb253f9729aa997d0034495a98db4ff05ee4dad37b4f7a4a9e0a90118eba8e3a6208aba98a35615d458000bc2c253ef87f960f41008a8786eb2503e62c82265d6964ed54cf3bb6fcd0f78b9d44098b9ccc74e0fd088b6c33d0f057b2979b4de56a389412be4fa1a447588f1afc3eb28f3a550533fa56ab6ee2979b536cb80787e140676e03a760e158509350344dfdffdeaa3c41fc1d3c8191a7b7fb221d9678f7aa103751676d1c57354ab575d909dc39108ceaacc8c9fa68d63009e989549c5f8de31c26a34c2664"], 0x0, 0x0, 0x0}) [ 830.881689] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000074, 03:42:41 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, 0x0) [ 830.983328] binder: 12117:12118 ioctl c0306201 20a20000 returned -14 [ 830.996210] binder: 12119:12123 got transaction to invalid handle [ 831.017857] binder: 12119:12123 transaction failed 29201/-22, size -6122535689767973359-36105064384137897 line 2896 03:42:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x4000000}}], 0x30) 03:42:41 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x4c000000}], 0x0, 0x0, 0x0}) 03:42:41 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff0f, 0x0, 0x0, 0x0) 03:42:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 831.116016] binder: 12119:12131 got transaction to invalid handle [ 831.134525] binder: 12119:12131 transaction failed 29201/-22, size -6122535689767973359-36105064384137897 line 2896 [ 831.201176] binder: undelivered TRANSACTION_ERROR: 29201 [ 831.215026] binder: undelivered TRANSACTION_ERROR: 29201 03:42:41 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8042, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x297fd5b630c9ace9, 0x0, &(0x7f0000fc1ffc), 0x0, 0x0, 0x0}) [ 831.250908] binder: 12134:12139 ioctl c0306201 20a20000 returned -14 03:42:41 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0, 0x0, 0x0) [ 831.430916] binder: 12147:12151 unknown command 0 [ 831.446141] binder: 12147:12151 ioctl c0306201 20a20000 returned -22 [ 831.527810] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000007a, [ 831.600494] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000000007a, 03:42:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xc0}}]}) 03:42:42 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x8000000}}], 0x30) 03:42:42 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x60000000}], 0x0, 0x0, 0x0}) 03:42:42 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x40000, 0x0, 0x0, 0x0) 03:42:42 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000014d2e5c317abbb2f525532e2cc172d0f52ea096e3def920f3f8598473d93044ad6e7aabe8139000000000000000000000000"], 0x0, 0x0, 0x0}) 03:42:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 831.764052] binder: 12164:12165 ioctl c0306201 20a20000 returned -14 [ 831.773660] binder: 12168:12171 transaction failed 29189/-22, size -4707695552911600835-14721 line 2896 03:42:42 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x1f000000}}], 0x30) 03:42:42 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe0000, 0x0, 0x0, 0x0) 03:42:42 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x68000000}], 0x0, 0x0, 0x0}) [ 831.853226] binder: 12168:12177 transaction failed 29189/-22, size -4707695552911600835-14721 line 2896 03:42:42 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)={{0x108, 0x7, 0x6, 0x51, 0x347, 0xffffffff, 0x135, 0x100}, "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", [[], [], [], [], [], [], [], [], []]}, 0x1920) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 831.900707] binder: undelivered TRANSACTION_ERROR: 29189 [ 831.915155] binder: undelivered TRANSACTION_ERROR: 29189 03:42:42 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, 0x0) 03:42:42 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x3f000000}}], 0x30) [ 832.001507] binder: 12185:12187 ioctl c0306201 20a20000 returned -14 [ 832.027111] binder: 12184:12188 ioctl c0306201 20a20000 returned -14 [ 832.208302] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x00000000000000c0, [ 832.278653] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x00000000000000c0, 03:42:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x300}}]}) 03:42:42 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x2, 0x10000) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000001c0)={0x7, 0x7, 0x4, 0x10001}, 0x10) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80, 0x800) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000200)) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 03:42:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:42 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, 0x0) 03:42:42 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x40000000}}], 0x30) 03:42:42 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6c000000}], 0x0, 0x0, 0x0}) 03:42:43 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, 0x0) [ 832.429264] binder: 12212:12213 ioctl c0306201 20a20000 returned -14 [ 832.462464] binder: 12214:12221 ioctl c0306201 20a20000 returned -14 03:42:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xbf000000}}], 0x30) [ 832.511405] binder: 12214:12221 ioctl c0306201 20a20000 returned -14 03:42:43 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x74000000}], 0x0, 0x0, 0x0}) 03:42:43 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x402000, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000140)={'bcsf0\x00', 0x6, 0x8000}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="89ff008d41b1d8"], 0x0, 0x0, 0x0}) 03:42:43 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, 0x0) 03:42:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xfdffffff}}], 0x30) [ 832.658607] binder: 12231:12233 ioctl c0306201 20a20000 returned -14 [ 832.758444] binder: 12237:12240 unknown command 65417 [ 832.797233] binder: 12237:12240 ioctl c0306201 20a20000 returned -22 [ 832.828735] binder: 12237:12240 unknown command 65417 [ 832.836735] binder: 12237:12240 ioctl c0306201 20a20000 returned -22 [ 832.924736] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000300, 03:42:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) 03:42:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:43 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x7a000000}], 0x0, 0x0, 0x0}) 03:42:43 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, 0x0) 03:42:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xfeffffff}}], 0x30) 03:42:43 executing program 5: mmap(&(0x7f0000d54000/0x3000)=nil, 0x3000, 0x400000000000, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0013acb0886bfee4d5d5a759c4668b0651405f524699d76ef794198cd5b0d6d6ebfab534135afa9ca45a7c8867ce48ff9c126d5e6ebbbc5f0442a4ad5782567a6ecf1fc711f1e51760250a87537c18ff118fb27aa66c8c394deff1425662396ba81bfa512eab586f1d036ed08d4278764d2123c360045b581670df6399aa02cc32d454da70241d10a0709d40c87a44bb67d2d716a27f8400437b85b7fc11b8f2098ba5d97c1325c4c6ab4f1f3afee2b9bf469560c973"], 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2101, 0x0) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) accept4$tipc(r1, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x800) [ 833.082105] binder: 12255:12261 ioctl c0306201 20a20000 returned -14 [ 833.110934] binder: 12259:12262 unknown command -1330900224 03:42:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xfffffffd}}], 0x30) 03:42:43 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, 0x0) [ 833.151381] binder: 12259:12262 ioctl c0306201 20000040 returned -22 03:42:43 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x100000000000000}], 0x0, 0x0, 0x0}) [ 833.220015] binder: 12259:12262 unknown command -1330900224 [ 833.247541] binder: 12259:12262 ioctl c0306201 20000040 returned -22 03:42:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xfffffffe}}], 0x30) 03:42:43 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, 0x0) [ 833.315555] binder: 12275:12278 ioctl c0306201 20a20000 returned -14 03:42:43 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="02001b00001f7fe2"], 0x0, 0x0, 0x0}) [ 833.480431] binder: 12287:12290 unknown command 0 [ 833.493422] binder: 12287:12290 ioctl c0306201 20a20000 returned -22 [ 833.550119] binder: 12287:12294 unknown command 0 [ 833.567363] binder: 12287:12294 ioctl c0306201 20a20000 returned -22 03:42:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x600}}]}) 03:42:44 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x200000000000000}], 0x0, 0x0, 0x0}) 03:42:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:44 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, 0x0) 03:42:44 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xad5bb0f6ce}}], 0x30) 03:42:44 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x27, 0x1, @thr={&(0x7f0000000140)="0122221e2f352232838c66df07298efbb4a71de3ff7dc75f8d029c8dcd40da643e59bce3e9e3e28bceab5bc04c980fbf3a759c3add45860810a6753dc83632189222c0ac366674964294f2f19a5ae532114c4980f8a14a7c93ceff88d8753568ff3f1be8eb659273f8e23af7af273202729200ee8f09e553f67c0bf06454d088ceb9f663ee1d5670c98dcefe062986b169185cd5ff59628c6a06f6aa90a9a1d715d4a4b6a5f9d96b023393bbc6be43d10ef8c1bd01911013587ad005ae5ee03492c5252dbfac644ab66bdfc0", &(0x7f00000000c0)}}, &(0x7f0000000280)) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000080)={0x24, 0x3f}) r2 = msgget$private(0x0, 0x410) msgctl$IPC_RMID(r2, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="0063404053a23689"], 0x0, 0x0, 0x0}) [ 833.743326] binder: 12306:12309 unknown command 0 03:42:44 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, 0x0) [ 833.767711] binder: 12306:12309 ioctl c0306201 20a20000 returned -22 [ 833.775621] binder: 12302:12310 ioctl c0306201 20a20000 returned -14 03:42:44 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x4000000000000}}], 0x30) [ 833.855174] binder: 12306:12314 unknown command 0 03:42:44 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x300000000000000}], 0x0, 0x0, 0x0}) [ 833.884556] binder: 12306:12314 ioctl c0306201 20a20000 returned -22 03:42:44 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, 0x0) 03:42:44 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x100000000000000}}], 0x30) 03:42:44 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000002d00)='./file0\x00', 0x20401, 0x5) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002d80)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000002f40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x2c044000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x108, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xef}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44000}, 0x5) fstatfs(r1, &(0x7f0000002f80)=""/68) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)=0xfffffffffffff017) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r4 = getpid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = gettid() dup(0xffffffffffffff9c) r7 = getpgid(0xffffffffffffffff) r8 = shmget$private(0x0, 0x2000, 0x1, &(0x7f00008c3000/0x2000)=nil) pipe2(&(0x7f00000001c0), 0x4000) shmctl$SHM_INFO(r8, 0xe, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002a00)=0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180), 0xfe8c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000002b80)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc, &(0x7f0000002b00)=[{&(0x7f0000002c00)=ANY=[@ANYBLOB="8c00000015001804cb66301bb7156ff4daec33f828bd70001e0000000400410008007500dac0436fe4a0e9d520db3a51cbda9f34fb99e1d8d3963e73bd1796097e5e587049518b6d66cbc81cfd1d91e1d24b182357bd9fcc856fdc6e0f5aeaee7f2a7204815ee333b0b18f20e76ce9", @ANYRES32=r4, @ANYBLOB="978a37ab31b6f1922d5f1c5ad079cfb70b680a7af0ca216dfe4dc8a85c188dae17ce709e901296aa233bf29469b0e465051a2e54a5535879783197ae14aad17b3a9b4bbdde6d5d3f177fedad7cdecf29ef461f06e542b386783d3dbaaeb566f3116bdaae290279ab04b07729ae070000"], 0x8c}, {&(0x7f0000000280)={0x20b0, 0x16, 0x0, 0x70bd28, 0x25dfdbff, "", [@nested={0x70, 0x36, [@generic="d0cabe527c5720ac9819524425a603069d435bf18adadc77ab5dbb7d12dee6e3352bfedc382b0732bfca91220898999bd561337db8b9f8d738a7e3b00cc99349a635c58e9bdbc1ed02f8076d258a1071363cd62fd6d659ef60d5b00d36c2236cbe8b1674f4951b91efef2b"]}, @typed={0x8, 0x48, @uid=r5}, @nested={0x20, 0x4b, [@typed={0x14, 0x6, @str='.trusted}em1,^\x00'}, @typed={0x8, 0x46, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}]}, @generic="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", @generic="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", @typed={0x8, 0x7d, @pid=r6}]}, 0x20b0}, {&(0x7f0000002340)={0x14, 0x26, 0x400, 0x70bd26, 0x25dfdbfb, "", [@typed={0x4, 0x7a}]}, 0x14}, {&(0x7f0000002380)={0x134, 0x36, 0x302, 0x70bd25, 0x25dfdbff, "", [@generic="a681c3c6c4", @typed={0xc, 0x83, @u64=0x1004000000000}, @generic="a9aa34ad505716f517deff6e1a96ceee517c1f9492d6736a76c41b5ee36712b0b6e91b57de110f9614120a91c5e15db7af0944b3981187ee9a3f0419fb67428044ebe54e44d518c4a27a80cfdb866dcaf48b6d7728f0a254e33f0eec0389d804f70fc89c80d1c8bc657321ee68d034f7bcfe404dc4dd7b619702d27379ebd65b7ba4d6ed15a839096009cdf7591a0e1277fd1234ffa0d78a06887ca34f53b61b5a19a41850b01fa86848f9cc1e61bd19ee7228dd439d3dad94c6", @generic="e84659499d656dc24828faf3a17e60045ab12a782be9c33b1259db2680f7e1aa7b98c29a0c7b04742f658371d64f523ceeda1f2052251342da9e6ebdeb8b9921144fa644764b63a3719d4da8527ac993940cb6f7feb43a2e"]}, 0x134}, {&(0x7f00000024c0)={0x52c, 0x1c, 0x400, 0x70bd28, 0x25dfdbfe, "", [@nested={0x2b4, 0x6, [@generic="c31957e4c18039aa6d3195c2cb5ad982d8a057260254a990ce5c417306655174e04be28a44e83a3d2039e27a20a23e81ee542c2176f43bf32e14bd1f4f0643ad80d10882480f010499209408c92e1ac4a95d61860014b4e0a8aa8c60785f815cc664851e24d1b0fc02f8dd58bbc976ad8dc45e266de244519ed55ecc1fa2667c8b786adca917d64991ae8e4e4e85d5374aa5d92ab777851ef57ff116416f9bb0c63211e5b7677a12", @typed={0xd8, 0xa, @binary="0250976e6815e6e10b1258e76947606ca37c0d2bf57fcd3f03dfae7d1592d42202db1b074ccaf9f43ff121daaa7f69709d6f4613d412c5a29854882eaae369a819e37fbf6561f55cdef53145ff2bbd2105fc323d155f565a673e2c0e9a4b7871906967c3c384472c014f6c758f87d32fb74d3de05418aa652b30c58284e606b7be4d0109049921874b933009bd965fff63c33689fecdb90f7274cf594bf7459159f61d88141aff0163154cb41368087f7625287b9484bb2f18565504ccf884b706d90164df9dff8cd0e250ca92122d5e8c1a8b"}, @generic="b96e0955891de3b34068f4cc73ace949c27d84e9c9f25cc34cf3dee38bc0447c780f8d048d3e81cfaf66099cec3fe31e6234", @generic="46b50c756af3aab8df683534479e2500cb0f478afea95111d398b7d7b6865d284be282551d4bfdcebc85adcf53a56a", @generic="6ebb7cc97895c70ab6bc413a5bee94aaaf57980e9d55550fb79ee436fd15846b136e97c074ba1dc9af816aa90d83a259feefea0edd12b93d8c18db39b7476a2ac9b59f7bc035f97845d0b4d393e0600d019fe9b73d87434f18542f8512b439c1391a996addf1b6a090745ebd36ff3d010f109d751a765632814c95c42e6f2537ec0960a5787ad10b63e1fda31ebca778ad4367414bc13ca2ffd6e206f0858e4b80675a7f030fc7d43247778e595cccca638448eb3cdb74b1836a57854e18e3b70621ae79", @typed={0x8, 0x7a, @fd=r3}]}, @nested={0x11c, 0x2d, [@generic="d0a5f342d1d391618dfc30060a9214bec866479abff5da", @typed={0x8, 0x75, @fd=r0}, @generic="272e47027453db7a2dc06ae7d905fc8aa0cc6180e010daeb5ca816686ce3ba64835ae8a50cbe6bf598a9f68fe4", @generic="7f1214ce9faf9c97ef8449588a98352e20f1c529e45f84368058cd5a92f2ea9339520fc2d30a0b3ee868095cc28a4476aab9cd37fdeca545743224b757b4657f5b20959d1a0715f6ebdb9ce94499897a80a006dcdd39db79ae4de430a4feac0a1cc0aee359cfeab6c80c2d68a1418d7f6402b44355c5d5c387217536fa4324aa7fcb1db68d0d948d42b9eb5db2a8c310f4dd3f08c5f08fb184cd6cd2032c4cc08597d4a15b8cc45c1c3f5bc60a30071f003a0d86924d3a3a72e723dde162b821a15dee1d41912fe97513e8"]}, @typed={0x38, 0x3, @binary="dea7ea50cfc740c1d0200612d3c2b8d0538abac5f8255bd4abf1aa684ebfc32e3c20b8ae45ae21ef2fce7605a18474f39f"}, @nested={0x114, 0x39, [@typed={0x8, 0x90, @pid=r7}, @generic="a75660a51002cba589ddc1c87f23c4f8f06c3a9b0fb857228c0ca4432aab30393bc2c7d3171c9450bae3b7966094e81f8c9e9778648f7d", @typed={0x8, 0x10, @ipv4=@multicast2}, @typed={0xc0, 0x30, @binary="6a9c9f0dc9ae422d691c3f3c86a5dd29f20d332a70bc7c3f43eaa80f6c2d9e08ecfff0eb9bb3b8d3ad6af8b65ff772dc4649fcdbf83a1856212b104e7366efa659bf5e186d83dd4a864286cfc2344d111d79d8a86c2ce21f7b2061fde416c37760036c4569a60e9ed1eef09dc2b1d59c362d3868b27f46e27e99e5091363a6f759fac02806c0a408e076d8d6ebfaaa457dadcf7feba263c1025fd8929eb47bfe3251f5975da28f854ba47dcc0dbd63ccdb524ac570279a42b993"}, @typed={0x8, 0x78, @str=':-\x00'}]}]}, 0x52c}, {&(0x7f0000002a40)={0xbc, 0x3f, 0x10, 0x70bd27, 0x25dfdbfb, "", [@generic="7aa61baaed73b8c1ccb8692ab962781b52474c2343971e856201b5b95955efe910fc2374f861980d25ece636533d292cea525c17c48bded53cd85fd987c21781248ae488e93485242e3874b447d6f03a71212a2b79a0", @typed={0x8, 0x73, @pid=r9}, @generic="3b85db9598f8d43293b0d2eb91d662eb99d7ee0b78a405304c611fed2db6037c10f6b58d52625a6aa2ff3b95ff40cc7a523a4096d8bfc236b5c0cb580edfa443eefc6b2326351d2ca08bb1e1a4"]}, 0xbc}], 0x6, 0x0, 0x0, 0x4000000}, 0xc000) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x280400, 0x0) lseek(r0, 0x0, 0x4) keyctl$session_to_parent(0x12) ioctl$FIBMAP(r3, 0x1, &(0x7f0000002bc0)=0xfff) [ 834.020752] binder: 12323:12325 ioctl c0306201 20a20000 returned -14 03:42:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x700}}]}) 03:42:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e02000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:44 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x400000000000000}}], 0x30) 03:42:44 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x400000000000000}], 0x0, 0x0, 0x0}) 03:42:44 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb000000, 0x0, 0x0, 0x0) 03:42:44 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x0, 0xd489, 0x7}) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:45 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc000000, 0x0, 0x0, 0x0) [ 834.431330] binder: 12350:12357 ioctl c0306201 20a20000 returned -14 [ 834.469637] binder: 12352:12358 ioctl c0306201 20a20000 returned -14 03:42:45 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x800000000000000}}], 0x30) [ 834.481000] binder: 12350:12361 unknown command 0 [ 834.494921] binder: 12350:12361 ioctl c0306201 20a20000 returned -22 03:42:45 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x500000000000000}], 0x0, 0x0, 0x0}) 03:42:45 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/dev/binder#\x00'}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="00e3404000000000"], 0x0, 0x0, 0x0}) 03:42:45 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe000000, 0x0, 0x0, 0x0) 03:42:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 834.726738] binder: 12371:12373 unknown command 0 [ 834.731658] binder: 12371:12373 ioctl c0306201 20a20000 returned -22 [ 834.747362] binder: 12370:12372 ioctl c0306201 20a20000 returned -14 [ 834.891843] EXT4-fs: 5 callbacks suppressed [ 834.891856] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000700, [ 834.971386] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000700, 03:42:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x900}}]}) 03:42:45 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x1f00000000000000}}], 0x30) 03:42:45 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00635057806aa1b9abcd7c74c5ce9fa881e59400622b3db7d36a359fe6000077a5ca9cf7e8e7a443ffe569126e3ec59ac6e47b0c6d897d1b4dcfab8965355dd8d16b958f64ea91314d9d223383b8f95d7a2121cb69206c8b4437b5f5c444a83e0709215487db4f2468368301a8072d4d"], 0x0, 0x0, 0x0}) 03:42:45 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, 0x0) 03:42:45 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x600000000000000}], 0x0, 0x0, 0x0}) 03:42:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 835.105046] binder: 12394:12398 unknown command 1464886016 [ 835.107419] binder: 12395:12399 ioctl c0306201 20a20000 returned -14 [ 835.110860] binder: 12394:12398 ioctl c0306201 20a20000 returned -22 03:42:45 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, 0x0) [ 835.165733] binder: 12394:12404 unknown command 1464886016 [ 835.171712] binder: 12394:12404 ioctl c0306201 20a20000 returned -22 03:42:45 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x30) 03:42:45 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="47c907ff34111b6a3d16f1d1d092e0008eddc65332c16628dabd94a7664a000006f4e7f332f125449284369bce8c"], 0x0, 0x0, 0x0}) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x6) 03:42:45 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x700000000000000}], 0x0, 0x0, 0x0}) 03:42:45 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, 0x0) 03:42:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x4000000000000000}}], 0x30) [ 835.421118] binder: 12418:12420 ioctl 8080aea1 20000040 returned -22 [ 835.473200] binder: 12418:12420 unknown command -16266937 [ 835.477691] binder: 12419:12422 ioctl c0306201 20a20000 returned -14 [ 835.499160] binder: 12418:12420 ioctl c0306201 20a20000 returned -22 [ 835.507413] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000900, [ 835.528873] binder: 12418:12425 ioctl aea2 6 returned -22 [ 835.554428] binder: 12418:12425 ioctl 8080aea1 20000040 returned -22 [ 835.596591] binder: 12418:12420 unknown command -16266937 [ 835.602217] binder: 12418:12420 ioctl c0306201 20a20000 returned -22 [ 835.626050] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000900, 03:42:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xa00}}]}) 03:42:46 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x23000000, 0x0, 0x0, 0x0) 03:42:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:46 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x1200000000000000}], 0x0, 0x0, 0x0}) 03:42:46 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6ca, 0x200080) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xbf00000000000000}}], 0x30) 03:42:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xcef6b05bad000000}}], 0x30) [ 835.820926] binder: 12446:12448 ioctl c0306201 20a20000 returned -14 03:42:46 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget(0x0, 0x20) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/122) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c5847661281d6b0063171f82d2"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x6, 0x22000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x1, 0x1, 0xff, 0x0, 0x8}}) 03:42:46 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, 0x0) 03:42:46 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x2000000000000000}], 0x0, 0x0, 0x0}) 03:42:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xfdffffff00000000}}], 0x30) [ 835.986222] binder: 12460:12463 unknown command 1635157189 [ 836.018027] binder: 12460:12463 ioctl c0306201 20a20000 returned -22 03:42:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 836.084463] binder: 12460:12468 unknown command 1635157189 [ 836.132794] binder: 12467:12473 ioctl c0306201 20a20000 returned -14 [ 836.137181] binder: 12460:12468 ioctl c0306201 20a20000 returned -22 [ 836.225192] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000a00, [ 836.274859] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000a00, 03:42:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xb00}}]}) 03:42:46 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, 0x0) 03:42:46 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x3f00000000000000}], 0x0, 0x0, 0x0}) 03:42:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0xfeffffff00000000}}], 0x30) 03:42:46 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea9000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000b66000/0x1000)=nil, 0x1000, 0x0) 03:42:47 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x42440000, 0x0, 0x0, 0x0) [ 836.422283] binder: 12490:12492 ioctl c0306201 20a20000 returned -14 03:42:47 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a0f000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="800000000000002a309f0076c3a2a1623164d74a18baf9d902b013c21a972009af6a70cac721b524d09b40acdc4171"], 0x0, 0x0, 0x0}) set_robust_list(&(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}, 0x9, &(0x7f0000000400)={&(0x7f00000003c0)}}, 0x18) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x1ffffd, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000480)=[@sack_perm, @mss={0x2, 0x10001}, @timestamp, @mss={0x2, 0x5}], 0x4) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x50, 0x14, 0x400, 0x70bd2c, 0x25dfdbfd, {0x2, 0x38, 0x10, 0xfd, r3}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x111}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x7ea74774c5eb0726}, 0x80) 03:42:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x4}}], 0x30) 03:42:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:47 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x4800000000000000}], 0x0, 0x0, 0x0}) 03:42:47 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4d500000, 0x0, 0x0, 0x0) 03:42:47 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = getuid() ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x1e9}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000300)={0x7, r3, 0x1, 0x8000}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_uid={'access', 0x3d, r2}}], [{@obj_role={'obj_role'}}, {@hash='hash'}, {@seclabel='seclabel'}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '.\'.self'}}, {@uid_eq={'uid', 0x3d, r4}}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 836.685185] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000b00, [ 836.729438] binder: 12515:12516 ioctl c0306201 20a20000 returned -14 03:42:47 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xc00}}]}) 03:42:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x8}}], 0x30) 03:42:47 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x4c00000000000000}], 0x0, 0x0, 0x0}) 03:42:47 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x53540000, 0x0, 0x0, 0x0) [ 836.906175] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000b00, [ 836.920853] binder: 12523:12532 ioctl c0306201 20a20000 returned -14 03:42:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 837.005681] binder: 12534:12536 ioctl c0306201 20a20000 returned -14 03:42:47 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5e020000, 0x0, 0x0, 0x0) 03:42:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xbf}}], 0x30) 03:42:47 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6000000000000000}], 0x0, 0x0, 0x0}) 03:42:47 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x60000000, 0x0, 0x0, 0x0) 03:42:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x1f00}}], 0x30) [ 837.248848] binder: 12551:12552 ioctl c0306201 20a20000 returned -14 03:42:47 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6800000000000000}], 0x0, 0x0, 0x0}) [ 837.404919] binder: 12562:12563 ioctl c0306201 20a20000 returned -14 [ 837.440720] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000c00, [ 837.564765] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000c00, 03:42:48 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x14000) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) mmap(&(0x7f0000d04000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:48 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, 0x0) [ 837.637932] binder: 12523:12576 ioctl c0306201 20a20000 returned -14 03:42:48 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x6c00000000000000}], 0x0, 0x0, 0x0}) 03:42:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x3f00}}], 0x30) 03:42:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:48 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe00}}]}) 03:42:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x30) 03:42:48 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f00008bf000/0x2000)=nil, 0x2000, 0x8, 0x40000000000031, r0, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 837.767488] binder: 12580:12586 ioctl c0306201 20a20000 returned -14 03:42:48 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb2000000, 0x0, 0x0, 0x0) 03:42:48 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x7400000000000000}], 0x0, 0x0, 0x0}) 03:42:48 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000000000000000) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xbf00}}], 0x30) [ 837.947230] binder: 12597:12601 transaction failed 29189/-22, size 0-0 line 2896 [ 837.962660] binder: undelivered TRANSACTION_ERROR: 29189 [ 837.979054] binder: 12603:12604 ioctl c0306201 20a20000 returned -14 03:42:48 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, 0x0) 03:42:48 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300, 0x7a00000000000000}], 0x0, 0x0, 0x0}) 03:42:48 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xf1c}}]}) [ 838.136167] binder: 12613:12619 ioctl c0306201 20a20000 returned -14 [ 838.150204] binder: 12615:12616 ioctl c0306201 20a20000 returned -14 03:42:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x30) [ 838.187487] binder: 12613:12622 unknown command 0 03:42:48 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xebffffff, 0x0, 0x0, 0x0) [ 838.236012] binder: 12613:12622 ioctl c0306201 20a20000 returned -22 03:42:48 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x2, 0x0, 0x0}) 03:42:48 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[], 0x50b, 0x0, 0x0}) 03:42:49 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf4ffffff, 0x0, 0x0, 0x0) 03:42:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x30) [ 838.453089] binder: 12640:12641 unknown command 0 [ 838.484650] binder: 12637:12639 ioctl c0306201 20a20000 returned -14 [ 838.520955] binder: 12640:12641 ioctl c0306201 200000c0 returned -22 [ 838.555411] binder: 12640:12648 unknown command 0 [ 838.560343] binder: 12640:12648 ioctl c0306201 200000c0 returned -22 03:42:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x30) 03:42:49 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x3, 0x0, 0x0}) 03:42:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:49 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) [ 838.692098] binder: 12651:12652 ioctl c0306201 20a20000 returned -14 03:42:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x30) 03:42:49 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, 0x0) 03:42:49 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x106, 0x100f}}, 0x20) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x20000000003, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x402, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000140)={r3, &(0x7f0000000080)=""/99}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000180)={0x8001, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)) 03:42:49 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1200}}]}) 03:42:49 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4, 0x0, 0x0}) 03:42:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 839.033527] binder: 12674:12676 ioctl c0306201 20a20000 returned -14 03:42:49 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfbffffff, 0x0, 0x0, 0x0) [ 839.105631] binder: 12677:12680 ioctl c0306201 20a20000 returned -14 03:42:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x1f000000}}], 0x30) 03:42:49 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x5, 0x0, 0x0}) [ 839.203762] binder: 12677:12691 ioctl c0306201 20a20000 returned -14 03:42:49 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0xd, "464a97dc6079ee5d3cae35e15f0d71606eb49877aa1f37e37037499354d8387fa51a353b486b3e5780d43b149560bfe4e44152ba205f49acde781f3c6ec46679cce388da574e532372f07556472599068807cf912808cd72136cda6bbd25dcca3da27bc42e8e6a72045f22a8f0a7206fdfa192f4bdc6c3ffcba174d2bca5bfdb"}) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x30) 03:42:49 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff0f0000, 0x0, 0x0, 0x0) [ 839.272646] binder: 12693:12696 ioctl c0306201 20a20000 returned -14 03:42:49 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6, 0x0, 0x0}) [ 839.400579] binder: 12701:12703 ioctl c0306201 20a20000 returned -14 03:42:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x30) 03:42:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 839.447108] binder: 12701:12703 ioctl c0306201 20a20000 returned -14 [ 839.467502] binder: 12706:12708 ioctl c0306201 20a20000 returned -14 03:42:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1600}}]}) 03:42:50 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff7f, 0x0, 0x0, 0x0) 03:42:50 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r2, 0x722, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe2c6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x801) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5ddc1890ed689a5bfb132cffd926923bcbf66ef0dc2e53b643864d11baa63f7742fd1f6721fc7a96b2a5802f4bddbd22761a1a83975b06b7d5467d271db68179602dc14d152cc80407ec34818903311394fdb4762c0b8ca5b33af6e9da2323f80ee329af8e33307144765a6e258b26cc70adfa7ad4c19b8c"], 0x0, 0x0, 0x0}) 03:42:50 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7, 0x0, 0x0}) 03:42:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xbf000000}}], 0x30) 03:42:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:50 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, 0x0) [ 839.863836] binder: 12731:12735 ioctl c0306201 20a20000 returned -14 [ 839.882076] binder: 12729:12736 unknown command -1877418915 03:42:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xfdffffff}}], 0x30) [ 839.969117] binder: 12729:12736 ioctl c0306201 20a20000 returned -22 03:42:50 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x12, 0x0, 0x0}) 03:42:50 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffeb, 0x0, 0x0, 0x0) 03:42:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xfeffffff}}], 0x30) [ 840.118743] EXT4-fs: 6 callbacks suppressed 03:42:50 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x400000000000000) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00434040000000008d2fde6b24659992a48669635228b83c64eee65a6ce877bfc90228e77f5a61b28f39a6497b1d31b4b27496"], 0x0, 0x0, 0x0}) [ 840.118757] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000001600, [ 840.236522] binder: 12752:12757 ioctl c0306201 20a20000 returned -14 03:42:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1c0f}}]}) 03:42:51 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff4, 0x0, 0x0, 0x0) 03:42:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:51 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x48, 0x0, 0x0}) 03:42:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xfffffffd}}], 0x30) [ 840.406374] binder: 12762:12766 unknown command 1077953280 03:42:51 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff5, 0x0, 0x0, 0x0) [ 840.516495] binder: 12762:12766 ioctl c0306201 20a20000 returned -22 [ 840.545119] binder: 12769:12773 ioctl c0306201 20a20000 returned -14 03:42:51 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4c, 0x0, 0x0}) [ 840.646963] binder: 12762:12784 unknown command 1077953280 [ 840.682701] binder: 12762:12784 ioctl c0306201 20a20000 returned -22 03:42:51 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, 0x0) [ 840.712739] binder: 12787:12788 ioctl c0306201 20a20000 returned -14 03:42:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xfffffffe}}], 0x30) 03:42:51 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffb, 0x0, 0x0, 0x0) 03:42:51 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8000, 0x110) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x8, 0x40000000000031, r0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x4000, 0x0) getdents64(r1, &(0x7f0000000040)=""/57, 0x39) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) accept4(r1, &(0x7f0000000140)=@un=@abs, &(0x7f00000001c0)=0x80, 0x80000) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000000c0)=@fragment={0x32, 0x0, 0x6, 0x9, 0x0, 0x5, 0x65}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x28}, 0x10) 03:42:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xad5bb0f6ce}}], 0x30) [ 841.169145] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000001c0f, 03:42:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1f00}}]}) 03:42:51 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x60, 0x0, 0x0}) 03:42:51 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, 0x0) 03:42:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:51 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="d80000003100000129bd7000fbdbdf25000000005400010018000d00000010000100636f6e6e6d61726b0000000000001000070000000800010069707400000014000e0000000c000100706f6c69636500000000140049c36db52386a8c5736b626d6f6400000000700001001400130000000c0001007065646974000000000010000100000008000300080000000000100008000000080003000900000000001400150000000c0001006761637400000000000010000b00000008000300d2270000000014000b0000000c000100736b6265646974000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 03:42:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x30) [ 841.264540] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000001c0f, 03:42:51 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000000, 0x0, 0x0, 0x0) [ 841.337708] binder: 12818:12825 ioctl c0306201 20a20000 returned -14 03:42:52 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x30) 03:42:52 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x20000000000003, 0x110, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='auxv\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) ioctl$FICLONE(r2, 0x40049409, r2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r3, 0x8001, 0x4, [0xffffffff, 0x5, 0xb8, 0x1]}, 0x10) connect$x25(r2, &(0x7f0000000140)={0x9, @remote={[], 0x3}}, 0x12) 03:42:52 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x68, 0x0, 0x0}) 03:42:52 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000000000, 0x0, 0x0, 0x0) 03:42:52 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x400000000000000}}], 0x30) [ 841.634121] binder: 12847:12849 ioctl c0306201 20a20000 returned -14 [ 841.791051] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000001f00, 03:42:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2000}}]}) 03:42:52 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="00000000ca00"], 0x0, 0x0, 0x0}) 03:42:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:52 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6c, 0x0, 0x0}) 03:42:52 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000000000, 0x0, 0x0, 0x0) 03:42:52 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x800000000000000}}], 0x30) [ 841.834050] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000001f00, [ 841.930691] binder: 12868:12870 ioctl c0306201 20a20000 returned -14 [ 841.953828] binder: 12867:12875 unknown command 0 03:42:52 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7ffffffffffff, 0x0, 0x0, 0x0) 03:42:52 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x1f00000000000000}}], 0x30) [ 842.046506] binder: 12867:12875 ioctl c0306201 20a20000 returned -22 03:42:52 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x74, 0x0, 0x0}) [ 842.093715] binder: 12867:12884 unknown command 0 03:42:52 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe000000000000, 0x0, 0x0, 0x0) [ 842.148512] binder: 12867:12884 ioctl c0306201 20a20000 returned -22 03:42:52 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x4000000000003e, r0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:52 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x30) [ 842.228798] binder: 12890:12891 ioctl c0306201 20a20000 returned -14 [ 842.326506] binder: 12896:12899 transaction failed 29189/-22, size 0-0 line 2896 [ 842.401064] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000002000, [ 842.425367] binder: undelivered TRANSACTION_ERROR: 29189 [ 842.499548] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000002000, 03:42:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2d00}}]}) 03:42:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:53 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 03:42:53 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}], 0x30) 03:42:53 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7a, 0x0, 0x0}) 03:42:53 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x9c, 0x13, 0x10, 0x70bd25, 0x25dfdbfc, {0x3}, [@generic="a8ac3a46d8509a757477ef3c57c89804884f6e9c6bf3b5208ff72197f3870207c28d36c2c88d4c6809f21c3f69971ef75746c69c84d2bb86ec", @generic="7dff1a8467242e52d2d6adce5a911bf528f90d38ccbb748a077b789a9bb63ed588b42e828a86b3666014f1825133494c346104e372858d64e92657482d56ca74bf62", @typed={0xc, 0x5d, @u64}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x88010}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@delqdisc={0x160, 0x25, 0x2, 0x70bd25, 0x25dfdbff, {0x0, r2, {0xffff, 0xf}, {0xfff7, 0x7}, {0xb, 0xfff7}}, [@qdisc_kind_options=@q_prio={{0xc, 0x1, 'prio\x00'}, {0x18, 0x2, {0xfff, "9b5980e71c564d029815b0a7bdf4968d"}}}, @qdisc_kind_options=@q_pfifo={{0xc, 0x1, 'pfifo\x00'}, {0x8, 0x2, 0xca02}}, @TCA_RATE={0x8, 0x5, {0x7, 0x6}}, @TCA_STAB={0x30, 0x8, [@TCA_STAB_DATA={0x10, 0x2, [0x0, 0x8000, 0x6, 0xb3f, 0x800, 0x2]}, @TCA_STAB_BASE={0x1c, 0x1, {0x10001, 0x101, 0xfc5b, 0x3, 0x1, 0x5, 0xffffffffffffffc0}}]}, @TCA_STAB={0x68, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0xfffffffffffffff7, 0x2, 0x8, 0x1, 0x2, 0x9, 0x20, 0x6}}, @TCA_STAB_DATA={0x14, 0x2, [0x839, 0x1, 0x27, 0x9, 0x4, 0x6, 0x7d54]}, @TCA_STAB_BASE={0x1c, 0x1, {0x1000, 0xffff, 0x1, 0xf936, 0x0, 0x9, 0x8001, 0x3}}, @TCA_STAB_DATA={0x18, 0x2, [0x7fffffff, 0x6, 0x69b, 0x1ff, 0x1, 0x882a, 0x7f, 0x2, 0x8137]}]}, @TCA_STAB={0x5c, 0x8, [@TCA_STAB_DATA={0x4}, @TCA_STAB_BASE={0x1c, 0x1, {0x6, 0x100000000, 0x2, 0x1ce7, 0x2, 0x2, 0x60, 0x7}}, @TCA_STAB_DATA={0x8, 0x2, [0xffffffff]}, @TCA_STAB_DATA={0x14, 0x2, [0xfffffffffffffffe, 0x9, 0x0, 0x9, 0x7, 0x45, 0x5, 0x9]}, @TCA_STAB_BASE={0x1c, 0x1, {0x400, 0x203, 0x200, 0x200, 0x2, 0x7fff, 0x6e, 0x2}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x160}}, 0x800) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:53 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, 0x0) [ 842.614620] binder: 12919:12920 ioctl c0306201 20a20000 returned -14 [ 842.642826] binder: 12917:12928 ioctl c0306201 20a20000 returned -14 03:42:53 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xbf00000000000000}}], 0x30) 03:42:53 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x300, 0x0, 0x0}) 03:42:53 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, 0x0) [ 842.769835] binder: 12917:12923 ioctl c0306201 20a20000 returned -14 [ 842.797034] binder: 12938:12939 ioctl c0306201 20a20000 returned -14 03:42:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:53 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xcef6b05bad000000}}], 0x30) [ 843.016363] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000002d00, [ 843.075053] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000002d00, 03:42:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3f00}}]}) 03:42:53 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:53 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x500, 0x0, 0x0}) 03:42:53 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 03:42:53 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xfdffffff00000000}}], 0x30) [ 843.184284] binder: 12960:12964 ioctl c0306201 20a20000 returned -14 [ 843.208651] binder: 12963:12967 ioctl c0306201 20a20000 returned -14 03:42:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:53 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}}], 0x30) 03:42:53 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, 0x0) [ 843.300635] binder: 12960:12973 unknown command 0 03:42:53 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x3) 03:42:53 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x600, 0x0, 0x0}) [ 843.380263] binder: 12960:12973 ioctl c0306201 20a20000 returned -22 03:42:54 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, 0x0) [ 843.455887] binder: 12984:12985 ioctl c0306201 20a20000 returned -14 03:42:54 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e1d000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6100103e006340402c800000ea8c7c8c0ff51a7c44bba10f1a7494e91184fcbb7495f75fbe5094d04761019bc387c2f87115bd198eb995ef549bf1b5c87d7c89"], 0x0, 0x0, 0x0}) r1 = getuid() syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xffffffff, 0xa, &(0x7f0000003500)=[{&(0x7f00000000c0)="9dfab78b493133b97379415eacd32f1335ff2203d8e3794803157e16afe06a345a6793e0db374dae8c", 0x29, 0xfffffffeffffffff}, {&(0x7f0000000140)="1a231c717089e45fc45be0945e3a75ba32b8e70eb9cb78ded65e2ed3d4e69c109937cf705f207c4aaa4e61856083fc526cf40d0fd0292c4c7289fc5df38d3c1971a58fb5711a306d3562b5e88843559ea6d81cf35a55576ef5e4b5b2a14d98a823c6f8239274455fc0cfd1738b05d56137e7bb1c8abe94bbba0d32f9afc6b87548be2c3031c0550903fa64bde8cabe4117fe8cd4e6e4687549a7f6b686adacc1b33d9ac6bb1b2a2edadfe0d48cdcf8f687d86fdee98e12e265c2cdf3db7d74e23c6a28db27b0218b4d", 0xc9, 0x8e}, {&(0x7f0000000240)="b5090dcb776fff6793d65274476adee24d67304ad2a05b04e7de43833458c0783b6dc98b2a7c88d4b99ad6e94145534136c0120d16", 0x35, 0x7}, {&(0x7f0000000280)="c28de4404417d52ee6da70a31ea6883d30e570647ab4a45f21a9976a17e3ebda9327f17b6a22de2041949d54b07399d99b821a98aa25fadf6cd836c55964863b89b58d865a1b70899fb11c85e9755ddc7a890fe37096884f41a94d7977e036b0d46cb979bf9a69b48947457885cfebf8fe4e0008e2e7773c78c3c566a8ff131dbaad0191865e4ce45b518e6f5009d29c3705a6019bb9a204a3220a6b55fbe4b598726fd674968e07decbed14a830af4e5c68ed6edec617724a54a2d51f94e0be8ba3a80d5ed93c28c15fe7ac808a372485175da4b2411802e6f3b3ba08a3f1c708317b62df09dbc542315eab98b725a584d01c483a33dedf48440a4169a9ee72dbf60dd1bdc00dcefa985f11d608bb1f3756a9220b63f14688a2bd0420484383f4bb2ea29833281ea17f566a992a19ebfd97ffd5f5b325f49f58437dbfe4cd016d7c5e51e659b11721acb8697a8b4e0f05a3d9aaf8cba554e8640cfc1948afd297ac42f6f12961012d18077b4c4cc7d2c06ea388e91fbae5fe3395a7fde553e84b6b430e18b210a388ea4cc2c49c8c50372c529146f8797d5290b34458d94c283adedec2f4f60ffa739907bf1df7487d5ebb3968f9070ad4679f9bbe88343685b0944fa98b6985ab2d0562d4cfce5a9933d361d43d8f999232c45a4b696855f6669d16ea78982681782f9ba9718e509d89bb6f15299a2406f31d113f8024931d9b0ca88b2724c2f1c1ae06d73444266255176136ace5702e5948a6b7486a32ef924f8b5e2b182f68b5880951da73bd8bedd29e7c0ac87efbbffc833d48dcae4e44bd0f3b42be3e5070272cfd1796ce0e47c0be9511f967c869aecfdf8ecd9f109de9e41dc1cdf98b2e58072ba2a285e0b70811bcab968982aac4821e5e38265af9b1ea0daac83ffc7a9b87461a97bfef6b6504ee3412917d7cbfb0a6264ad81506c4b2adacb681182e6e159db9b5b6c7b24ac14e587d4551a3c0127ea053a71dea1734f80263bb931cac17208e732d35d3b09c319002a5fd6ef36c0ad4e3eb15473564e8338974f5e3c034ab553c058dfc0c9eb2a41b9dc9a4839bf1a55644e810f892e3abb7a103d2e131ba6f3073f085887a87523e960d456383266c1503b106fd24c00fe90e318e40f52642808fb707eff33d9f441b155c684311f5cb3bc6bc69357e86e68ec12c1da81cf56d81331e6005496e219e87947a6996a60608a90555917c551ec76260c9bfa6e74aecd667460bef81b214822eec5d2874e6267a9ce6aaa9efd4b42a01012f1b49782423f1f987dfc0d0bcde54be19472be8982c6cc9b7eb47e62ab32a34282a317459ddb9df6fab78510b6a7c3a6b2fe669874d73f441b278ba7e7369aa3c5fca6726678b8da01e17bd49b9c6b2531406e25b78a117bfb5e4a1a62ee8bbb530a66133224199c6abe0ac06c68597048c84a1653f6bdace93a9b4151163ab42b8e8edd3a2a449608cebb68c08a26da0b9eea5b52384d53106f0d8e9c412a73852f4c7ae378567d2624fa97b40f5e88c5e8f9776f5541dda6cd6c5c59445f712b4a04569c4822b7e5e18abed82de3e5c2940888b1c3fc6ec2d6e30125f359b529ddacd695ec1678b3e62c54d21aa0680081019397e26f2a43708b01bc90b373e379b3171144c3b62b5726ecf7327853f78f8f7c668e10034c99efe202c0680bb31ddf9f7dfed2a5fc8e4afae9361f913b7f8d185f6c79dfd317972dd3ac384660ed26b493e5585b1ed49013d2938ebc99b97f1c11f18759b4ae657b9c3554ef86eabc5d1c6dea505f3c8751e22ee9861dc7a7f7739e7f447726262c535359b35be413a6818892d282711ee05b8d27629e30c8f0abeb9d84263efa649a8b5b98e2f2d1bda89d42107c10896d558b77fb20c35e0dcf56cea5005ecc49e5f012a93e19b94257301f3d07e87748f6917e0e8b70be42e79bc140f2a16baaebf640ff8cc59b47911a5ba4e3f6b043e58c2b8c1bfb3de7f6f5be6279b2770f7dc619f2dc289a0d1416e1930447c24c577324f493303d6f82d7d81b9e99b012ffc91d0a134e67a2ae5c9e74aa3ea3c85b5a76f166237e6a3fc347ea7b5e7ac110e5d21a0fb02e5a7ec3cd28d7ee48df40c2720addbf4f8e6e625002ea1c1fe2c3f2b67071313bb15b319a0555b1ba2360d826e95235644f23e9095904dd9f228485617c29351d45c301957a0bfc46dcc4270a0cb1b28c988dc0dcbe0a0e190626f630ed5f44a32f6964b5af6592039600f5a09ce951189947ba093d6eb62aec4bd136db0596d69031e8f329530b2f38b24f706b6188300d3914dd08779339d85f3155a99d1a5df86d2c31da1fae0a2c3512d04c9e7710ed8fde6d6c03e1755c85100fb0bb686611505d72e497744a3b1ecc5eefebc5a0095265f4986070942b90a6f4504e9796d9a7a59fce0d29488830d3aeef9e2bd71976aacb514b8d4fd9cbb51fa0df12fa1446564c0bc097b35cdbc15dd2ab0153b64cddfe10a962eff5700436558480c650c322187b5a10f907254c46ae0000ada24f6b44e69f45a3bce3c8e3e9f721d4d23df68f05e75fc87868a426acebb64d6ca23ce16881931a2a890c7d6af9d877207de62beb829a21eb99a5b2ca96ce50c520f0ce6a5dcb1dafcb55e5377795be3507221a5879f6081d0b35675492bd8e5a3eb13d7a5f7927828c0c02cc4f853ec195dbe76f79968395557693f3da560af9d40ab058191a12a4b780bbc33f7024c97ac1eed98c8d5edae80d0b2074196635781ef2734353be303b21758cf9a507f73971a2fc80d7b99acd1ea57fc0fcea7e7578e6926f68c4348e81d32ba529736823c24faf47fbd12565f7313b9c0cfaf10a04b8c5be47972112e5c42a0b351e67cd2e7102586baf377894f8d995b1e04938ab4da7150a23e8d0324669ec67a35bfedddfff15430e0f176aba5a0d758c049585d0fa645210d96e3abe266d1a00cc307f65c946ca726aecfb074b1a3966d582cde905f7927ce5de4026240bd28fabf6caf6142c07fe7e77f23f376cdbd4d21e107b2f2619189ca27ca19099bff3416bc42b3966a655fba98618c48edc1dcc826289e16d929caa8b9653e3388d85746e99ba25fa1ca013aa681d952448097c83840f5d8fb7799abc2ed800b75ab9982e7b38457e729c608fab9ce71539b2311c167a1a9fbab018cc12c8329a2ee557aaa75306307984f9476ece71a2c616f346913e5390cd48563565a7fc94022e5b4e7ce9503a0882a5fd61d5afefbb3e60cdc1c6d172fc874fde6ce537612c9b97eed8694ac05d9264cc7f21e495b3811a06ba2f1b7c552cd9b4270b896d0789d25ae191a19227aeec9abc1d6937b0c04daa2e801f2c36cfe27f23509bcbe09a3a079b494316e0a9923224ee2624b984cf074ba19559dfc4e2376bdc366931ae12c8ad26528efe818130c9299d46d71c958e4d2cacdc80c0def816f102acf5fc9ba2ae4e0c7b8f8e26503e60faa19942b6752cf407f107cc7b698f9f952ad28d009eaddc894397d484c013737abe35a4e8495be597cea5f5187c8277ec6c43fb481cf375f3a11340058f500692989518c9626aff6c10532e4c89f3220de1c79f91c5356abae0ef98205340962c160a37a66a30f03ca3f848bdd762fedf44e7b277e260be47b93c87445e83ecb6345bab0110d56ad8a3948220e6afaac71e092ba4dc565977174d8a82c0f552a78667f883d713a75ff92948c1d25ee6189e46189d7c1b30e88adb6e388767fce65dbc39c2e555425e5d4ad979d4789eda9dd805739ce73ab6e867dedc4cf1b5d9abf54643a8a9a78ab49fc7ffbbfeef86a747a35d14f41673774efbbdca0f620b4c03db7f699bb435aef8756c7676626cdd313539716b31200fef86346da8b70c610fa4ab2119cd02926c24770171a40d2ab18700ac64855c3e14919eae955706b88a108daa96d4d3963dcddbabe3333f101e1977531c80f988b066c8a4a7885655eb442315d482fa725a7a445f3b414d76cf925611a2867eaf4058d869645a14090728ce8e6c8b4df26945436716b676d529a345a863ebab52389dd98fa5114d9d24fc62360aa9ea346fa3bff868f1f6a9b4b33700c063e1687bdf4633a80ed5c3dcb6e65f32fca3d5021b4ca57caf6e02e95428ab4ea012bbefafa5f8f66d249e1ee20c3dcbf2a71c053192f3588b22d125c791253a5b39a2638c62bbc958274777854d8ba51332aa47316ad11a9b2dfbd64dd30ab2dedb26588aa78164ac971651f04c7523009affc4d1cda039df204e0f227d48477c5c0123ed65302b0eeae44747155dd91161ed0ee399b59f97f3fca525b33be8a3406314642e0a0cede4d862d48ea457148201453bc048443cb328d2fbd2c0f25dd68246ef4a57c2a60f832ba7eba2073a45149468d55ae140c667f44f35b1f4603c61427ed4a36db95f1bfde305b0a7cffbfe708517ccb1b2f3153cb6c197a0c58ad9dc9006f08e8507f0d15b2d7800fd17d9a129a6b9327753bd764499471d7ab5d06c5679c09232e3b9adea650e062753a73e00864593cd7b2db9c3ce52974319f4a698029855f0118ad9b99eb4dc9a4462fb356ec191e1f66d5004f168bc8d9e1e188fc8d2ddf0e8ea25a923285d012c15ffc26f20104f3a6f2bd59d23afd9e902de911ecf56137b158452db16ffc220ebc913a9642fb1a62287946c19644c98a0d8bcbd9917aae3f7d8148f5ee02e4248d870eaa47c69cb160d9c55f9e5771461978999790f50adc2dd7e1cfc9e04e032b6bde0bbfbdfc0b11a3c545037637859b633076ab1e7f9407871e9dc86c7f67a3f1e1ab7e6acd97d2575361231a148bc554939cf550808ee595fcc962a9b47e55410ef3241dc0bd793377ccffe7fac583279830b0346805ae634c305d26b6d1f25bfcd908709180d5cf392c8e9a1798c3507903b56e15a902a2c09d90c818779a856806b8a5c99c64e00ca6f18cdf2b032316906c067b5c324366424556052a029652535823c03d23e4e4471c86fcd1bb595cb558d44dd59513813692656f5ee347194774a78f490dd25881572297494783bcf62bc46f91db7d520012ca6f6dfd2439dd8344596ba45ab2f322dcb449ac380025f4103802d165a1178fa7076e9335529d3482faeacf55ac66468ea0604102bfe1bcae6c418083f9a2d71a940774d4ff8a702a5e49e662badd27fd73b1aee5d281795cb753c41a4198d26c3a29de825818dfc1830dbda3c20cee3f12d8ec4ae68a1e8516f278f7ee9840a439430b117d4745bc9ae749a2bf6b7660edcaf9dfa532b49e62505e052a43a98d59ffa015cd441ee49f69746fbb3aaae975b5409bf571ef0925d7b116b88cb5c20a7a3e9e8ea9b8e14253c07cd8d71af0b40bf06a335b77865f5a1bca34c4a992c170b2c4bdb5f12f872871d1f9aaaac405b9c863709fa775c03ce5a7bda64afb69c6fc9d6fd6154a2b45922b93ddc8ecab50f5fab166bd91d2fcc5368d37c4359e1346d22a0229e8b72abf2b38dc142d373457a52148ff6b345230fc071b62699d5df17b9802ddd61095bac7458fe6a0a4a2923fae91051e69dbcb2f58a9df0c210138bc8f1948160e182d897adfef44b253a17819e90dea9db0e59f728cec3c423e44cb55a6481b9127963d3cf20e772ad4a73c872865c451a16f683f87d7f5c790bcda8b239d823534a8b1674e5dbe191f5334b1c3959e7385fe71381ee45e67caf64e8e1a8eb0c79e0b29e3b874af888da1d7cf3fdd20e7f0b60cac35fed0c2a667ec433ccc0806342a54f6c35fc02a85c12bc7732407d98aca316e8972", 0x1000, 0x1}, {&(0x7f0000001280)="447112251df14dae3229276cea132edcdd90a65e89f96dd933ce16aee6484e098a7dcef6e1a97daabe", 0x29, 0xe7}, {&(0x7f00000012c0)="bd4c3d4061cb42848c1b7b71ec96ef8eb54125887d5e3efab2e4e0ae72c3c74c68ec120dc7575a560ea2c6cc1d32d55f890e357d227a869355ce3939e2842a8018e07dcfa00987f6b24689f4164d6c07d56d059205b81b8c9d844004ac1254b55c12ab8fdf130ca37e9ea9a7c7f752c30e3804294567", 0x76, 0x3dc}, {&(0x7f0000001340)="f94fea4939ba98e7f8a1ab4c918418ac3128c17d275df7365414ddd9ada0a4a33f96f9c1245cadf3939f1f1e14fc7708309376772396eb9bbb850c1ff8da2e59643a55989f50b9bfcb9a8e70e558c3704ef9866c1872e7787b3b35a25a326948c43cd57e03713ca3660a79bce6bd1fe366da61d087c9e7da06181aa3c590e9d8eac0166e263c8030b91e2a587ab25d9f2f1e36eb0c8f473d557feb10930bb0cb9be9e22ec75aa8c1af815085880ef392fa17a6ea904405a7049c7832dac4a85b4f44c3b5e7b024a79ca1633b0b6de2aad70bb6abb537", 0xd6, 0x3f}, {&(0x7f0000001440)="5a05690cae6822b8e98fffd80689e9654a17d9f01fc6b4b14511de5838cc16bc9ed9675cd32573a64cdf3206a8a51b8f6d0383c9ca397e6dec8970ba95597b22c991d09b4d6963a0357b206a8421c931cc397cd2ebcf9b86829bd0264883d94d197799d2fd4f185e7c58961030bc7a0f620216a2a3f65d69d912ff4c510684cb496fbf31a55077dab26fc9ca4f310afa0853ed208ef2b3f9ca453dd9b89a07a510", 0xa1, 0x7f}, {&(0x7f0000001500)="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", 0x1000, 0x7fff}, {&(0x7f0000002500)="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", 0x1000, 0x7}], 0x4000, &(0x7f0000003600)={[{@shortname_win95='shortname=win95'}, {@rodir='rodir'}, {@fat=@umask={'umask', 0x3d, 0xfffffffffffffff8}}], [{@fowner_eq={'fowner', 0x3d, r1}}]}) [ 843.548339] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000003f00, [ 843.599090] binder: 12997:12998 unknown command 1041236065 [ 843.613990] binder: 12997:12998 ioctl c0306201 20a20000 returned -22 [ 843.666679] FAT-fs (loop5): Unrecognized mount option "fowner=00000000000000000000" or missing value 03:42:54 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x700, 0x0, 0x0}) 03:42:54 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x7) 03:42:54 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, 0x0) 03:42:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4000}}]}) 03:42:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 843.757310] binder: 12997:13008 unknown command 1041236065 03:42:54 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x0, 0x0) [ 843.839127] binder: 13011:13018 ioctl c0306201 20a20000 returned -14 [ 843.856340] binder: 12997:13008 ioctl c0306201 20a20000 returned -22 03:42:54 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x2086b000) 03:42:54 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x1200, 0x0, 0x0}) 03:42:54 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:54 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8004000200000, 0x0) ftruncate(r0, 0x9) open_by_handle_at(r0, &(0x7f0000000100)={0xda, 0x9, "66be721392e9e0d0ae4ff2a85cbbcd5fc66dae00464f4f7e7c9e5d26b11a9df7114928f6223ee93dd962f510b3176a52f2cdbe79f1bd630e337d7d41cb19b643b8f0b0d5c3bd165fee0f7eda9ffd7ce5e58858490d39b9e51b2522bb0610c58e4b9bfbf70135b2582f2d52b36ad509475bba329d5c55ae7c9e3e81acd7e3e1e2157a007237ddb2d97ca16e00aa223ec7a793543d52e1da53cf58a5aeb12ef6245aad86a1bd2684c156cd29ccf019ee2e9055d941fcb3f422172a691cfcf93b3e568d2f7bd2e4f07ab9930cbc6054cd42bef1"}, 0x201) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000200)={0x3, 0x1, 0x4, 0x8, 0x2}, 0xc) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L+', 0x7fff}, 0x28, 0x1) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000000c0)={0x10062, 0x0, 0x1}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x5) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x3, 0x1, 0x0, 0x2}) 03:42:54 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x900000000000000, 0x0, 0x0, 0x0) [ 844.040692] binder: 13031:13032 ioctl c0306201 20a20000 returned -14 [ 844.086814] binder: 13034:13035 ioctl c0306201 20a20000 returned -14 03:42:54 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x2000, 0x0, 0x0}) [ 844.134563] binder: 13034:13040 unknown command 0 [ 844.139501] binder: 13034:13040 ioctl c0306201 20a20000 returned -22 03:42:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:54 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) pread64(r0, &(0x7f00000000c0)=""/25, 0x19, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:54 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x0, 0x0) [ 844.284550] binder: 13045:13049 ioctl c0306201 20a20000 returned -14 [ 844.318342] binder: 13051:13052 ioctl c0306201 20a20000 returned -14 03:42:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4800}}]}) 03:42:55 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_dellink={0x60, 0x11, 0xf0b, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x1000, 0x80}, [@IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0xe, 0x1000}, @IFLA_PORT_SELF={0x2c, 0x19, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "648ef82323fa5e33609d2df3ae4bbeb4"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b7883bf9e1095c4a064982deb62c9a15"}]}, @IFLA_EVENT={0x8, 0x2c, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 03:42:55 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb00000000000000, 0x0, 0x0, 0x0) 03:42:55 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0xb47, 0x3, 0xc1, &(0x7f00003e4000/0x4000)=nil, 0x6}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:42:55 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x3f00, 0x0, 0x0}) 03:42:55 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc00000000000000, 0x0, 0x0, 0x0) [ 844.559912] binder: 13072:13073 ioctl c0306201 20a20000 returned -14 [ 844.579051] binder: 13071:13075 ioctl c0306201 20a20000 returned -14 03:42:55 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10}, 0x18) [ 844.655082] binder: 13071:13075 unknown command 0 03:42:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:55 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4800, 0x0, 0x0}) [ 844.684715] binder: 13071:13075 ioctl c0306201 20a20000 returned -22 03:42:55 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe00000000000000, 0x0, 0x0, 0x0) 03:42:55 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) getdents(r0, &(0x7f0000001c80)=""/130, 0x82) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@local, @in6=@local}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001700)=0xe8) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)) fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001800)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000001900)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001940), &(0x7f0000001980)=0xc) getpgid(0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000180)=0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001d40)={'ip6gretap0\x00', {0x2, 0x4e24, @multicast2}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000019c0)={{{@in6=@ipv4, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001ac0)=0xe8) getegid() write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:42:55 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x188, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x50, &(0x7f0000000080), &(0x7f0000000180)=[0x0, 0x18, 0x48, 0x48, 0x48, 0x30, 0x38, 0x20, 0x48, 0x30]}}, @clear_death={0x400c630f, 0x0, 0x2}, @decrefs, @release={0x40046306, 0x4}, @reply={0x40406301, {0x1, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x20, 0x38, &(0x7f00000000c0)=[@fda={0x66646185, 0x7, 0x3, 0xa}], &(0x7f0000000200)=[0x18, 0x68, 0x38, 0x0, 0x0, 0x68, 0x40]}}, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)=[@fda={0x66646185, 0x2, 0x2, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x1, 0x3, 0x25}], &(0x7f0000000300)=[0x78, 0x78, 0x30]}}, @free_buffer={0x40086303, r1}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x48, &(0x7f0000000380)=[@fda={0x66646185, 0x5, 0x2, 0x16}], &(0x7f00000003c0)=[0x78, 0x78, 0x20, 0x0, 0x48, 0x78, 0x48, 0x38, 0x20]}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f00000004c0)=[@flat={0x77682a85, 0x10a, r2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000480), 0x1, 0x2, 0x3a}], &(0x7f0000000500)=[0x30, 0x20]}}], 0x1000, 0x0, &(0x7f0000000700)="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"}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x48) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, r3, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fadvise64(r3, 0x0, 0x7, 0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x30, r4, 0xffffffffffffffff) flock(r4, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000000c0), 0x383, 0x0, 0x0}) [ 844.842736] binder: 13091:13094 ioctl c0306201 20a20000 returned -14 03:42:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4c00}}]}) 03:42:55 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4c00, 0x0, 0x0}) 03:42:55 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x0, 0x0) 03:42:55 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fcntl$getown(r0, 0x9) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$TCSBRKP(r0, 0x5425, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={r1, &(0x7f0000000080)=""/86}) r2 = semget(0x1, 0x7, 0x20) semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000140)=0x100) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 03:42:55 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002280)='/dev/vcs\x00', 0x20100, 0x0) r1 = accept4$x25(0xffffffffffffff9c, &(0x7f00000022c0)={0x9, @remote}, &(0x7f0000002300)=0x12, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0, 0x130) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000002480)={r1, r2, 0x1, 0xe2, &(0x7f0000002380)="c46a942edb74745d9f399f3528fb27db6568522f6575757ae95960798648f38540b3076dbfeea5388f6812aba22a40b2f5ee23b76f84ff6e56352bb00c0e8a82ecb5d0afff8a9323dde08f54f4a89b7c41d4f9be2063e622e60a70e8f73d713bb0135aba932222c59cbc922f2cf1dfc55d1473d1ae6cbf0a7534932cb33ee4a9e81ad60a2b48be35fd55473d01aeb75fd4ea3076d7338555ac6615b261e7f30cd328b9973300e7e22ab1864d91aad6bd33c858ccce3ff7d6a4ae71434f70a27847b41ecb78fd695374dc807336b0f14b2648946e17cef460440b95836114acd58e31", 0x6, 0x0, 0x0, 0x6, 0x401, 0x3, 0x8001, 'syz0\x00'}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x90, &(0x7f0000000140)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x6, @remote, 0x80000000}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x9}, @in6={0xa, 0x4e24, 0x3, @rand_addr="363ae154a83ceacadce76a66a4c93d6f", 0x35f}, @in6={0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000002c0)=0x84) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404055d611000620000000000b80ec516dc9c5d9fff45f00000000000000002f5cf4d35e016c42ee3e69576d0f1aa7e69d387781eb7395551f626d453ec939cf3c09834f1f1109bab25e4bb197fe5ce26f4274b3f7e415beacaf74ee462ef0bed34c8362ad567441"], 0x0, 0x0, 0x0}) 03:42:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:55 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x1, @tick=0x123, {}, {0x800000000000}}], 0xffffffffffffff1a) 03:42:55 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, 0x0) [ 845.253520] binder: 13120:13121 got transaction to invalid handle [ 845.262448] binder: 13123:13125 ioctl c0306201 20a20000 returned -14 [ 845.344444] binder: 13120:13121 transaction failed 29201/-22, size 7583760791585775315-4079670442838682967 line 2896 03:42:56 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6000, 0x0, 0x0}) 03:42:56 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000000c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000480)="9aff46a0e60d4c794dfbaa8a34bc2eeae7", 0x11) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) sendto$ax25(r0, &(0x7f0000000180)="0290600a57d49cd47f51f4f54387125b97c2c5bdffd85dd36af0a89951523f3975a1ad7b5fc20eff1e25c92d030e0fe664c5de95b21923301521d309cf3f22364403212bdd13b04f536b24509190fc63c8def77f1cf08dd33627c86018345fabbe7f1189e596be129f3d9f7710c4b0d110d22c4e26ebc91a15ee", 0x7a, 0x0, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = semget$private(0x0, 0x3, 0x40) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r4 = getegid() getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) getgroups(0x1, &(0x7f0000000000)=[0x0]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000400)={{0x80, r3, r4, r5, r6, 0x48, 0x8}, 0x0, 0x9, 0x7}) 03:42:56 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, 0x0) [ 845.436904] binder: undelivered TRANSACTION_ERROR: 29201 [ 845.437549] binder: 13120:13121 got transaction to invalid handle [ 845.498479] binder: 13120:13121 transaction failed 29201/-22, size 7583760791585775315-4079670442838682967 line 2896 03:42:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 845.550049] binder: undelivered TRANSACTION_ERROR: 29201 [ 845.569089] binder: 13145:13147 ioctl c0306201 20a20000 returned -14 [ 845.733014] EXT4-fs: 5 callbacks suppressed [ 845.733029] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000004c00, [ 845.811572] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000004c00, 03:42:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6000}}]}) 03:42:56 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x0, 0x8000, 0x40, 0x100000000, 0x3, 0x6, 0x6, 0x6, 0x40, 0x1d0, 0xfffffffffffff800, 0x8, 0x38, 0x2, 0x7, 0x5b, 0xffffffffffffff20}, [{0x60000007, 0x5, 0x1, 0x3, 0x9, 0x8, 0xfffffffffffffff7, 0x1}], "2e1cafb31416658efc5787313050bafbae2918de02d98363ce7c00b2513b74d8c38a6ce59c90bb8f75cbe26a452e2622c56919830034ac87048612e99be6bf5dfb4839a4f30973bf20d927889abe143c778d4f63129df08dcedff62f4ab1fc3208fa4ecbb2ac853794306cfb8bfaeaffced975e7fe90b2c33e12070c9312073efa603d1594714199d67de3a3b6c419e6af", [[], [], [], [], [], [], [], [], []]}, 0xa09) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) write$cgroup_pid(r0, &(0x7f0000000180)=r1, 0x12) write$cgroup_pid(r0, &(0x7f0000000080)=r1, 0xed3a6a8e701696d5) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/71, 0xfefc, 0x7fff, &(0x7f0000000140)) write$P9_RVERSION(r2, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7b, 0x8, '9P2000.u'}, 0x15) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x5, r3, 0x16, r2}, 0x10) 03:42:56 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2300000000000000, 0x0, 0x0, 0x0) 03:42:56 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="0063400f4611013b"], 0x0, 0x0, 0x0}) 03:42:56 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6800, 0x0, 0x0}) 03:42:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 845.940330] binder: 13167:13169 unknown command 0 [ 845.947640] QAT: Invalid ioctl [ 845.958445] binder: 13167:13169 ioctl c0306201 20a20000 returned -22 [ 845.976043] binder: 13166:13173 ioctl c0306201 20a20000 returned -14 03:42:56 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) [ 846.000168] QAT: Invalid ioctl [ 846.035670] binder: 13167:13178 unknown command 0 [ 846.044770] binder: 13167:13178 ioctl c0306201 20a20000 returned -22 03:42:56 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400402, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) flistxattr(r0, &(0x7f0000000080)=""/12, 0xc) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 03:42:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x0, 0x40000000000031, r0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x8080, 0x108) 03:42:56 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6c00, 0x0, 0x0}) 03:42:56 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x0, 0x0) [ 846.231565] binder: 13189:13193 transaction failed 29189/-22, size 0-0 line 2896 03:42:56 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) r1 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001280)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000001380)=0xe8) stat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001480)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000014c0)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000015c0)=0xe8) r6 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002980)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000002a80)=0xe8) r8 = getegid() r9 = getpgrp(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002ac0)={0x0, 0x0}, &(0x7f0000002b00)=0xc) getgroups(0x8, &(0x7f0000002b40)=[0xee01, 0x0, 0xee01, 0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002b80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003fc0)={{{@in6=@ipv4={[], [], @dev}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000002cc0)=0x1d3) stat(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002e00)={0x0, r0, 0x0, 0x2, &(0x7f0000002dc0)='\\\x00'}, 0x30) fstat(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = gettid() stat(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003300)={0x0, 0x0}, &(0x7f0000003340)=0xc) lstat(&(0x7f0000003380)='./file0\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003440)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003480)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003580)=0xe8) stat(&(0x7f00000035c0)='./file0\x00', &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000036c0)={0xffffffffffffffff, r0, 0x0, 0xc, &(0x7f0000003680)='em1$@system\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003700)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000003800)=0xe8) fstat(r0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = getpgid(0xffffffffffffffff) r31 = geteuid() lstat(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = getpgrp(0x0) stat(&(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r35 = getgid() sendmmsg$unix(r0, &(0x7f0000003d00)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)="2c646e426888cd34a31cb14847d5921c3c696d9e925fb5eaf211408e96cdcf5a35ef0295ee5d1646924dcca2a90ce279e7a37195f8dc91291eb45358ae6bbacb9e1694c065b597c61f5ae56e9ded85ccbad484ec7b7fe1b2", 0x58}, {&(0x7f0000000180)="1497d59ae64dce98ad1092ef118e748a8ef8d9aa38f68acfdba75ae6cf5e29dc897600917e3795f28bf0d0264c4ed8b2209ca2e943ba0ff5823db0de22d46280af61310f423355ff608600726d2e005058788a19854582345b99390c05da197620f1fedd49702550cf5891af2beb3e786106b08ab318f0a4afdb5650182a48d72b5fbd25a5736b0aa6c63b946e5049a32ca018d9bdcbc5fa2569d91b6605159ff50056ea9fe01a1fcf35ba2727d80f404af9de167760264495a7cca4de7b5d1e88", 0xc1}, {&(0x7f0000000280)="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", 0x1000}], 0x3, &(0x7f0000001600)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5}], 0x68, 0x40004}, {&(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002900)=[{&(0x7f0000001700)="e7cb39d85357eadb6f27c4e12ad19bf8a4f2c86c78207c3934843849ae291453a5104b3bdb", 0x25}, {&(0x7f0000001740)="20742bf651f2f1e74e2abd7d80cea128f2f4f4e8c0a7f74dc69d3bfb74084bd98ca2b50eaad1f858bff61d4cc1e46c755faa4c69242c7239fde29c9866cec2dfee6ce3e96bab7ab58699ba5e9943acf724c3c4b13bc64df30c9cc2ddfe29fd12c9348584d125e5fa4d5eaa6f7a74154bf75e59f8b0bf269e0662ccbc86d45a6aa9063f22744c0b3c170a3da29e397be4557bccaf229b71de63b9304177fbce564a4240bbe2ed276641654031baf07690cacbe89ee7e51028c3d07b32d60e8773", 0xc0}, {&(0x7f0000001800)="0666721a43e0af2158cfb2b9aa08a14ad2ea09ef4785d268a44a10a7238a1d0a3fa34298c097fc1e77edd1d2b6dc984014112cc76c367ef661f4823350f88c58c7c177e0", 0x44}, {&(0x7f0000001880)="d92f26307ef221f61cfa1140037bbf31fff989d012445f8e1612399d58582166d077ac680bf0258ff28e201dba7a1da2d715bfdfab0c11f2862524f38ea75bd24cb3a5254805ee14d55b06504458", 0x4e}, {&(0x7f0000001900)="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", 0x1000}], 0x5, &(0x7f00000030c0)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}], 0xe8, 0x8000}, {&(0x7f00000031c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003240)="ee375c55452310978fdd3761c6d35a0da2aac27b2931e172ea2aa54cc7c0335e37aa08fd942a158a29496bc5759ab05ad68141b5f0108aa737f8f85fa662a453745b88af4e07541baf9ec8efc1dd5449267be6b54c94f8aa0fa98924d797", 0x5e}], 0x1, &(0x7f00000038c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}], 0xd8, 0x20040000}, {&(0x7f00000039c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003a40)="ff8b04924bace21727509cf0f84a6d59295ae4ef3d8be5a467eef7fff62f7a548afb3bb06ff28cb873e4ec46775072ca8ca1d80bb94d3170bef132f9bd2d269cb0f05b1c078c4fc636b68cece277228e68c13330ff54d0ac", 0x58}], 0x1, &(0x7f0000003e00)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002306c930b7a2ed8c6d1235bd18e000000a82ebdcddabe5623f706", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r32, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r33, @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4}], 0x4, 0x8000) [ 846.277160] binder: 13191:13194 ioctl c0306201 20a20000 returned -14 [ 846.297347] binder: 13189:13197 unknown command 0 [ 846.323702] binder: 13189:13197 ioctl c0306201 20a20000 returned -22 [ 846.354264] binder: undelivered TRANSACTION_ERROR: 29189 [ 846.394923] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000006000, [ 846.445237] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000006000, 03:42:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6800}}]}) 03:42:57 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4244000000000000, 0x0, 0x0, 0x0) 03:42:57 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7400, 0x0, 0x0}) 03:42:57 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2000, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) accept(r1, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80) 03:42:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:57 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e7e8ce4207f2a9f1f3bbe26f517f3cf5c70f2f3ca0b5ead0026e50c02da1ca4b47dfe1f2f67dc8fe2aeedcf5e95a1fca59d9d206ae81613e9efbe87f3f5076"], 0x0, 0x0, 0x0}) [ 846.587720] binder: 13217:13224 ioctl c0306201 20a20000 returned -14 [ 846.599282] binder: 13216:13220 unknown command 1120856295 03:42:57 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), &(0x7f00000001c0)=0xffffffffffffffc3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0xfffffffffffffff7, 0x400}, 'port0\x00', 0x40, 0x4000d, 0xdef, 0x1, 0x94, 0x4, 0xfab2, 0x0, 0x3, 0x10000}) [ 846.638047] binder: 13216:13220 ioctl c0306201 20a20000 returned -22 03:42:57 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4d50000000000000, 0x0, 0x0, 0x0) 03:42:57 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7a00, 0x0, 0x0}) 03:42:57 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1000, 0x200100) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_netfilter(r1, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x12ac, 0x6, 0xb, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@generic="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", @generic="418a9f1aeae4b244a7d15449ebc850820c379ce3d890e3ea32b54aab", @generic="7c39b1c5fe79e54a8c036e0020685f2e1388587ca1f506abe6b5ae407e6a6aaaeaa682b893adace1a134a9ede47b1791ac30c68cf29db2c7b38cc38eb93eba52265a25de46ed11aaa1efa33cd51cb7685ccc0096e318a98191835ff1812a42c1fea390db3bcabd6299e73050c22cffe0bcd94202293ec7d4eb6d1fb243087cce26984f2297c98b17708a1c2436792d6d4fce69da537292b615a8031397cdfbe9db3f8503785927bf374189c73932c33b3822b58b08faba15217cdb0b", @nested={0x28, 0x37, [@generic="9c55", @typed={0xc, 0x46, @u64=0x7}, @typed={0x14, 0x8b, @str='/dev/binder#\x00'}]}, @nested={0xf8, 0x93, [@typed={0x48, 0x5, @binary="5f58dfb0821c9a8f200a777f350e6a5698b4baed87270634973e634301ba2eddfd860dd40b42f5cf2f2dd893076bcfcd366b2ac0df5bbe0da1a4880f1e1222ff7e"}, @generic="d28d5130b65aede364e6bf9b2dc7e6dafbc64ffc40df067bd9f4", @generic="82eeb6ab3c550af781ac6813275b4fa7581383c8fef029967105ff1a38ef167b4d4abb4abf2d748f2a2db2ed97727e7e85c16eec1dd5f1691e3d8a68fb767e56c347e4692678b35dfaa38d181b20b20ff3e615b52aeeccdf814c1e07cae6cb269f18fffd2b866908ec857c0c2d76de869bfe50d0bb2b4b7141fc33b78adbffcb5d7523ead82302c81223ce7110b758"]}, @typed={0x20, 0x46, @binary="cf54eae9395075577f7fd78a10ef48533004f9fe7e6079e27f64e7"}, @nested={0x80, 0x1a, [@typed={0x8, 0x32, @u32=0x9}, @generic="6f72c962dc4a5f23f5f981f29e37b49c2f854762e498fbc5ff8943ebb8bde512af38fd06b2c3e87b6f1c7919813867257f48bf507f17fa9b24a62d96b8bc18b841d86e2f4e1c865db7cca5b5390a0a05e5b41d62fa8e0ec1c347685b", @typed={0x8, 0x8f, @u32=0x1}, @typed={0x8, 0x44, @fd=r0}, @typed={0x8, 0x48, @pid=r2}]}]}, 0x12ac}, 0x1, 0x0, 0x0, 0x841}, 0x40) 03:42:57 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5354000000000000, 0x0, 0x0, 0x0) 03:42:57 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x5, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 846.787465] binder: 13237:13239 ioctl c0306201 20a20000 returned -14 [ 846.872090] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000006800, [ 846.886464] binder: 13243:13250 ioctl c0306201 20a20000 returned -14 [ 846.952989] binder: 13243:13256 ioctl c0306201 20a20000 returned -14 [ 847.041026] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000006800, 03:42:57 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x1000000, 0x0, 0x0}) 03:42:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6c00}}]}) 03:42:57 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5e02000000000000, 0x0, 0x0, 0x0) 03:42:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:57 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x101400, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x8001, @rand_addr="30178ee60ce0928dd31e1018c0da932f", 0x56560ae1}}, 0x2fe6, 0x64e, 0x1, 0x6, 0x3}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) 03:42:57 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000001, 0x268100) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000005366163ce80800"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x1f}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={r2, 0x5f, "f1b4e9c474e1f53bd8042dc557224246cccdaa2a5d2151b9bfd3af4b14a5f8a8c977923df6a926a8b528b5c6684961203d2e690028ac9633cd7ac5c0b1fd821306e07fd474ea2f159af0e3a4900b59397151710f254679bde660373c8789a4"}, &(0x7f0000000300)=0x67) ioctl(r0, 0x73d, &(0x7f0000000140)="99084711bdd32b8076e59001f839759a5e5a6fa4716393d8a2af9652a5b1af228ee4c25d6f2a63bb33ce5e9b73be8e69fec99ba0ff3839684021a389c55e54e0b6fadb5315ae76a66d8c30cd7a5c5e92736a970aab9924f8b79d33e99e57043a0581c22bdac5d41bff1a726fb66bb65cf0919fac9cd5e2119e1170b48253ce244eed1d82550aff5b90369adaae63dca2375482fa5ff09ff31ebfdafe7b62ec2c0b0d4a4da19c6f490b5257b4") fcntl$setlease(r0, 0x400, 0x2) [ 847.187443] binder: 13268:13272 got transaction to invalid handle [ 847.196856] binder: 13268:13272 transaction failed 29201/-22, size 0-0 line 2896 [ 847.216889] binder: 13268:13272 ioctl 73d 20000140 returned -22 03:42:57 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:42:57 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000000000000, 0x0, 0x0, 0x0) [ 847.232198] binder: 13270:13274 ioctl c0306201 20a20000 returned -14 [ 847.264619] binder: 13268:13277 got transaction to invalid handle [ 847.308040] binder: 13268:13277 transaction failed 29201/-22, size 0-0 line 2896 [ 847.330447] binder: 13268:13272 ioctl 73d 20000140 returned -22 03:42:57 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x2000000, 0x0, 0x0}) 03:42:57 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0) 03:42:58 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) clock_gettime(0x200003, &(0x7f0000000280)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7f}, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0x10001, 0x6}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000080)="4810608fb9192f0d8d10b888bd2d257102fa708e", &(0x7f0000000240)=""/19}, 0x18) fsetxattr$security_smack_transmute(r0, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x3) write$sndseq(r0, &(0x7f00000000c0)=[{0x8, 0x7, 0x6, 0x7fff, @tick=0x7ff, {0xffffffffffffffff, 0x81}, {0x200000000000000, 0xffff}, @queue={0x8, {0xffffffffffff1f5e, 0x7}}}, {0x9, 0x100000000, 0x2, 0x7, @time={r1, r2+10000000}, {0x7, 0xcd96}, {0x7fff, 0x5}, @raw32={[0x6, 0xeb, 0x8001]}}, {0x6852c531, 0x8, 0x45d, 0x107e579f, @tick=0xffffffffffffff01, {0x9, 0x10001}, {0x80, 0xffffffffffff4b7c}, @control={0x68c, 0x2, 0x2}}, {0xffffffffffffffa1, 0x7, 0x101, 0x100000001, @tick=0x7, {0x0, 0xa4f}, {0x7f, 0x800}, @result={0x1, 0x9}}], 0x3be) clock_gettime(0x0, &(0x7f0000000300)) [ 847.378668] binder: undelivered TRANSACTION_ERROR: 29201 [ 847.387873] binder: undelivered TRANSACTION_ERROR: 29201 03:42:58 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:42:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 847.506361] binder: 13288:13289 ioctl c0306201 20a20000 returned -14 [ 847.577187] binder: 13296:13298 unknown command 0 [ 847.603873] binder: 13296:13298 ioctl c0306201 20a20000 returned -22 [ 847.679724] binder: 13296:13307 ioctl c0306201 20a20000 returned -14 [ 847.720077] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000006c00, 03:42:58 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7400}}]}) 03:42:58 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x400, 0x244, 0x4, 0x10000, @time={0x0, 0x989680}, {0xffffffffdcf328f0, 0x100000000}, {0x4, 0x8}, @result={0x9, 0x8}}], 0x30) 03:42:58 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000000000000, 0x0, 0x0, 0x0) 03:42:58 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x3000000, 0x0, 0x0}) 03:42:58 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="00634040072f96b8"], 0x0, 0x0, 0x0}) [ 847.809847] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000006c00, [ 847.911752] binder: 13319:13323 unknown command 0 [ 847.915762] binder: 13318:13322 ioctl c0306201 20a20000 returned -14 [ 847.920523] binder: 13319:13323 ioctl c0306201 20a20000 returned -22 03:42:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:58 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)="1a797267b8d248cdc86c6f3ac822be44d1473e796c2f3cebc7a4201f2091e7c8448ffeea3e3a72745a775b0cda519bd5de4ee4e126a6832b92b7bc29945121a06e618cca023b5344ca3f28201befea7b09f3b849799f9cf29d536cbead7dd180432ff23814f769f25768937d9466abffc744df9d6f433684219e280f62da8c5360665faf41ee0d3905874875476eb23067eb3a289ca41b43f44a3ac02751d9fabe3bd10a8899e28401016fb13c148eb8") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8100, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:42:58 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0) [ 847.968546] binder: 13319:13327 unknown command 0 03:42:58 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4000000, 0x0, 0x0}) [ 848.036616] binder: 13319:13327 ioctl c0306201 20a20000 returned -22 03:42:58 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x81, 0x2) write$P9_RWRITE(r0, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x5}, 0xb) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000e35a5987024c2ac5e401949174662bcd2c8244bbcd078ee8e2456a3009e886ad52336cbb1a95eef985512c726d250042c239220c6cb5"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x8000000003fe, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000040)) [ 848.111804] binder: 13335:13340 ioctl c0306201 20a20000 returned -14 03:42:58 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb200000000000000, 0x0, 0x0, 0x0) 03:42:58 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x5000000, 0x0, 0x0}) [ 848.191531] binder: 13343:13344 transaction failed 29189/-22, size -4941518260940642295-8227040255164716314 line 2896 [ 848.263309] binder: 13343:13348 ioctl 400c6615 20000080 returned -22 [ 848.301991] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000007400, [ 848.315071] binder: 13350:13352 ioctl c0306201 20a20000 returned -14 [ 848.340827] binder: 13343:13348 transaction failed 29189/-22, size -4941518260940642295-8227040255164716314 line 2896 [ 848.362557] binder: 13343:13344 ioctl 400c6615 20000080 returned -22 [ 848.371395] binder: undelivered TRANSACTION_ERROR: 29189 [ 848.377615] binder: undelivered TRANSACTION_ERROR: 29189 [ 848.435699] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000007400, 03:42:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7a00}}]}) 03:42:59 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0xb6, 0x0, 0x301f, 0xa80e, 0x7ff, 0x4, 0x0, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:42:59 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xebffffff00000000, 0x0, 0x0, 0x0) 03:42:59 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6000000, 0x0, 0x0}) 03:42:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:59 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5a34, 0x140) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0xe9, 0x4) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000a28c10e5f540f39a2fb4b11c9539d9e0a44bb40000005bc175d60b00f960fcb3df1b868b59d8a34cb8"], 0x0, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x80000) [ 848.561086] binder: 13366:13368 ioctl c0306201 20a20000 returned -14 [ 848.586090] binder: 13370:13371 got transaction to invalid handle 03:42:59 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf4ffffff00000000, 0x0, 0x0, 0x0) [ 848.622960] binder: 13370:13371 transaction failed 29201/-22, size -6640459194772496461-47180 line 2896 03:42:59 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bond_slave_1\x00') 03:42:59 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7000000, 0x0, 0x0}) [ 848.715586] binder: 13370:13382 got transaction to invalid handle 03:42:59 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0) [ 848.768807] binder: 13370:13382 transaction failed 29201/-22, size -6640459194772496461-47180 line 2896 [ 848.797099] binder: undelivered TRANSACTION_ERROR: 29201 03:42:59 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xa0102, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1ff, 0xa9d}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x78) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x60000000000, 0x0, &(0x7f0000000400), 0x4000, &(0x7f00000006c0)={[{@quota='quota'}, {@gqnoenforce='gqnoenforce'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@euid_lt={'euid<', r4}}]}) write$sndseq(r0, &(0x7f0000000200)=[{0x853, 0x2, 0x100000001, 0x3, @tick=0x8, {0x3, 0x800}, {0x7, 0x1}, @quote={{0x8, 0x4}, 0xffffffffffffff7f}}, {0x7, 0x3, 0x46b7ac37, 0xc03, @time, {0x1, 0xfffffffffffffff7}, {0xfffffffffffffff8, 0x4}, @raw32={[0x80000000, 0x3, 0x5]}}, {0x9, 0x8001, 0x9, 0x9, @tick=0xffffffffffffffff, {0x3000000000000, 0x4}, {0x6, 0x4}, @result={0x7, 0x80}}, {0x5, 0x2, 0x0, 0x7, @time={0x77359400}, {0xffffffffffff1e7c, 0x401}, {0x800, 0xfffffffffffffffb}, @raw8={"e83beadf7361ced97a7e0ca0"}}, {0xff, 0x7fffffff, 0x8, 0x0, @time={r1, r2+10000000}, {0x8, 0x2}, {0x5324, 0x854}, @addr={0x8, 0x6}}, {0x6, 0x8001, 0x9, 0x40, @time={0x77359400}, {0x81, 0xffffffffffffffeb}, {0x99, 0x9}, @addr={0x7fffffff, 0x8b0}}, {0x8, 0x200000000, 0x3f, 0x100000000, @time={0x77359400}, {0x2, 0x403c9a}, {0xffff, 0x1}, @queue={0x8e, {0x101, 0xcc}}}, {0x3fb8ffec, 0x2, 0x9, 0x1, @tick=0x19, {0x3, 0x6}, {0x3, 0x3}, @raw8={"0707d95ac4d565c8001b91b5"}}, {0xff, 0x3, 0x5, 0x0, @tick=0x4, {0x6, 0x4}, {0x2, 0x5}, @note={0xfffffffffffffffd, 0x6, 0x3f, 0x3498, 0xfffffffffffffffe}}, {0xba06, 0x0, 0x3, 0x3, @tick=0x3, {0x7, 0x2}, {0x9, 0x5}, @time=@time={0x0, 0x1c9c380}}], 0x1e0) [ 848.814830] binder: undelivered TRANSACTION_ERROR: 29201 [ 848.829596] binder: 13388:13391 ioctl c0306201 20a20000 returned -14 03:42:59 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0) [ 849.037434] XFS (loop3): unknown mount option [fowner=00000000000000000000]. [ 849.104857] XFS (loop3): unknown mount option [fowner=00000000000000000000]. 03:42:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xc000}}]}) 03:42:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:42:59 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x2000000, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x80, 0x101000) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x1, 0x100000000, 0x100010000}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x100000001) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a4a85f043c0139d96e6c670a07d2d2cec5470607619dc0212e763803c5cf4970"], 0x0, 0x0, 0x0}) 03:42:59 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x12000000, 0x0, 0x0}) 03:42:59 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0) 03:42:59 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1020400, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {0x0, 0x4}, {0xfffffffffffffffe}}], 0x30) 03:42:59 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff0f000000000000, 0x0, 0x0, 0x0) [ 849.302117] binder: 13421:13425 ioctl 541a 20000040 returned -22 [ 849.325446] binder: 13418:13424 ioctl c0306201 20a20000 returned -14 [ 849.359048] binder: 13421:13425 unknown command 73377956 03:42:59 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f00000000c0), 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x4f1, 0x6f, 0x4, 0x2}, {0x8, 0x5, 0xc6}, {0x101, 0x1ff, 0xff, 0xa000000000}, {0xfffffffffffffffe, 0x8, 0x81, 0x12}, {0x7, 0x0, 0xe8, 0x2}]}) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xd1, 0x100) write$sndseq(r0, &(0x7f0000000000), 0xdb) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) [ 849.388581] binder: 13421:13425 ioctl c0306201 20a20000 returned -22 03:43:00 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x20000000, 0x0, 0x0}) 03:43:00 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0) 03:43:00 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x41) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="0063423ff2000008"], 0x0, 0x0, 0x0}) 03:43:00 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/14) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 849.620489] binder: 13442:13446 ioctl c0306201 20a20000 returned -14 [ 849.631208] binder: 13443:13447 unknown command 0 [ 849.651465] binder: 13443:13447 ioctl c0306201 20a20000 returned -22 [ 849.715138] binder: 13443:13454 ioctl c0306201 20a20000 returned -14 03:43:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xedc0}}]}) 03:43:00 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 03:43:00 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:00 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x3f000000, 0x0, 0x0}) 03:43:00 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0xc0340) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x0, 0x5}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x383401, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000140)={0x2, 0x9e0a038, 0x7, 0x5, 0x4e5, 0x3}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:00 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) bind$vsock_dgram(r0, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x8100000000, 0x15, 0x7, 0x8001, "3765cd4bb2ac9fffdbb3186eaa4707620e5a91345cc1e1c36c5eb94483eb9064"}) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0xbf, 0x1, 'client1\x00', 0xffffffff80000005, "374ef7de9c13b113", "4639a18634723790160e9abfa52bce63ef441e0e44ac5d1f0a6ea28359772676", 0x9, 0x401}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x5, 0x11, 0x8, "dfd07ed69d9cd92dc4b9b66498292c6290b9c662dd21759621318223581d51fb89f9ccbf36e1d3d08ed588ecdabad10f2e22700f9609bf777ab6b41594302047", "0169be08fec85fec660c16fe04801e165d2957e61d534650ce9be2deff555d0ad2e4ab82be906ce00c9df88a6113f804d823cc7ba18a1cbf8d36c2ab28efbada", "5981151630df2fda36df2d89b255427b415779d3a01f0a8ae42b771cb2fc1daf", [0x7f, 0x6]}) [ 849.960719] binder: 13470:13472 ioctl c0306201 20a20000 returned -14 [ 849.980996] binder: 13467:13475 ioctl c0306201 20a20000 returned -14 03:43:00 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffff0700, 0x0, 0x0, 0x0) [ 850.005792] binder: 13470:13479 ioctl 40042408 ffffffffffffffff returned -22 [ 850.049826] binder: 13470:13472 ioctl c0306201 20a20000 returned -14 03:43:00 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x7, 0x5}], 0x30) 03:43:00 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:00 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x48000000, 0x0, 0x0}) 03:43:00 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0) 03:43:00 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 850.237940] binder: 13490:13493 ioctl c0306201 20a20000 returned -14 03:43:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40000}}]}) 03:43:01 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6b, 0x2002) fcntl$setpipe(r0, 0x407, 0x2) 03:43:01 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/138) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 03:43:01 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4c000000, 0x0, 0x0}) 03:43:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 850.577618] binder: 13513:13516 ioctl c0306201 20a20000 returned -14 03:43:01 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0) [ 850.624190] binder: 13515:13519 ioctl c0306201 20a20000 returned -14 03:43:01 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x60000000, 0x0, 0x0}) 03:43:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x8, @time}], 0x37b) [ 850.732330] binder: 13515:13525 ioctl c0306201 20a20000 returned -14 03:43:01 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=""/33, &(0x7f00000002c0)=[{0x7b7, 0x6f, 0x3, &(0x7f0000000040)=""/111}, {0x3, 0x93, 0x9, &(0x7f0000000140)=""/147}, {0xfff, 0x9c, 0x1, &(0x7f0000000200)=""/156}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 850.914456] binder: 13534:13535 ioctl c0306201 20a20000 returned -14 03:43:01 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x68000000, 0x0, 0x0}) [ 850.981580] binder: 13537:13538 ioctl c0306201 20a20000 returned -14 [ 850.983531] hfs: can't find a HFS filesystem on dev loop1 [ 851.028640] binder: 13537:13545 ioctl c0306201 20a20000 returned -14 [ 851.096342] binder: 13547:13550 ioctl c0306201 20a20000 returned -14 [ 851.246857] EXT4-fs: 6 callbacks suppressed [ 851.246872] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000040000, 03:43:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x80000}}]}) 03:43:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:01 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @data}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="592d4b5bc862744f2612e8ed935b54f0f3be0c728ff1c814afaae9fea9922396dcb71da4136bbec9c1c4a83112052cc5e894f075a486b9dd4a84"], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x113000, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000100)=0x800001, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000040)={0x5, 0x0, {0x3, 0x0, 0x7fff, 0x3, 0x7dab}}) 03:43:01 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0) 03:43:01 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6c000000, 0x0, 0x0}) 03:43:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/248) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 851.308758] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000040000, [ 851.389191] Unknown ioctl -2138548647 [ 851.398525] binder: 13569:13570 ioctl c0306201 20a20000 returned -14 [ 851.407355] binder: 13563:13568 unknown command 1531653465 03:43:02 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x74000000, 0x0, 0x0}) [ 851.432228] binder: 13563:13568 ioctl c0306201 20a20000 returned -22 03:43:02 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x240000, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 851.478534] hfs: can't find a HFS filesystem on dev loop1 [ 851.489423] Unknown ioctl -2138548647 [ 851.495296] binder: 13563:13582 ioctl c0306201 20a20000 returned -14 [ 851.539471] binder: 13583:13584 ioctl c0306201 20a20000 returned -14 03:43:02 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3000008, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x30}, {r0, 0x20}, {r0, 0x44}, {r0, 0x52}], 0x4, &(0x7f00000000c0), &(0x7f0000000140)={0x3}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="0063684040000400"], 0x0, 0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x100000001, 0x3}) 03:43:02 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4, 0x0) 03:43:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:02 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7a000000, 0x0, 0x0}) [ 851.806995] binder: 13597:13602 ioctl c0306201 20a20000 returned -14 [ 851.819418] hfs: can't find a HFS filesystem on dev loop1 [ 851.843941] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000080000, [ 851.968888] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000080000, 03:43:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x100000}}]}) 03:43:02 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$FICLONE(r0, 0x40049409, r0) 03:43:02 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0x7fff) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:02 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x100000000000000, 0x0, 0x0}) 03:43:02 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5, 0x0) 03:43:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 852.101685] binder: 13619:13624 ioctl c0306201 20a20000 returned -14 03:43:02 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) [ 852.143658] hfs: can't find a HFS filesystem on dev loop1 [ 852.146067] binder: 13622:13629 ioctl c0306201 20a20000 returned -14 03:43:02 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f00008c9000/0x4000)=nil, 0x4000, 0x3, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB='\x00{@@\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) signalfd(r0, &(0x7f0000000000)={0x200}, 0x8) 03:43:02 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6, 0x0) 03:43:02 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x200000000000000, 0x0, 0x0}) 03:43:02 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time={r0, r1+30000000}, {0x8000000000000000, 0x400000000}}], 0x30) [ 852.387739] hfs: can't find a HFS filesystem on dev loop1 [ 852.405696] binder: 13647:13649 ioctl c0306201 20a20000 returned -14 03:43:03 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7, 0x0) [ 852.443231] binder: 13653:13655 ioctl c0306201 20a20000 returned -14 [ 852.479808] binder: 13647:13649 ioctl c0306201 20a20000 returned -14 [ 852.604424] hfs: can't find a HFS filesystem on dev loop1 [ 852.617722] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000100000, [ 852.775065] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000100000, 03:43:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3ff7f8}}]}) 03:43:03 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x200, 0x1, 0x9, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x40}, &(0x7f0000000100)=0x8) 03:43:03 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000008dc727f60efc39d76525798fa048b2cc97df3219b58f06d8685920e1f8d8b8bf222305fdd686c2e0fed69a9e4987a59c24966598ab7d78322c5bd5fa9cb8cb143ce3d337649750252564934c072d0a38e9adfa6fbe71acf7ea2eedefc7644a81c0"], 0x0, 0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcs\x00', 0x82200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ef00389ec6024893b29850", @ANYRES16=r2, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 03:43:03 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x300000000000000, 0x0, 0x0}) 03:43:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:03 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8, 0x0) [ 852.881390] binder: 13683:13685 transaction failed 29189/-22, size -214726775077807880--7018060679122614570 line 2896 [ 852.914427] hfs: can't find a HFS filesystem on dev loop1 03:43:03 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f00000001c0)=[{0x5, 0x9, 0x80, 0x3, @time={0x77359400}, {0x0, 0x6}, {0x3, 0x6}, @addr={0x100000000, 0xc80a}}, {0x9, 0xfffffffffffffe00, 0x3, 0xc5d7, @time={0x77359400}, {0x400, 0x8541}, {0x3f, 0xff}, @addr={0x0, 0x8}}, {0x8, 0x5, 0xb79e, 0x6, @tick=0x6, {0x400, 0x8}, {0x8, 0x1}, @raw32={[0x7ba, 0x400, 0x8]}}, {0x7ed, 0x8001, 0x3, 0x1a, @time, {0x8, 0x401}, {0x8, 0x6}, @addr={0x0, 0x5}}, {0x800, 0xfffffffffffffff8, 0x1, 0x6e, @time, {0x10000, 0x1000}, {0x101, 0x8001}, @time=@tick=0x9}, {0x5, 0x70, 0x81, 0x6, @tick=0x7fff, {0x4}, {0x7, 0x1}, @addr={0x9, 0xff}}, {0x9400000000000000, 0x6, 0x9, 0x3f, @tick=0x9, {0xfffffffffffff800, 0x9}, {0x401, 0x9}, @queue={0x2, {0x55, 0x1}}}, {0x5, 0x5ff, 0x401, 0x9, @time, {0x7c0000000, 0x4f}, {0x6}, @connect={{0x5, 0x855102}, {0x4, 0x8000}}}], 0x180) creat(&(0x7f0000000000)='./file0\x00', 0x42) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0x12, &(0x7f0000000080)=',&#+:md5sumvmnet0\x00', 0xffffffffffffffff}, 0x30) capget(&(0x7f0000000100)={0x19980330, r1}, &(0x7f0000000140)={0x8, 0x6, 0x5, 0x1000, 0x5, 0x59d}) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000600)=[&(0x7f0000000380)=',&#+:md5sumvmnet0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='em0\x00', &(0x7f0000000440)='/dev/sequencer2\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='selinuxnodeveth0vboxnet1posix_acl_access\xbaself\x00', &(0x7f0000000500)=',]+\x1f\x00', &(0x7f0000000540)='nodev)\'!vboxnet0ppp1%:nodev[keyringselfprocvboxnet0\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='wlan1.\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='proc\x00', &(0x7f00000006c0)='cpusettrustedvmnet1##@\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)=',&#+:md5sumvmnet0\x00', &(0x7f0000000780)='/dev/sequencer2\x00']) [ 852.953035] binder: 13683:13694 transaction failed 29189/-22, size -214726775077807880--7018060679122614570 line 2896 [ 852.972236] binder: 13688:13690 ioctl c0306201 20a20000 returned -14 [ 853.012019] binder: undelivered TRANSACTION_ERROR: 29189 [ 853.018166] binder: undelivered TRANSACTION_ERROR: 29189 03:43:03 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9, 0x0) 03:43:03 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 03:43:03 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x400000000000000, 0x0, 0x0}) 03:43:03 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x90c, &(0x7f0000000080)=0x4) [ 853.183512] binder: 13710:13714 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 853.216686] hfs: can't find a HFS filesystem on dev loop1 03:43:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 853.299559] binder: 13718:13720 ioctl c0306201 20a20000 returned -14 [ 853.413173] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x00000000003ff7f8, 03:43:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3ff800}}]}) 03:43:04 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa, 0x0) 03:43:04 executing program 5: mmap(&(0x7f00004f8000/0x3000)=nil, 0x3000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x1) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000140)="b0c0d9194358720ef5fd66d2a5e2ec033dac5c220bcd3dbf325cfb3d7d90225c45139b41448942920a7cd1236774f6f5dac123abfabf9f7917cf7379c6f6cc955e3774993cfbda472005f1e092d30b06722d1a28ed9042dff501752f215e7953b5b3799f82e6663365ff992af76db9f630c4a37013ae74ab9b8be02f5d8372bce890e23b84a284aa14c0ba13d70d45f2d91dbf8bbbb644a4b640c6bd40fba73ae12556a4ff60c37d933b28527b452b06d9ff3085c2b1ba3820f3467d007d46912aebe8e8108b671e1ff316b72784902aba3666ed6b99ba26d9c6f8fea35d81b0f19cd6853cd1814aab601398f39446", 0xef}, {&(0x7f0000000040)="1413af5cba3217d61af0f05abe24aae3f617a6120d5b722a0167dc5649fcae", 0x1f}, {&(0x7f0000000240)="00bec85a72ff6304f9d43733bc2464ae9ffbdf8029517e023fb8d8f3474cdac5cbf9354f68645e8c59e9375052d3c963a71332ab73fa0a6ef5f0d5f981af7e27d68ac487c5509b86d0316d7d915a015e595aaec433373cee328ba5b24b8a40609e4c631bdc935811e714e254a04c1e195ec02e65ebfb9c48f51a784f10a0d3055d0ca16696f77c075bfe809c7263c0c828fd87afb44db6a8be6085ffde850a843e1d89df4287cefebb4b508a16fe0ab1ef3562981ee0925843c57ba88676a8262239df37fadece6278bbfd6169baf2451312f5f0120a0a2c8a90754141f805d9bc001e7699e3b03ce914c2ea86b250abb24fde1b60", 0xf5}, {&(0x7f0000000340)="1c58e0e4ebc92b8ac93e384d2217ecc686d6013363a4ead5fa6ef7e852f44162eb1e91c24bec3497c2d9d571eb01be4d6e643e02c41ca1d340cb6728eae19b0493994d4631b83fb51c7e0bffa05e6dbc5c86e086b95ac9c2804899ba842c234168bc35ab29ed7c0d2c9619e0212f74b97f54e8ebc6e7cb84e9e1de6e97adb6bf85de0abd16c3f719d8fe3946355f75633ec1afd686843a10003853c26c87d70eda6604f2c98c8bae596add7cb12a7cd80737b33ab357248d6aa451eededbb1c56b7441814eb96f1e5f63e1fd24fe0fef", 0xd0}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000080)="481c5533f43be18d73a64dff818351ae648997b385e791f711e6e2417c3ba4b7f5407bd8b82ff43e19f80fe2f3878a70c3657375532f28f789cd58fb9807eb456397d96265089d8e8b1ba9f98e7a4ac87147f86de171172309bd9474b3df899e0cbc3f50a6cb85c1a06548119bb10670c61d22a49301f95f", 0x78}, {&(0x7f0000001440)="5b6649926234886b3f11034949c479710250f908b78c9bcdea2d0a3e9d1fbab54bff44f749f7cff0b66e5d8bbe24a51d6bac9b30e1f8dfcda07e0e34252ac692575399c02408cc3d64e39adb389954a1406fa1ddcf7ff8960d78270ff5e18805aea1f3b20cc8a3d4129e517af39c0e833efee01447b5f8109be4b734df3658fb27afebd49301823de2fdfee43bbb8c75898b1fdfc89a8659bb71f159c128e6e9d459363a7baded93885782fc170806d87a7aeb831f26523498a4a790c9713e32426ad88b7a8c7ddcc699aab4b341c1c3cee9a68e9d1db3385b68596caec4e4cfd7c969aaa14f3bd05ae97ff8b464f59812c9e5af67", 0xf5}, {&(0x7f0000001540)="2d16dda5edddc1323c01c8d95ea7b4a13a4c9cea7b25ca6fd5b2988cda048ef9c877139be466ceace9b33c81da1e3aa314a610ae02bb856f8d159fa0d3c219454770f01583683fd35ee15208780164e0e8175888c22e0ca811f79bfe364a9a05a1f92fe0fd0ba6f1a6b9fac51f1f567a636b871bf4f1d4b39ddb0f93b9701ac4d533", 0x82}, {&(0x7f0000001600)="3d570a164544783a01d4d4da8b88c23115293b76d3e8133c6bdb2eb009ac5c4b3864483224aaca89be1f44d94587a82b74325949add7d01e733a276d51374388356e189d6489e4cb8f5d1e3b891639e458a9996e27d0660892a5f26cc1e6f5cdb5c968391c3f1ed7ba72e62d9749e6df5412e4505b1b180e2ae7ef55417a76", 0x7f}, {&(0x7f0000001680)="37144d6d9da5a8ef323b5d0a1cbfe6eca325c48b389cc31b29f569759474487ec508dd9edef072def15ed115a226ff10c83a64fd05f22216a88586be34b8c050fa226c9e3dac", 0x46}], 0xa) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000db7000/0x3000)=nil, 0x3000, 0x0, 0x32, r0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000017c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000001800)={0x5, "8961d13332bf7c1e245bc2b6b27526701ace7553e9bfaeedf7a7818f0f930c1c", 0x1200, 0x306, 0x7fffffff, 0x4, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:04 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x500000000000000, 0x0, 0x0}) 03:43:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000000)) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 853.511900] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x00000000003ff7f8, 03:43:04 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x600000000000000, 0x0, 0x0}) [ 853.614786] hfs: can't find a HFS filesystem on dev loop1 [ 853.625978] binder: 13746:13747 ioctl c0306201 20a20000 returned -14 [ 853.642028] binder: 13744:13750 transaction failed 29189/-22, size 0-0 line 2896 03:43:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 853.669455] binder: undelivered TRANSACTION_ERROR: 29189 03:43:04 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @ioapic={0x14000, 0x1000, 0x7, 0xfffffffffffff801, 0x0, [{0x80000001, 0x9, 0xfff, [], 0x100000000}, {0x0, 0x9, 0x2, [], 0x7}, {0x4, 0x3, 0x101, [], 0xffffffffffffffe0}, {0x25, 0x0, 0x0, [], 0xffffffffffffff6e}, {0x1, 0x8, 0x0, [], 0x10000}, {0x8, 0x100, 0x3, [], 0x7ff}, {0x8, 0x7, 0x2d9, [], 0x1}, {0x8, 0x3c, 0x100000001, [], 0x80}, {0x3, 0x1000, 0x4, [], 0x10001}, {0x6, 0x7fffffff, 0x5, [], 0xffffffffffff4487}, {0x6, 0xc800000000000000, 0x7, [], 0x9}, {0xfffffffffffffffd, 0x80000000, 0x9, [], 0x80000001}, {0x2, 0x7d0, 0xffffffffffffff9f, [], 0x1ff}, {0x5, 0x80, 0x20, [], 0x9}, {0x40, 0x7f, 0x6, [], 0x6}, {0x0, 0x2, 0xfff, [], 0xffffffff}, {0x5, 0x5, 0x4}, {0x5, 0x9, 0x9, [], 0x200}, {0x4, 0xa3, 0x20, [], 0x7}, {0x400, 0x3, 0x100, [], 0x3}, {0x7f, 0xfeb7, 0x0, [], 0x4a88}, {0x9, 0x4, 0x3ff, [], 0x33}, {0x7ff, 0xfff, 0x6d0e, [], 0x8}, {0xffffffff, 0x101, 0x1ff}]}}) 03:43:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) 03:43:04 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb, 0x0) [ 853.835114] binder: 13763:13766 ioctl c0306201 20a20000 returned -14 03:43:04 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x700000000000000, 0x0, 0x0}) 03:43:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x8000010081, 0x5, 0x6, 0x3, @tick, {0xfffffffffffffffd}}], 0xfffffd26) [ 853.902834] hfs: can't find a HFS filesystem on dev loop1 [ 853.912043] binder: 13769:13777 ioctl c0306201 20a20000 returned -14 [ 853.938874] binder: 13769:13777 ioctl 8208ae63 20000000 returned -22 [ 853.973155] binder: 13769:13782 ioctl c0306201 20a20000 returned -14 [ 853.980619] binder: 13780:13781 ioctl c0306201 20a20000 returned -14 [ 854.150613] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x00000000003ff800, [ 854.225907] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x00000000003ff800, 03:43:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xf83f00}}]}) 03:43:04 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:04 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x1200000000000000, 0x0, 0x0}) 03:43:04 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc, 0x0) 03:43:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0xddb6, 0x4) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) fcntl$setsig(r0, 0xa, 0x2b) [ 854.349828] binder: 13798:13801 ioctl c0306201 20a20000 returned -14 [ 854.383577] hfs: can't find a HFS filesystem on dev loop1 [ 854.391031] binder: 13806:13812 ioctl c0306201 20a20000 returned -14 03:43:05 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x204000) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000080)=0xffff, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 854.403285] binder: 13798:13815 unknown command 0 [ 854.422479] binder: 13798:13815 ioctl c0306201 20a20000 returned -22 03:43:05 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x2000000000000000, 0x0, 0x0}) 03:43:05 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe, 0x0) 03:43:05 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d89000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1f, 0x80000) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000001780)={0x0, &(0x7f0000001740)}) sendmsg$nfc_llcp(r1, &(0x7f0000001480)={&(0x7f0000000140)={0x27, 0x1, 0x0, 0x7, 0x74, 0x80000000, "f19efa9a81a0976d81bd68b98c290f307b607576e2aa2a4001e3359fa9686ecde5f27a7ee0a874c442f3817b811a0ccd8d2b3372f4d8ce01d8f9d842b158c6", 0x31}, 0x60, &(0x7f0000001380)=[{&(0x7f00000000c0)="474b9185741b66764883019fb3d3370cbda83180752a3fa82afb7b57f9662b04408ae3512ea19a457dd3a25040bc367a3989c95b43", 0x35}, {&(0x7f00000001c0)="184ab56d7b357e02705fc6df9983e536687d9e613d56a93c", 0x18}, {&(0x7f0000000200)="96d6c4179c886c9334e802954151c1bb0bf459725922b4180ecc9bb40e04d59ca30a11cdb03810de24940c4ea5ff71cf6da2d81032fe508d9c8650deedf9379ca5c1c0ee25894bae124d8a11119ce685973e39255ae8686b31c1ebbe5f42f510c4c0df2def03ddf343008f4e833eb36c", 0x70}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="0421aa0afb753a2a4e5f2a11a2b94ab0c17b9839ca7cb2f19eb882043a9c2d524b4ef6b48634ffbfa40a9da682c4ce444ceaf5b42aa85383088a34466cd2039ddc7d24ec8403aa2abb4afed82ee27557edb172506650b5f7fefc0fb31b9025557afaf7da3bc5f54fc7a0f54f25aae6c4d8e3ba96e23c056f57b3e098f2b5b323ebea2f1fd3806617a0cbe18ca813884161223ab4f7b2c344333e705fc8c501333c997902a7c3672f0696f276d3eba50455f33efc2f827966b48b8f23cf528540214417c56ae61763dfcbb8de734cbf8086", 0xd1}], 0x5, &(0x7f0000001400)={0x70, 0x113, 0x4, "d87ec4f5603273c34dcef181621e4631b0efa9f5d8c877f68cfd53784b3850880bea33c72e03e25adc22cd10ff2e6f9cc2268bd5e0f0abce7af6fa5c2cda407082ee80b21f7c798d9568bca10c729b181753206bd17d1500409353aab03a82"}, 0x70, 0x4080}, 0x40) openat$cuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/cuse\x00', 0x2, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000001700)={&(0x7f00000014c0)={0x27, 0x0, 0x2, 0x2, 0x7, 0x3, "259711d7b145efdba699d08ea0192fca6ac774344c0ce5a1cfea8aec643f4eba6afd0c857c089152ad42e5c0edf2393700b53709c86017b4d980170d0a077e", 0x1}, 0x60, &(0x7f0000001640)=[{&(0x7f0000001540)="a9f617ba92b8018193a0612565e7ffddd20ecefb4a18a30c42a092ffa986bd794706202566e1c68d5525a33ae245f1b5205b860b3915bc5406cff73113ba450392b0d481b13060bf317a74ac3e63a48f25c2aec385ea932d721bc81eafbb00c3d5e3d8fc5fee9353cf419fabfa2c2afd849c348b1039dc5c8f6268cecab57952acadc99b82a76d68b690474c9b80d32adb3817dcd502b98d9de21019e48e234c4e06bc74d9147ab997d057726547d455f9699ad5cdad4b1a75a960438700ed652010659b0f7300a75ce01cfe30e48fd0412311a8a46310d69a77d22989098e53ee", 0xe1}], 0x1, &(0x7f0000001680)={0x80, 0x10b, 0x1, "ba03a314929ab8ecef49eb1c465d5f435a0e8e15460d5cd1a7731eff6710774bf3a8b83b1dae656e6d7251f33747c34c0f9407d25d39256fc72ca54b20cbe2f322e33bb42c0b4b5463d6418f525658e0d35c479978888a8da12b8c9040abd34d2552b675860b17880d41"}, 0x80}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063396758419642ac0650ff2508d93890223e0000000100000000000000"], 0x0, 0x0, 0x0}) [ 854.604648] binder: 13827:13830 ioctl c0306201 20a20000 returned -14 03:43:05 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x400340) bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:05 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0063408059bcc9afe432cf2268293f95687c3afb9fbb3d12a54d2b00680a322ccc0b30d6195666269a4188cabdc89439d839c6278454a8eede7f91bec27873293129b1d09dd47346cf26207519fd858c648c79991bb76f94addd5ea6838f095c7be8b642b3bbc06f7e34606b9dc6a9410ec3e7d072dc207def33fb1c4338"], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x48000) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000040)={0x2000000000000000, 0x5000, 0x100, 0x5, 0x14}) [ 854.646955] hfs: can't find a HFS filesystem on dev loop1 [ 854.760909] binder: 13839:13840 unknown command -2143264000 [ 854.799210] binder: 13839:13840 ioctl c0306201 20a20000 returned -22 03:43:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000000}}]}) 03:43:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:05 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x3f00000000000000, 0x0, 0x0}) 03:43:05 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10, 0x0) 03:43:05 executing program 3: r0 = geteuid() syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x6, &(0x7f0000001440)=[{&(0x7f0000000140)="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", 0x1000, 0xeed}, {&(0x7f0000001140)="8209380374fc4b5a130e5108e652d431f9b67a63e28d44c0bc6dc5692f6ceb539cbb551da62a1461bd8dfbb4b3ebdbf6ad54a30f8aa43fbd29d49415ca12ef928431774f81045b7ce97a4639fff21cdec4ac12cd863753467ea3ef61ffc107e78a2fae6f", 0x64, 0x4}, {&(0x7f00000011c0)="cb301832345ea54a1cc3a428c2d5d796123bfc19f542d07c8afb329f97ba2c42f80895975899dc66b6baadddeb4b75bb4543d3726568fa36821e02ad8f096afe017065e4e5586cee127f23043869fc0c56b08e1a2471a33bb1a16dd0f1cb0b5ec6030095cb97cbe6d5267aad1c392befa4f10ca1423faef6441b36fa3c1260876875efd894b0d4094a4d45b493a147e62a741c9ffb8be7ae1d157692e81f89657c80ff5704d9938df7b046c4cb67", 0xae, 0x6}, {&(0x7f0000001280)="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", 0xfb, 0x4}, {&(0x7f0000001380)="74943e255de7c6044c511841f581c009468d277238971ac96da29a5bbe55a61408d4b87a3e0ac3957d435083ea2aa34cec8629fcb95142531c45a704080aef55a2a97ce3be9167e881d408baa14602209df18d365c56", 0x56, 0x4d}, {&(0x7f0000001400)="1b8034c11d6b1ae8c329243dc37f7a2b8d480e98750bd9407ac6a42b3b65f9", 0x1f, 0x3}], 0x400, &(0x7f0000001880)=ANY=[@ANYBLOB="64697361626c655f6578745f6973655f747970653d6d6d617369672c6575690200bca32943ab4b5da4aa7438f82863e4deaca75628cdd0082e7541865461c5d0aa2c9e9b3ab0a882aa404aaefa7cbbb1a0df353aa5e00c69499dd3bf12132ad8b97ae72c58bad925005f5d2b9a0eec429612b6a93e5df884342fb74d62c322ae4bf7a132e29172f06f2aaf5e561a52aabff25fef7f7512526a02fdbbe4d9dba8d09d44ff08e19e7d4d53f041af26ee7c9c6ea74cb6069fc761cf5c3be22be5a9e0722a7a11a8fe2aeed81c94139e06b378dde71114422d8baec83a9a52a4f10ada8648b3228298997a8479d494a5da984ec2e1233002fd753c427b5f69c6dd835ba1b8f7f1c611132bd67afa6984179a9693d42a7c94ade83637fa0d4ce0ee1b8fec10fc17a2cf8fef65b31f54ce1ebee310b99d2b689324413f137910bb702f8fdb41f025", @ANYRESDEC=r0, @ANYBLOB="2e646f6e73652c008a45c34944f6d44b950aaeef073e31c9719b156380120ec101a6f6b007e122358f38661665a364e34ee5c2ecf77fe3474c0aa50816d0505138c347fdb13738ea178383f8c3e8ec2a6e3f306213f7ad92803812118c784d28762b3bcdb5b09ccd770fe554894195d2fcf4534c7bcee9d0b7bc06ffa6535b9fd73384f6c861d1"]) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) write$P9_RLINK(r1, &(0x7f0000001500)={0x7, 0x47, 0x2}, 0x7) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:05 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x82011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 855.059509] binder: 13858:13863 ioctl c0306201 20a20000 returned -14 [ 855.101136] binder: 13862:13869 ioctl c0306201 20a20000 returned -14 [ 855.107103] hfs: can't find a HFS filesystem on dev loop1 [ 855.120083] binder: 13862:13876 ioctl c0306201 20a20000 returned -14 [ 855.121242] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:43:05 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000180)={"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"}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400c00000081d644349261f3c71696d9f50c0072fb6cce009e7311977c4767ac0a5232811a45c2d7e26e543d48c37ea319db5905f2401be024c454c5d764dfe73aefaddbc20f3cbc46fa52f5a1396fc456496ab345588cadd800ac4026c81e4365263060a2888915025ac0e99602d0d3da9a7ac3569f7c917de997128a821c686a9f1caf746710f317864bb66b82acdc666cf849aed43df9adddb27c326dc6b8ba2e05edce7880d3d6f85e127e23c3247b0255367d7a7b4fc7b9feaf6928ba510e0000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:43:05 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4800000000000000, 0x0, 0x0}) [ 855.174709] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 855.209494] F2FS-fs (loop3): Unable to read 2th superblock 03:43:05 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x23, 0x0) [ 855.256870] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:43:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 855.296337] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 855.296862] binder: 13881:13882 got transaction to invalid handle [ 855.342912] F2FS-fs (loop3): Unable to read 2th superblock [ 855.346728] binder: 13883:13885 ioctl c0306201 20a20000 returned -14 [ 855.394566] binder: 13881:13882 transaction failed 29201/-22, size -2100997099091840430-1847459649347736686 line 2896 03:43:06 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x4c00000000000000, 0x0, 0x0}) 03:43:06 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r3, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 855.516431] binder: 13881:13899 got transaction to invalid handle [ 855.534575] binder: 13881:13899 transaction failed 29201/-22, size -2100997099091840430-1847459649347736686 line 2896 [ 855.577823] binder: undelivered TRANSACTION_ERROR: 29201 [ 855.583581] binder: undelivered TRANSACTION_ERROR: 29201 [ 855.616735] binder: 13902:13905 ioctl c0306201 20a20000 returned -14 03:43:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2000000}}]}) 03:43:06 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 03:43:06 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x80100) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040), 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="b8b7a5b05d544c18"], 0x0, 0x0, 0x0}) 03:43:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a40)={'veth0_to_be\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000800)=[{&(0x7f0000000340)="687250979553ea8d787d419524ba960014777fd0d5fd1e7ed7ea50aad1bfbb782a730e10ec81fc9c9f018e8797b8a085d182f0316efeedddbda18187eb43960beec0a6a4556c881dec1daef1dd63ad2078bbe43b2dd5792a6f34d1fd2e5d4717abf0e0ca9d2735ddeebe58fa661b5d1914613bf181f37656b8e1474f0bf91c0f92a9ccc73ec8ac948193325c8f268e3339175f54772acb14a3348809fa846ac3055c039c8fd1c70fd74beade3bd06a648107841b05c01fa6e56b96d233cfbe3068ffaad898353a086d4af88e1316401d1a34665a97b5be11de25185f06e2277d66033a26e5de056b305a09afbdae313f"}, {&(0x7f0000000440)="130a3fc8666b2feee7b4f5c8d16c920d108297b92f430291d3c11731980fbc406f567964a32ba3e6d5b965faa9792533f00064d8606efdd9ddfe8ab631d072d99857d090ac63077c1eb19a1ed36af6131e132e03bcaef42bc74b34878cdf3956b0524573c74eb58e308fb61441c19ce98b31dddc5b4da4c40a6345c2eb7c8e3ec68c891eb4c1350b639f6f312e6a659afe397fa4ae8fa2f8cbd303bd05fcbd170cf7a1dba44214146a6fa0b20781618e8a9045e07cb070"}, {&(0x7f0000000500)="4f0dac58d858f8efdc4d95f8a703a6e53b77bdbf20deb8a0fc888078222326ec45a682245595a2e7e8b8c5582c5cd0ca560da8568030f4b6040c3c9448593bf96daca1561dea2b7bc93b40ad116cec41059b252565c0ff54c9131eba10d70fddaac474d7522069c44252e1a5397c2d90655dd15a8fbba76a873459b98d348bb9bc6c941dc287b554b39e42a20da75c38c3e1bc64cce282cdea1143079dd33baf88f965008c5e1bea3275eeabb22654933024f0ff2fd1ec043cd3ec45904bb2ea25b629b8406cbe88505cb4459e4f95ca1ebded5f8a9f2b488926bdb64fbda21c40f502b05b9608fc265c614f1029e4"}, {&(0x7f00000008c0)="acc5a2616d7880bec8c1f006f2ce"}, {&(0x7f0000000640)="c2659dbb5f09704fb0826ddaf53767b89c39a2f51f24b93b5451a169c243548c1ffa1160ab17534062bf72", 0x365}, {&(0x7f0000000a80)="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"}, {&(0x7f0000000680)="eec94f6855731ff16df7"}, {&(0x7f0000000740)="92fd74a1c86333463ea4ef14b159bb2c4093246574a95bf6ecb5422e1d6d4b462e2da51008c687a7e49c1380674224f30cf4fb350fec4d06b9d37ee8ea60cf081617b7088c068778eb39fce72ea44035cdaac7213174a14f01beb2e990aa820946f3a24b4d62393307344244a05c22c267a52942fdec666a2cea13b96f6c666ba341461418c5b1215c207a7e4e06b7fe6a17abe0f5c098c3ea82a8a0cf4018015ab802fde909cbeecd6e1411cf"}, {&(0x7f00000006c0)="df16cf2d8851b8221408d6e523c2669677c5b00f860acce821954cde2e9587aeb8fa91ee420f12abaacfc96dfb0ec77cf39f507f6f6b539a09d2db"}], 0x2, &(0x7f0000000080), 0xfffffffffffffe53}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x0, 0xc}, 0x43) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x920000, 0x0}, 0x2c) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x7, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x5, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0xc, 0xf, 0x0, 0x10}, @generic={0x0, 0x5a, 0x2, 0x2, 0x200}, @map={0x18, 0x7, 0x1, 0x0, r2}, @generic={0x0, 0xfffffffffffffffc, 0x9, 0x8}], &(0x7f0000000100)='syzkaller\x00', 0x401, 0x32, &(0x7f0000000140)=""/50, 0x41f00, 0x1, [], 0x0, 0x2}, 0x48) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:06 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6000000000000000, 0x0, 0x0}) 03:43:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 855.784470] binder: 13914:13916 unknown command 0 [ 855.799297] binder: 13918:13923 ioctl c0306201 20a20000 returned -14 [ 855.811469] binder: 13914:13916 ioctl c0306201 20a20000 returned -22 03:43:06 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb2, 0x0) [ 855.910509] binder: 13914:13933 unknown command 0 03:43:06 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6800000000000000, 0x0, 0x0}) 03:43:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) write$sndseq(r0, &(0x7f0000000080)=[{0x1007f, 0x1, 0x5, 0x3, @tick, {}, {0x0, 0x6}, @queue={0xffffffffffff0000, {0x800, 0x1}}}], 0xffffffffffffff9d) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x80000000, "6b1fdc7c0ee96b546474e30ec126f81e4d79090cb2f2f69e72f135bd6eeba2e7", 0x1, 0x1}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80, 0x0) [ 855.935823] binder: 13914:13933 ioctl c0306201 20a20000 returned -22 03:43:06 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0xffffffff00000000, 0xffffffff, 0x2, 0xd9}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x1007d, 0x5, 0x1, 0x0, @tick, {0x0, 0x6}}], 0x30) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0270c0df0595c25f7930bbe678e5e3b510ea00"], 0x13, 0x2) r1 = fcntl$getown(r0, 0x9) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) wait4(r1, 0x0, 0x1000000, 0x0) 03:43:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 856.073126] binder: 13943:13944 ioctl c0306201 20a20000 returned -14 03:43:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3000000}}]}) 03:43:06 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x6c00000000000000, 0x0, 0x0}) 03:43:06 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x25e, 0x0) [ 856.264855] binder: 13953:13962 ioctl 401c5820 20000000 returned -22 03:43:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa0000, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) [ 856.308449] binder: 13960:13964 ioctl c0306201 20a20000 returned -14 03:43:06 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7400000000000000, 0x0, 0x0}) [ 856.352201] binder: 13953:13962 ioctl c0306201 20a20000 returned -14 [ 856.380142] binder: 13953:13962 ioctl 401c5820 20000000 returned -22 [ 856.390026] hfs: can't find a HFS filesystem on dev loop1 03:43:07 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200, 0x0) tee(r0, r1, 0x4, 0x6) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {0x0, 0x8}}], 0x30) [ 856.487762] binder: 13980:13981 ioctl c0306201 20a20000 returned -14 [ 856.497579] EXT4-fs: 5 callbacks suppressed [ 856.497592] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000003000000, 03:43:07 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x7a00000000000000, 0x0, 0x0}) 03:43:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 856.595213] binder: 13989:13990 ioctl c0306201 20a20000 returned -14 03:43:07 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x300, 0x0) [ 856.716513] binder: 13992:13998 ioctl c0306201 20a20000 returned -14 03:43:07 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffff9c, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x5) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 856.807910] hfs: can't find a HFS filesystem on dev loop1 [ 856.847064] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000003000000, 03:43:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4000000}}]}) 03:43:07 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x2, 0x0}) 03:43:07 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x500, 0x0) [ 856.919540] binder: 14015:14019 ioctl c0306201 20a20000 returned -14 03:43:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) write$sndseq(r0, &(0x7f000086afd0)=[{0x80000001, 0x5, 0x80000001, 0x0, @tick, {}, {0x0, 0x1}}], 0x30) [ 856.966709] binder: 14015:14021 ioctl c0306201 20a20000 returned -14 [ 856.998698] binder: 14023:14024 ioctl c0306201 20a20000 returned -14 03:43:07 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={{0x0, 0x4000000000000000, 0x1, 0x8001, 0xf577, 0x38}, 0x4, 0xfffffffffffffffc, 0x8, 0x1, 0x1ffc0000000, "7e9c3ee9361003bde4d6683c71a00a97a0fd6d17e95cca3d8931140ff49d7c528f5853905df8313d815394b40bb01a80d1ae2489518c28800f220402c73ae821a2bd2cbfc0c3add45bf698c560b87f8cc281c49cad79acbb7ea33bdae5ee5ea9a2782cf498b5eba384260c01245469b1c1f5329f4a4dd750ab343f3b267d3291"}) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB='\x00c@@\b\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x8000) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x6) 03:43:07 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3, 0x0}) [ 857.149732] hfs: can't find a HFS filesystem on dev loop1 03:43:07 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x200, 0x5, 0x0, 0x4, @tick, {0xfffffffffffffffc}, {0x7, 0x3}, @addr={0x8, 0x4}}], 0x30) [ 857.192844] binder: 14040:14041 unknown command 0 03:43:07 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x600, 0x0) [ 857.252635] binder: 14040:14041 ioctl c0306201 20a20000 returned -22 03:43:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x800, 0x100000000, 0x7}) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 857.296290] binder: 14044:14050 ioctl c0306201 20a20000 returned -14 [ 857.331003] binder: 14040:14049 ioctl c0306201 20a20000 returned -14 03:43:07 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f000075c000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:08 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4, 0x0}) [ 857.411803] hfs: can't find a HFS filesystem on dev loop1 [ 857.513251] binder: 14062:14066 ioctl c0306201 20a20000 returned -14 [ 857.560333] binder: 14067:14070 ioctl c0306201 20a20000 returned -14 [ 857.628665] binder: 14067:14070 ioctl c0306201 20a20000 returned -14 [ 857.651967] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000004000000, [ 857.713035] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000004000000, 03:43:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5000000}}]}) 03:43:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:08 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x700, 0x0) 03:43:08 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x5, 0x0}) 03:43:08 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000140)=0x8000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {r2, r3+30000000}}, &(0x7f00000000c0)) 03:43:08 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x109000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r2, 0x102, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x21}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000c0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 857.842388] binder: 14084:14085 ioctl c0306201 20a20000 returned -14 [ 857.882516] binder: 14086:14092 ioctl c0306201 20a20000 returned -14 [ 857.896125] hfs: can't find a HFS filesystem on dev loop1 03:43:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r0, 0x2, 0x1, 0xfffffffffffffffb, &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3}, 0x20) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x1, 0x2) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000200)={{0x8, 0x7}, 0x4}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000000c0)={{0x6, 0x3, 0x5, 0x4, 'syz0\x00', 0x1ff}, 0x6, 0x400, 0x8001, 0x0, 0x2, 0xfffffffffffff000, 'syz1\x00', &(0x7f0000000080)=['\x00', '&.nodevsecurity\xb1.security/cpuset\x00'], 0x22, [], [0x3, 0x3, 0x6, 0x200]}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000400)) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000004c0)={0x0, 0x0, 0x2080, {0x3000, 0xd000, 0x2}, [], "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", "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"}) write$sndseq(r1, &(0x7f00000002c0)=[{0xbc5b, 0x3, 0x5, 0x6, @time={0x77359400}, {0x7, 0x9}, {0x3, 0x6fbf}, @quote={{0x20, 0x80000000}, 0x8, &(0x7f0000000000)={0x0, 0x6, 0x8000, 0x7e7, @tick=0x7, {0x200, 0xf885}, {0x1, 0xffffffffffffffc1}, @raw32={[0x1, 0x8, 0x6]}}}}, {0x5, 0x80000001, 0x8, 0x3, @time={0x77359400}, {0xfffffffffffffe00, 0x7}, {0x7e5, 0x4}, @time=@time={r2, r3+30000000}}], 0x60) 03:43:08 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6, 0x0}) 03:43:08 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x900, 0x0) 03:43:08 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) iopl(0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="a198000000000000"], 0x0, 0x0, 0x0}) [ 858.005043] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000005000000, 03:43:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 858.099735] binder: 14108:14109 ioctl c0306201 20a20000 returned -14 [ 858.120665] binder: 14112:14119 unknown command 0 [ 858.127108] binder: 14112:14119 ioctl c0306201 20a20000 returned -22 [ 858.129225] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000005000000, 03:43:08 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000001600)={@empty, 0x0}, &(0x7f0000001640)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000001680)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f00000017c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000018c0)={'bpq0\x00', 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000002480)=[{{&(0x7f0000001cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d40)=""/84, 0x54}, {&(0x7f0000001dc0)=""/57, 0x39}, {&(0x7f0000001e00)=""/4, 0x4}, {&(0x7f0000001e40)=""/153, 0x99}, {&(0x7f0000001f00)=""/78, 0x4e}, {&(0x7f0000001f80)=""/26, 0x1a}], 0x6, &(0x7f0000002040)=""/227, 0xe3}, 0x5ef}, {{&(0x7f0000002140)=@xdp, 0x80, &(0x7f0000002400)=[{&(0x7f00000021c0)=""/182, 0xb6}, {&(0x7f0000002280)=""/105, 0x69}, {&(0x7f0000002300)=""/88, 0x58}, {&(0x7f0000002380)=""/114, 0x72}], 0x4, &(0x7f0000002440)=""/15, 0xf}, 0x5}], 0x2, 0x20, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002640)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000003c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003cc0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f00000001c0)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000044c0)={{{@in=@dev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f00000045c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004600)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000004700)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000009640)={@local, @rand_addr, 0x0}, &(0x7f0000009680)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000096c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000009d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000009d00)={&(0x7f0000009700)={0x5cc, r2, 0xa01, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x164, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x128, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x71}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x66}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x18c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x40, 0x20, 0xe366, 0x5}, {0xc52, 0x4, 0x9, 0x25}, {0xffffffff, 0x9, 0x5, 0x7fffffff}, {0xc0c, 0x7, 0x8, 0x10001}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6f0}}, {0x8}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x80}, 0x80) write$binfmt_misc(r0, &(0x7f0000000140)={'syz0', "0db70f4e1e9644a89ef2a18e99d782086b612f8fac14dca431aa89eeb8cb511028392c50e60f2d674aa5212a80ead96f57ef4fb8949a1b50ce44d1effad9f8946403f5334d0a03124803"}, 0x4e) 03:43:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6000000}}]}) 03:43:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x0) [ 858.195687] hfs: can't find a HFS filesystem on dev loop1 03:43:08 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7, 0x0}) [ 858.299028] binder: 14128:14129 ioctl c0306201 20a20000 returned -14 [ 858.311515] binder: 14131:14133 ioctl c0306201 20a20000 returned -14 [ 858.322844] binder: 14131:14133 ioctl 8933 20002680 returned -22 03:43:08 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x12, 0x0}) [ 858.347980] binder: 14131:14133 ioctl c0306201 20a20000 returned -14 [ 858.360721] binder: 14131:14135 ioctl 8933 20002680 returned -22 [ 858.377149] binder: 14137:14139 ioctl c0306201 20a20000 returned -14 03:43:09 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x48, 0x0}) 03:43:09 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x5, 0x132, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x80000000, 0xa6, 0x8, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x2f, @empty, 0x7}}}, 0x84) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:09 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa00, 0x0) [ 858.560396] binder: 14148:14151 ioctl c0306201 20a20000 returned -14 03:43:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8082) r1 = getpid() setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000080)=0x80, 0x4) fcntl$setown(r0, 0x8, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:09 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4c, 0x0}) 03:43:09 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2bdf0ae7d8653453, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000cd72f3535d3479b50be84bfddc44b32af94529240a93c9421ae87d428b13088f4eb59ed2220c1fc61b4736de41b9fd3ac5ea5bb4159095f355d01c81f04a79ac68497baec91c87292593000000008f9cff0effad3efcf858eb598ca05b463970e6861a0b7ac3be"], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000022}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 858.722568] hfs: can't find a HFS filesystem on dev loop1 03:43:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000080)="0f0245dc06e4d50c86d1ee1ada7994c2167be7682346ea8502f2c068668bb7617b521f872482b884b5ecf4cb9b3c7f4ee1a1186dd01840a5d55dbc0a28d77aae66baaa3b0fb27867a0e8acd871dc829b022f5727e5422abab6f94016a8fa4fee2affc78937514bbe428dc964b17182bc11f19c3fd9b8c7bc2573c3a413d09f4ae43b69c8344f7170801faab6e07562006c43ee7ad61bf485f4e811066713317862fb2203c92819536c293f", 0xab) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 858.793596] binder: 14170:14172 ioctl c0306201 20a20000 returned -14 [ 858.817103] binder: 14171:14176 transaction failed 29189/-22, size -3269976930412653685--2434680363933561822 line 2896 [ 858.895114] binder: 14171:14180 transaction failed 29189/-22, size -3269976930412653685--2434680363933561822 line 2896 [ 858.927509] binder: undelivered TRANSACTION_ERROR: 29189 [ 858.933099] binder: undelivered TRANSACTION_ERROR: 29189 [ 858.958065] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000006000000, 03:43:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7000000}}]}) [ 859.103647] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000006000000, 03:43:09 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x60, 0x0}) 03:43:09 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb00, 0x0) 03:43:09 executing program 5: mmap(&(0x7f0000d41000/0x1000)=nil, 0x1000, 0x3000008, 0x2810, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'vxcan1\x00', 0x2}) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 859.217623] binder: 14196:14197 transaction failed 29189/-22, size 0-0 line 2896 [ 859.246739] binder: 14196:14207 unknown command 0 [ 859.253773] hfs: can't find a HFS filesystem on dev loop1 03:43:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) write$sndseq(r0, &(0x7f0000000080), 0x0) [ 859.265600] binder: 14200:14209 ioctl c0306201 20a20000 returned -14 [ 859.275916] binder: 14196:14207 ioctl c0306201 20a20000 returned -22 [ 859.289939] binder: undelivered TRANSACTION_ERROR: 29189 03:43:09 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4000404000000001dacc109cee7add7e188478bb9a149a409874af652465e73f732e911afbb10f4549e90468d8103fc10a086ba39f"], 0x0, 0x0, 0x0}) 03:43:09 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x68, 0x0}) 03:43:09 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc00, 0x0) 03:43:10 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in6=@ipv4={[], [], @broadcast}}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {0xffffffffffffff7f}}], 0x30) [ 859.482542] binder: 14222:14224 unknown command 1077936192 [ 859.490313] binder: 14219:14223 ioctl c0306201 20a20000 returned -14 [ 859.520823] hfs: can't find a HFS filesystem on dev loop1 03:43:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 859.537341] binder: 14222:14224 ioctl c0306201 20a20000 returned -22 [ 859.587249] binder: 14222:14232 unknown command 1077936192 [ 859.597859] binder: 14222:14232 ioctl c0306201 20a20000 returned -22 [ 859.707334] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000007000000, [ 859.769871] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000007000000, 03:43:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x9000000}}]}) 03:43:10 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6c, 0x0}) 03:43:10 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe00, 0x0) 03:43:10 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:10 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x5, 0x0, 0x100, 0xb1f8}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:10 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 859.921750] binder: 14252:14255 ioctl c0306201 20a20000 returned -14 [ 859.949727] hfs: can't find a HFS filesystem on dev loop1 03:43:10 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x74, 0x0}) [ 860.089875] binder: 14269:14271 ioctl c0306201 20a20000 returned -14 [ 860.104151] binder: 14269:14273 ioctl c0306201 20a20000 returned -14 03:43:10 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:10 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x3, 0x5, 0x9, '\x00', 0xffffffffffffffc1}, 0x0, [0x80000001, 0x0, 0x2, 0x8d7f, 0x80, 0x3, 0x4, 0x8, 0x0, 0x0, 0x5, 0x7, 0x3, 0x100000000, 0x8, 0x7fffffff, 0x7, 0x8, 0x4, 0xff37, 0x3, 0x800, 0x3, 0x7ff, 0xffff, 0x7, 0x8000, 0x80000001, 0xb1ff, 0x0, 0xa58, 0x3f3, 0xaf99, 0x9, 0xd32, 0xfff, 0x400, 0x3ff, 0x80000001, 0x2, 0x4, 0x4, 0x4, 0x8000, 0xff, 0x3, 0x5574, 0x89bf, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x9, 0x9, 0x0, 0xf8d, 0x4, 0xffff, 0x1, 0x4, 0xcd, 0x800, 0x1f, 0x81, 0x2, 0x4, 0x8001, 0x9, 0x7, 0x3, 0x5, 0x7, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x5, 0x6, 0xfffffffffffffff7, 0x3, 0x2, 0x404, 0xa0, 0x2, 0x7, 0x0, 0x6, 0x8, 0x62, 0x7, 0x3, 0x7, 0x1, 0x3, 0x1, 0x101, 0x7, 0x2, 0x200000000, 0x1, 0x8, 0x7, 0x8, 0xffffffff80000001, 0x0, 0x1000, 0x8, 0x1, 0x9, 0x7fff, 0x1, 0x9, 0x2, 0x80, 0xaca, 0x4, 0x7, 0x8, 0xffffffffffffff20, 0x7f, 0x1, 0x1, 0x4, 0x9, 0x7, 0xff, 0x4, 0x8001], {0x77359400}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:10 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, 0x0) [ 860.212347] binder: 14274:14276 ioctl c0306201 20a20000 returned -14 [ 860.267898] binder: 14281:14282 ioctl c0306201 20a20000 returned -14 03:43:10 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 860.456607] binder: 14295:14299 ioctl c0306201 20a20000 returned -14 [ 860.490318] binder: 14295:14302 ioctl c0306201 20a20000 returned -14 03:43:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002780)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f00000027c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000028c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)=@ipv6_deladdr={0x5c, 0x15, 0x100, 0x70bd2d, 0x25dfdbfd, {0xa, 0x1, 0x640, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @rand_addr="db7d20b3077f0561d9141e9b2752eb9a"}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x4, 0x1, 0xfffffffffffffff9, @time={0x77359400}, {0x400, 0xff}, {0x3}, @raw32={[0x401, 0x7, 0x1]}}, {0xdd, 0x101, 0x8, 0x9, @tick=0x20, {0x6, 0x1b6}, {0x3, 0x6805}, @raw8={"9abd914e3f2dd66792214eeb"}}, {0x2a, 0x3, 0x5ccf78aa, 0x7, @time, {0x401, 0x2b31}, {0x2, 0x861d}, @addr={0x1, 0x4}}], 0x90) openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000180)={0x6, 0x1, 0xff, 0xa587, '\x00', 0x9}) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000001c0)) 03:43:11 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7a, 0x0}) 03:43:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e02000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xa000000}}]}) 03:43:11 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x202800) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x40, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x7f, @loopback}}, 0x0, 0x5b79, 0x0, "be9a908a61d194f36424d3db42dd4dd331efaf3a3c2aed8bce7497523738a22d0c38d6eb5bd083df414037c0f7e782408646f0a5c1b2bc6d1e36b42cded4ff9511510aaeb8dab211f5b9b86384062409"}, 0xfffffffffffffee9) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000300)}}, 0x10) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="db12445a45dfe60deb61cd7e2f24f93852c312daf8f37fce7e85f10311ee1f5406103b4b3f705b168cf9077dce9df5d91963cfc1d7f9df7dc752e69395610bb9e29e4e697b9a839e2543311210ae982cec0e7989152814bbdb00000000"], 0x3, 0x3) 03:43:11 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, 0x0) [ 860.687331] binder: 14311:14316 ioctl c0306201 20a20000 returned -14 [ 860.707328] binder: 14313:14314 unknown command 0 [ 860.731395] binder: 14313:14314 ioctl c0306201 20a20000 returned -22 [ 860.789064] binder: 14313:14325 unknown command 0 03:43:11 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, 0x0) 03:43:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$sndseq(r0, &(0x7f000086afd0)=[{0x280, 0x5, 0x0, 0x8000000000, @time={r1, r2+30000000}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000080)) 03:43:11 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x300, 0x0}) [ 860.812352] binder: 14313:14325 ioctl c0306201 20a20000 returned -22 03:43:11 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x208000, 0x0) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x250000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000140)=""/80) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="000000fd40000000"], 0x0, 0x0, 0x0}) 03:43:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 860.951144] binder: 14335:14340 ioctl c0306201 20a20000 returned -14 03:43:11 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2300, 0x0) 03:43:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xcd2) [ 861.074114] binder: 14344:14347 unknown command 0 03:43:11 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x500, 0x0}) [ 861.111463] binder: 14344:14347 ioctl c0306201 20a20000 returned -22 03:43:11 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x181000, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x1f, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) readahead(r0, 0x7, 0x2cc) [ 861.179965] binder: 14344:14347 unknown command 0 [ 861.188114] binder: 14344:14347 ioctl c0306201 20a20000 returned -22 [ 861.258661] binder: 14361:14365 ioctl c0306201 20a20000 returned -14 [ 861.333025] binder: 14367:14371 ioctl c0306201 20a20000 returned -14 [ 861.377657] binder: 14367:14376 unknown command 0 [ 861.382714] binder: 14367:14376 ioctl c0306201 20a20000 returned -22 03:43:12 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x600, 0x0}) 03:43:12 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000400)='./file0\x00', r1, r2) r3 = fcntl$getown(r0, 0x9) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)="8ecca5ab46eb69dee94157b2bb5980f4a9ffcf6eb4dc734c12b4beabf70d6b70a7114dcc2653c7b053d9b40b61b116b1dbdbf01245dd49a07c75fb4615a321a5b274ac6e773c8f936eb6d2ffe28d75c0c28b3493ce8055a25427651db555943014b3aa592a84350030bc", 0x6a}], 0x1, &(0x7f0000000340)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r3, r1, r2}], 0x70, 0x200048c0}, 0x20040080) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:12 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3f00, 0x0) 03:43:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:12 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400080, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffd7e, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3c3f2a7b213ff77a1868cd90dd9ef55932aa650e8972b437e1fb1253e13ff4b863b9190bcf580b728251204054fbb5cd93e3a5a2fc51c0eabc661eec5bdbc4d68e27ab72bad2c35f3862fc46ab8b37edd7b253"], 0xfffffffffffffd3f, 0x0, 0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 03:43:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xb000000}}]}) [ 861.552066] binder: 14381:14384 ioctl c0306201 20a20000 returned -14 03:43:12 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400180, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 861.593429] binder: 14389:14395 ioctl c0306201 20000140 returned -14 03:43:12 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x700, 0x0}) 03:43:12 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, 0x0) [ 861.672294] binder: 14389:14395 ioctl c0306201 20000140 returned -14 03:43:12 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0xffffffffffffff80, 0x2, 0x0, 0x0, @tick, {0x0, 0x10000000000}}], 0x30) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) sched_setattr(r1, &(0x7f0000000100)={0x30, 0x7, 0x1, 0x66d, 0x8, 0xffffffffffff54fe, 0x200, 0x7ff}, 0x0) [ 861.748524] binder: 14404:14406 ioctl c0306201 20a20000 returned -14 03:43:12 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x8a81, 0x0) dup2(0xffffffffffffff9c, r0) sendmmsg$alg(r0, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="afdc02d8dde4fafa052f26b625d9c9d6f77233d7c2e65df80e6c5c907f067f08ade158ced613400b7160e5bd80f1352570", 0x31}, {&(0x7f0000000200)="641da2bde0d5c9d1e10095f359ba4b9213c4282eb2dce5f33bf2d42a12bd6d5bfbe98fe80a8e85a16ba071d7a9bdd030a676e949ceedfbcda3bc2c9ec519ad67efe766106166f51b16bab615ef960894e2ea00a50ad3704cedcfa74e8187c597cee075ad0bcc2acd07fa6032037ec93c8ecd288697c9c9071fa69280be2c76c2240c2022b39ef0fe603db4272fd1a042dfe332cfa5d39a5735a04c5cd89480c00890ef78810d278cbb3feb948f3bb6a4b170f15d8a008169ff3c2db58a2d93c7331269c01d5fc94abe4be56a6e132f0d220b2ed1ea45fa0d33944ddcea13961be3ad", 0xe2}], 0x2, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x98, 0x117, 0x2, 0x7f, "a48b56d979be381de2cad3bf8cc5b10a409ab80b223aea457313d524b4c635c4f46be0243d40e2784c07813c8bb4c3f52cacea36ac9002056ed56d5e97ceb8344d3ce727cce57e732f72f8d144769ca66bb0fd81039d7d0d92c234e149e58ea06c2de3476bde9878eab9fb78427681f132d34cc694fe572011ee8deecba271"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x86, "74578e8e0f09d4e8a2d61ddee256bd961c89cfa024cb3f78ba3bbc9af82c0741a600f70e61925b005104280aef7f71f8ca443f9746062d2bd3af4b8b1253a62fb43b838c573d8f4e74af9eef51844bad7e07c90b8d4d78084703afb453d12f5d7c900a1205003298b213056b95fe63073b4be674df8ed81eb21da18f4a31cee5422fc15104f0"}, @iv={0xc0, 0x117, 0x2, 0xac, "adadb6dd8057140c8c1c4bb5cc8ea1f9c1dd30a6f142446b2ada16499c7f62e05af3467846e7344974e673d22e85c81ba78a0734948b933761a4b0a78113a90d2add8ce08b0278d8c47f4a87c37fd39543a9ef6e7780b4d37e0bff63a31048650d9c784eb48bdc79d86adaac7d65608abd2c09fcf7e1c8e19fcc84d224d88abc8cbd132e92b3e327e62f374bdf3a7b5e8c20ebccdd236152492894bad2332e5f204c1d00ed481efc5c16e6a4"}, @iv={0x58, 0x117, 0x2, 0x3e, "eb51aa32de5fcb5ec87193c01f0c9dfc0b495d56573c21ae2a146e870b217a1e1b9d3535b91a8c6a541087873704109c156726635343cf8f9b30b839e3a5"}], 0x298, 0x20008000}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)="a888a7bf085f4fe0aea196239c72be8a252ec4518cba95569b9e0a37b75eea56513a42a7794894c1b36381fb906f3c008f5094492a79aaa26d0f2bde8b73541bc89751d0866849687557aef78fb6dc810d0de1493bfe5a8d674548bf57b44b8f3d8acfbfe440cfa10d7f881c03449c357a0843ff6a43c84e884786e880cff017913ccd968796b412f08cc29adf6a55799699d419c0b94ba56f", 0x99}], 0x1, &(0x7f00000006c0)=[@iv={0x78, 0x117, 0x2, 0x63, "f759c48c9ae849613d18dc99b2ad00bf6d47e1ea95c29d1a9e0df89937d7fc658a947d4e48baf130bb3c4272bc216c4e97003986493daedf99d113ea6968cfc39505b8a37e91e0091cf4397b188c76b0a8f423b0ac52777ccad8d1011e8f5b85769093"}, @assoc={0x18, 0x117, 0x4, 0xca8c}, @assoc={0x18, 0x117, 0x4, 0x1dd9}], 0xa8, 0x851}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="bb1b8e1c080905398d5cbc020c685d1a45cff5f151dbc56318d5cdbfcdb8919a629a495c115cb6737bc1dcef7a8f66af0b305f5e86fc8617e7f8295e9b1eb1ce5ee53adf29073b15fc263faec9571b59d5848b72e2c962ebb02f0d4588085f551e8c9beaa5a8a87b8dfe2f68033a8b77b0a0c50c5fcfba7b94f62f6afd8dda3b4a7c9bd46258d04cc7e079879f3bbcd80e145e681cf780c1cc08292eb593eb52e14d39d2e67faca970", 0xa9}, {&(0x7f0000000840)="d9df62fe58fac62051ba78694c6fb303342f37ccbd586d16389b268e2618fb1bb2ea7b35f0ef5ecb5b68a8152448f6b0d703f11cb86a7e86a6dceb24ef020cd87981d2a67ae384f27d91e6c0d6ce31f60ef19171a83ffa6232966cec5084e598f1cc", 0x62}, {&(0x7f00000008c0)="c63c083a24a63b6f4676486d6079e5a17dd4058e6742ebc66b199d4f68e849d346408b6d8c41981ebaf1328922180d6e", 0x30}, {&(0x7f0000000900)="3f359e1c3b836be8e8c04d751feba0cf36c4a5454cb3852a051a915e004fcd1f34962ce4e7419e49461858f39e4906458d13b8d45a19718383ccd2dc4837080f75d427687324ac0bec0a9bbc85867af561ca9e180b1e95c416dcc68b98f2552d092a7709ddd04dc6632f9b2e514c9001206ec73291f1b7dc7a6a1b3095e0917a3242473a032bd9087ccbc90be67d12b9bca8d6267bac405f130bae08d0d838c009734542c7d248b51d1ee5dbb27a", 0xae}, {&(0x7f00000009c0)="b3d4855cc6fe72630dff21ee34d4b4aebad4587cf73a7f8d0e2a18bbe5eedafc03aa5656", 0x24}, {&(0x7f0000000a00)="2df7842bb3c1a646252f5d2253fcbd27f061842991f4f451d06639440a56c69e13dffc26639f86e720832f316a496a1b52670a38fb334a1cd1ce2fcbc5b1c70d5bae690891ae07a8d93bfd32a209b691926334d72ef5401efbf9f944b9b4006b01d8b2bb8ee7a517a2438633963608ec12ea7bde0da8968f0cfbec0e619c83482a9dd8f9a1bf66a3fd9cdf9b3e4bcd5e1b32369b10236437f66c162839ea15d5cec285babbed3636", 0xa8}], 0x6, &(0x7f0000000b40)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @op={0x18}, @iv={0xd8, 0x117, 0x2, 0xbd, "dc313396d69657071387825175128cf49d06f433e09ad0e4bc1c2f4055b88a34124bf100fe490871c628eb4cee18d15d456c4829d751c50c581cb454256f272321c730fa6faec5dbe87029fc27762292d16f51d50693a92d741a128d01afce44826a4aac952ae17e3c94107a9b2dbc8b2847172e3f20e6857609e8920378064305009b40780ce3d8b278f6967cb33ebb8050aa4ab8d9e3e49aceceb741cd80776d79185124f20c49d65402fbcf853ee5c0b0d2514fd4ea218502cf7312"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xa8, 0x117, 0x2, 0x91, "0f2bf7e9f29e56d5c5aa182792cc856b097713f8e5418f9c67a2e22c4ec375d378ad9037ebdd4398cd2350fd69d7345cee27b62303c132c34a629d446ea343dc86e9e22b03d96a62c572553101de3e82e031148c990278b33fb1a400bc9cb94abd615b7cae725c4a7f2f9412e298b7632ee437c212b9ec6c5de003ef362424a3426df6a138ad2f8768b662264da039773b"}, @op={0x18}, @op={0x18}, @assoc={0x18}], 0x228, 0x4008040}], 0x3, 0x8000) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xae, 0x401) mmap(&(0x7f000052b000/0x3000)=nil, 0x3000, 0x7ffffffffe, 0x40008000000031, r1, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x5, 0x1, 0x0, 0xffffffff, 0x19, "d4d333ee7ebf9e8c404d005799aa8bf3e8ee9fa346607d2e6e"}, 0x23, 0x2) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:12 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x1200, 0x0}) [ 861.840380] EXT4-fs: 4 callbacks suppressed [ 861.840395] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000b000000, [ 861.910421] hfs: can't find a HFS filesystem on dev loop1 [ 861.975656] binder: 14419:14424 transaction failed 29189/-22, size 0-0 line 2896 [ 861.991021] binder: 14420:14426 ioctl c0306201 20a20000 returned -14 03:43:12 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00002cbd7000fedbdf250500000004000300"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000001) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$P9_RAUTH(r0, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x40, 0x3, 0x2}}, 0x14) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) dup2(r3, r0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10082, 0x5, 0x0, 0x200000000000000}], 0x30) 03:43:12 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4244, 0x0) [ 862.055217] binder: undelivered TRANSACTION_ERROR: 29189 03:43:12 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x2000, 0x0}) 03:43:12 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x10, 0x8000f, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000200)) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400020bd4d5fc05d941139a4537753b69657b05d0e975b7515dc712ba3cb69363f41867635daca4853cc35bf82f0167671642ed110852588b69496d41546ef58a3baf91963f31d3cba27a4f475ded95ad9e01a737fa4a6ecea69d865d5843505550837ad84be2d2cfb3f92c76809b26a433634a0e3440ba9d9d406d195347b778f56c602c7efd39a69761eb281b6ce84266820b92bb64c00a575501f4ce34c89fad47df3fc"], 0x0, 0x0, 0x0}) [ 862.126132] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000b000000, [ 862.213330] hfs: can't find a HFS filesystem on dev loop1 03:43:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xc000000}}]}) 03:43:12 executing program 3: write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10802, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x51) [ 862.253550] binder: 14447:14451 got transaction to invalid handle [ 862.278955] binder: 14447:14451 transaction failed 29201/-22, size 6001269542019827265-8175747395779245516 line 2896 [ 862.289113] binder: 14445:14450 ioctl c0306201 20a20000 returned -14 03:43:12 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4442, 0x0) [ 862.350517] binder: 14447:14455 got transaction to invalid handle 03:43:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:13 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3f00, 0x0}) [ 862.443752] binder: 14447:14455 transaction failed 29201/-22, size 6001269542019827265-8175747395779245516 line 2896 03:43:13 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) [ 862.492556] binder: undelivered TRANSACTION_ERROR: 29201 [ 862.498592] binder: undelivered TRANSACTION_ERROR: 29201 [ 862.529027] hfs: can't find a HFS filesystem on dev loop1 03:43:13 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4d50, 0x0) [ 862.663354] binder: 14473:14478 ioctl c0306201 20a20000 returned -14 [ 862.680125] binder: 14476:14479 ioctl c0306201 20a20000 returned -14 [ 862.712733] binder: 14476:14479 unknown command 0 [ 862.725815] binder: 14476:14479 ioctl c0306201 20a20000 returned -22 [ 862.739236] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000c000000, 03:43:13 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00E'], 0x0, 0x0, 0x0}) 03:43:13 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4800, 0x0}) [ 862.825739] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000c000000, [ 862.935102] hfs: can't find a HFS filesystem on dev loop1 [ 862.941099] binder: 14493:14494 ioctl c0306201 20a20000 returned -14 03:43:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe000000}}]}) 03:43:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 862.986125] binder: 14496:14499 unknown command 0 [ 862.993948] binder: 14496:14499 ioctl c0306201 20a20000 returned -22 03:43:13 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x504d, 0x0) [ 863.108520] binder: 14496:14506 unknown command 0 03:43:13 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4c00, 0x0}) [ 863.145701] binder: 14496:14506 ioctl c0306201 20a20000 returned -22 03:43:13 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x8c00) getsockopt$inet_dccp_buf(r0, 0x21, 0xfffffffffffffffe, &(0x7f0000000500)=""/174, &(0x7f0000000100)=0x70) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') mkdirat(r2, &(0x7f00000004c0)='./file0\x00', 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x1) r3 = socket(0xa, 0x5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='team0\x00', 0x9, 0xaee, 0xfffffffffffffffa}) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f00000000c0), 0x4) ioctl$BLKPG(r4, 0x40140921, &(0x7f0000000440)={0x0, 0x0, 0x216, &(0x7f0000000400)}) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x3, 0x8763}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r5, 0x5}, &(0x7f0000000240)=0x8) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:13 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400100) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x8, 0x5}, 'port0\x00', 0x40, 0x0, 0x9, 0xdc, 0x6, 0x4045, 0x1, 0x0, 0x5, 0x9}) [ 863.291695] binder: 14511:14513 ioctl c0306201 20a20000 returned -14 03:43:14 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5354, 0x0) 03:43:14 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6000, 0x0}) [ 863.442202] binder: 14520:14523 ioctl c0306201 20a20000 returned -14 [ 863.490157] binder: 14520:14530 unknown command 0 03:43:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 863.528940] binder: 14520:14530 ioctl c0306201 20a20000 returned -22 [ 863.555868] binder: 14533:14537 ioctl c0306201 20a20000 returned -14 [ 863.580855] md: could not open unknown-block(0,534). [ 863.600341] md: md_import_device returned -6 03:43:14 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x5, 0x2}) syncfs(r0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x84}, 0x2) write$P9_RLERROR(r1, &(0x7f0000000080)={0x28, 0x7, 0x2, {0x1f, '/proc/thread-self/attr/current\x00'}}, 0x28) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000a20000)={0x134, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x146, 0x0, 0x0}) 03:43:14 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6800, 0x0}) 03:43:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time={0x77359400}, {}, {0x20000}}], 0xe4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x62ae3b7d6bfb98f0, r0, 0x0) [ 863.774804] binder: 14554:14558 ioctl c0306201 20a20000 returned -14 [ 863.793516] md: could not open unknown-block(0,534). [ 863.806089] binder: 14549:14560 ioctl c0306201 20a20000 returned -14 [ 863.821874] md: md_import_device returned -6 [ 863.849708] binder: 14549:14565 ioctl c0306201 20a20000 returned -14 [ 863.897119] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000e000000, [ 863.955673] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000000e000000, 03:43:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10000000}}]}) 03:43:14 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5453, 0x0) 03:43:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000000)=0x78) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:14 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6c00, 0x0}) 03:43:14 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000b5b8e02d09e7e99f096fe9a2749b7cd253bc60484efbb1d157886cc2ca07bbc72a70e641632585ef9f4d5c94fe20adb414f7bd28d2da1f7c7d7febb8bcc201c215df7f7ae036696794e43382caa8d71091d703"], 0x0, 0x0, 0x0}) 03:43:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 864.077895] binder: 14578:14579 transaction failed 29189/-22, size 4748606186150627274--7756239108925217437 line 2896 [ 864.109977] binder: 14575:14583 ioctl c0306201 20a20000 returned -14 03:43:14 executing program 3: syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x80) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8a, 0x402280) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000000c0)) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 864.186933] binder: 14578:14591 transaction failed 29189/-22, size 4748606186150627274--7756239108925217437 line 2896 03:43:14 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5e02, 0x0) 03:43:14 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7400, 0x0}) [ 864.270486] binder: undelivered TRANSACTION_ERROR: 29189 [ 864.277516] binder: undelivered TRANSACTION_ERROR: 29189 03:43:14 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:43:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 864.409557] binder: 14600:14605 ioctl c0306201 20a20000 returned -14 03:43:15 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6000, 0x0) [ 864.476673] binder: 14604:14606 unknown command 0 [ 864.486157] binder: 14604:14606 ioctl c0306201 20a20000 returned -22 [ 864.533866] binder: 14604:14616 unknown command 0 [ 864.558136] binder: 14604:14616 ioctl c0306201 20a20000 returned -22 [ 864.618783] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000010000000, [ 864.705833] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000010000000, 03:43:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x12000000}}]}) 03:43:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:15 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7a00, 0x0}) 03:43:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, [], 0x10}, 0x3}}, 0x2, 0x8, 0x7, 0x100000000, 0x200}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x80}, 0x8) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:15 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x800, 0x80000001) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x4000}, {r1}], 0x2, &(0x7f0000000080)={r2, r3+30000000}, &(0x7f00000000c0)={0x2}, 0x8) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:15 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb200, 0x0) [ 864.870543] binder: 14634:14637 ioctl c0306201 20a20000 returned -14 [ 864.878563] binder: 14636:14641 ioctl c0306201 20a20000 returned -14 03:43:15 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x1000000, 0x0}) 03:43:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0xfd0, 0x0, @time={0x77359400}}], 0x30) [ 864.965666] binder: 14636:14649 unknown command 0 [ 864.970711] binder: 14636:14649 ioctl c0306201 20a20000 returned -22 03:43:15 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, 0x0) 03:43:15 executing program 5 (fault-call:6 fault-nth:0): mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 865.077710] binder: 14654:14655 ioctl c0306201 20a20000 returned -14 [ 865.103314] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000012000000, 03:43:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/234) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 865.199752] FAULT_INJECTION: forcing a failure. [ 865.199752] name failslab, interval 1, probability 0, space 0, times 0 [ 865.282726] CPU: 1 PID: 14666 Comm: syz-executor.5 Not tainted 5.0.0+ #7 [ 865.289644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.299023] Call Trace: [ 865.302863] dump_stack+0x172/0x1f0 [ 865.306569] should_fail.cold+0xa/0x1b [ 865.310499] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 865.316097] ? lock_downgrade+0x810/0x810 [ 865.321853] ? ___might_sleep+0x163/0x280 [ 865.326692] __should_failslab+0x121/0x190 [ 865.326713] should_failslab+0x9/0x14 [ 865.337697] kmem_cache_alloc_trace+0x2d1/0x760 [ 865.337713] ? kasan_check_read+0x11/0x20 [ 865.337727] ? do_raw_spin_unlock+0x57/0x270 [ 865.337748] ? _raw_spin_unlock+0x2d/0x50 [ 865.337779] binder_get_thread+0x1db/0x7c0 [ 865.337796] ? __might_sleep+0x95/0x190 [ 865.337814] binder_ioctl+0x1e2/0x1b79 [ 865.337830] ? kasan_check_read+0x11/0x20 [ 865.337851] ? binder_thread_write+0x2820/0x2820 [ 865.337869] ? mark_held_locks+0x100/0x100 [ 865.337885] ? proc_fail_nth_write+0x9d/0x1e0 [ 865.337903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 865.386455] ? smack_log+0x415/0x540 [ 865.386476] ? smk_access_entry+0x1c0/0x1c0 [ 865.386490] ? __fget+0x340/0x540 [ 865.386502] ? smk_access+0x40d/0x570 [ 865.386516] ? find_held_lock+0x35/0x130 [ 865.386536] ? smk_tskacc+0x2ba/0x390 [ 865.386554] ? binder_thread_write+0x2820/0x2820 [ 865.386571] do_vfs_ioctl+0xd6e/0x1390 [ 865.386586] ? smk_curacc+0x7f/0xa0 [ 865.405088] ? ioctl_preallocate+0x210/0x210 [ 865.405107] ? smack_file_ioctl+0x196/0x300 [ 865.405125] ? smack_file_lock+0x240/0x240 [ 865.446515] ? __fget+0x367/0x540 [ 865.450520] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 865.456156] ? fput+0x128/0x1a0 [ 865.459453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 865.465004] ? security_file_ioctl+0x93/0xc0 [ 865.469430] ksys_ioctl+0xab/0xd0 [ 865.472894] __x64_sys_ioctl+0x73/0xb0 [ 865.476818] do_syscall_64+0x103/0x610 [ 865.480726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 865.485921] RIP: 0033:0x457f29 [ 865.489576] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 865.508663] RSP: 002b:00007f32c8bb0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.516390] RAX: ffffffffffffffda RBX: 00007f32c8bb0c90 RCX: 0000000000457f29 [ 865.523683] RDX: 0000000020a20000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 865.531082] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 865.538842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32c8bb16d4 [ 865.546293] R13: 00000000004bf25a R14: 00000000004d0c00 R15: 0000000000000006 [ 865.559632] binder: 14663:14666 ioctl c0306201 20a20000 returned -12 [ 865.566959] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000012000000, 03:43:16 executing program 3: fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "a4f90e039a25950d2cbec371f4dbf1c8"}, 0x11, 0x2) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {}, {0xfffffffffffffff9}}], 0x30) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x4, 0x8000, 0x3, 0x6, 0x101}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x2, 0x1, 0x7, 0x9, 0x6, 0x6, 0x8, r1}, 0x20) 03:43:16 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x2000000, 0x0}) 03:43:16 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xff0f, 0x0) 03:43:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x16000000}}]}) 03:43:16 executing program 5 (fault-call:6 fault-nth:1): mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:16 executing program 3: getrusage(0x9b7aa7c186e7ead0, &(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) write$sndseq(r0, &(0x7f0000000080)=[{0x535, 0x5, 0x800, 0x1000, @time={0x0, 0x1c9c380}, {0x1ff, 0x100000000}, {0x5, 0x6}, @quote={{0xfe, 0xfff}, 0x1}}, {0xffffffff, 0x3ff, 0x2, 0x3, @tick, {0x3, 0xffffffff}, {0x5, 0x7}, @raw8={"3ac28a0ff80d7c1e5e5e104f"}}, {0x2, 0x8, 0x7, 0x2, @tick=0x60, {0x63, 0x2}, {0x20, 0x5}, @raw32={[0x8, 0x9, 0x6]}}, {0x1f, 0xffffffff, 0x100000001, 0x33, @tick=0xdc, {0xfffffffffffffdce, 0x9}, {0x9b, 0x4}, @connect={{0xfa, 0x9}, {0x6, 0x7f}}}, {0x9, 0x1, 0x2, 0x5, @tick=0x9742, {0x549, 0x3f}, {0x0, 0x3ff}, @addr={0x4000000000000, 0x2}}, {0x4, 0x101, 0x6, 0xffffffffffff8001, @tick=0x6, {0xcb21, 0x80}, {0x5, 0x22}, @raw32={[0x0, 0x0, 0xff]}}], 0x120) [ 865.707503] binder: 14689:14694 ioctl c0306201 20a20000 returned -14 [ 865.726337] binder: 14692:14695 ioctl c0306201 20a20000 returned -14 03:43:16 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:16 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3000000, 0x0}) 03:43:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:16 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, 0x0) 03:43:16 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 865.933661] binder: 14709:14712 ioctl c0306201 20a20000 returned -14 [ 866.007113] binder: 14710:14717 ioctl c0306201 20a20000 returned -14 03:43:16 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:16 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4000000, 0x0}) 03:43:16 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa4003, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="24002dbd7000fbdbdf250e0000003c00030008000500ffffffff1400060000000000000000000000000000000000080003000400000014000200766c616e30000000000000000000000008000400090000004000010008000100020000000800050001000000080006006f76660008000800050000000800080005000000140003007f0000010000000000000000000000001800010008000100020000000c000700250000000500000048000300080003000300000014000600fe80000000000000000000000000002614000600ff02000000000000000000000000000114000600fe8000000000000000000000000000bb34000200080004000900000008000300030000f13090e16af142096e000800030002000000080008000b00000008000b0000000000080008000900000014000100080006006c63000008000b0073697000"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x20008001) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8) set_robust_list(&(0x7f0000000d40)={&(0x7f0000000c80), 0x75, &(0x7f0000000d00)={&(0x7f0000000cc0)}}, 0x18) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000440)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000480)='IPVS\x00', 0xffffffffffffffff}, 0x30) sendmsg$nl_netfilter(r0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x6f4, 0xf, 0xf, 0x308, 0x70bd2c, 0x25dfdbfb, {0xf}, [@typed={0x8, 0x35, @uid=r2}, @nested={0x238, 0x1d, [@generic="043f7dab452fc8f9be5804e591d87d5169d036622f55c348973a47add17aa19bcd2c1dd8aebfada577fa8e379dbe765bd0b992a24649b263d8487495f77dc7a4174a20d53186f971e22a543e8d3aa6c87dfb4dc830a41578acc12b314706ef8039220e51a030d29578da678171dbe937b2fdcf2dfe083b91ca860282d3ef2cd02b8527df1b548428e25509c679af16d4b19cb07e64dc10b1fe542e31b42a64d12c6362263ee8c956d8fea46351c360d52447cfd53127968ff635c4a54fe127f182bb9d48ec10eb46d858a5201473fa081ee637c859b2ebaff1a6b726ca55", @typed={0x8, 0x8d, @u32=0x2}, @generic="6d719c881e508f1083480ca9bc0171d3efb54098239149b0a27f9041157eb2fceea2eceb5453bc2700b67cce4446d7da24e6e8d32725947688379660b108c510fb88e669d7a76bb82eaccf923743c2a01ed15ecf8156687638bcfb528cd2b0e07e24124aff83e40e7fb9a9db4828b8f561e210434d07c7401c006947b72815d7046dfc4e5b5c7fedaabb38d033db98a0316f41fcb6b291dd542667be2379ec78e24e7e4d5a9a50652220aae79d5fbb400e9d0c9644bd2ad24914da67f312b1836d54fad32fd7e93608", @generic="43fe56e1a6cdefea2b0fc4633183bbb555b81f5598e013a3ed51dc2e11fc775ea999dedef5d5a644ce92e3dddf818721170d5e8e0b728c45ecf5530a9786ea9d9089073da4e2895edc0bb3e9cd0387094adf3d589858a8fc", @generic="bc087520fd3265620e248f0b2819706ea497916c290b25b7f4335f9a088c500c7b227312b502c4371efb", @generic]}, @nested={0x1e8, 0x27, [@generic="208682c7daf0354861aeb57614d631b1b420fbcf5779c87da366839e3ab4c57a22c697444098104f5f7b63ae3ac259c4e3042245aa0e0902f6e738f2d68fa936695ac412874568156925c9bb5f3beb1e03c30224b0d3530c328f775f38214428393c5c653d3a5936d7947446226de392eaa57ca59b04026d6210700b34342c3609df76faedf366a08ee933058ea581884adac0bf2ef7727abf841ac2f00ebf6e907ba6", @typed={0x4, 0x90}, @typed={0x8, 0x4e, @pid=r3}, @generic="1f91a8d7ea72d1c01435a1950db1630214ad9634702c6d81f55c5765da0520604a4eb7377f2a774000e6d6c9cd263055f4688689c0a78ea5909701bf505438d3ef3171676d281b93d6c61beb6c3ae6ebe03ef68b93882d9f560ce624ab36ef7d59e352e2818ca09e09ae6b6b652d87d79712c360438869bf6beb8b1d527ac231a2b7cb2a1a524a553bb99394deaedf4d26211b4831ebcc9c28d54d2333b8628bec3952a860da3a891b4d", @typed={0x88, 0x3e, @binary="ba9758a2cb01f783ef171d49413f10cdcc67792072b19f8444f4b551f1290791f96b98590d1ac948d79de02f026050c9ff7d2e883c98c94bb18df60c75a64efdff4bdfec42c8a217ec54b5cc952e3ab7d205f9745ee3c94ad6cc2eda47fd8f0ac769a027d88fe7eae075fe8c0c3fce4f0b63569ba126f8bee200e1d270ce45ddb983b2"}]}, @typed={0x4, 0x90}, @typed={0x7c, 0x37, @binary="3bbc47aa80b4eb7ec2e10896f7ef60003c29f1f697522f623500951adb860ec60c5d083880d3fda3b7f7bc72a8a94ba9c7c6247aa664380deb5045a221e7f84d228273bd72d0d7029484c9270f8d039c36f179e2a0ec98f72dc7ebb05bc90e8a74076ddbfc0121608d38c4946115b586377f570f66bf"}, @generic="d90bfa7ad750101fd1e94736272b8ca8b81ab5ee69be71b12d142695bc6ebc09e16ed57b67143f6824a478023cda94c577f1ff2345023c2ee389e1e8a5c8858746ca0f7afdc5c101c95a71c1", @nested={0x1d8, 0x91, [@typed={0xc, 0x44, @str='IPVS\x00'}, @generic="0161aa658fc07d1afe3ddf8609aaa7c3053ca0130e940ebc4a2369abf14a585978094c3a04c71a660870f36aa53fd37c5067ae5e96804e262e186b94ea8c14d0926c980b9cf734ac565f778caf87c71006b67b25d5c5fe8b887f7980b9d36c851eecc79d12d233876eb22036fc39cd3ba47d75101869b58faa8e514897f2ed00beb012efccf928c97aa782f6f97f1cd9fdda2db5ac616df5930e7905b08dcbf3664b6cf92779e67a07c0cfd2aa44bb9f54ce2b1c8f1b3b3a23349c71e0bf208767f903148ad9b9e219e1c3bd91bbdf3d", @typed={0xe4, 0x1d, @binary="021e897a470a798b51fb43bf3a7a674478404793877fcaba2798470600129627d83bd3eea501d68d5e8f11f15d717e7883ecfc377b1f19d9ff8a949221cde4feba0e0f4642700eb7c99720843b5dba4a6f49983312fa71655e010699f5551edb76eddf04229dc72633dc38de7ddd30f5820cbbc31cfbba73e19698a93602fc61c2ce2850adc0cee8b65cf84693436942032b0ee5962aa54fb4a37c18e9454f53e5a850f317993fe3824d875325fc3a2b433cc75ad4f696b59f73ef082219c012fab2592e7fb1f3d8613b7bb9bf752e14e276a9678588650ef5b7a3ee400bf5"}, @typed={0x14, 0x8a, @str='/dev/sequencer2\x00'}]}, @nested={0xc, 0x1d, [@typed={0x8, 0x6c, @ipv4=@empty}]}, @typed={0x8, 0x94, @pid=r4}]}, 0x6f4}, 0x1, 0x0, 0x0, 0xc6ddfb94df3e90e8}, 0x800) 03:43:16 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) [ 866.205712] binder: 14730:14731 ioctl c0306201 20a20000 returned -14 03:43:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1c0f0000}}]}) 03:43:17 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x5000000, 0x0}) 03:43:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x3}], 0x30) 03:43:17 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe0000, 0x0) 03:43:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:17 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 866.606225] binder: 14756:14759 ioctl c0306201 20a20000 returned -14 [ 866.621535] binder: 14761:14764 ioctl 10 20a20000 returned -22 03:43:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000080)=""/253, &(0x7f0000000200)=0xfffffe01) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x1, 0xfe, 0x40, @tick=0x1, {0x7, 0x3f}, {0xadcc, 0x4}, @raw8={"c5f10602de66d3edf476663e"}}], 0x30) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:17 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:17 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, 0x0) 03:43:17 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6000000, 0x0}) 03:43:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000000)=0x54) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000001c0)={0x31, 0x6, 0x4, 0x3, 0x100, 0xde7a00000000}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x6, 0x240000000}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r1, 0x7}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB="ae89f8d2a32f000000f7256e124a75797194e3e831adf75cef6d0379e3a832faeaf712bb40226ac6071c492c63bc29d51d85288860af7493"], &(0x7f0000000300)=0x37) modify_ldt$write2(0x11, &(0x7f0000000200)={0x9, 0x20101800, 0x4000, 0x5, 0x7fd, 0x8, 0x800, 0x7, 0x14, 0x3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x6, 0x3ff, 0x7, 'queue0\x00', 0x7}) [ 866.853315] hfs: can't find a HFS filesystem on dev loop1 03:43:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 866.903159] binder: 14782:14787 ioctl c0306201 20a20000 returned -14 [ 867.137988] EXT4-fs: 2 callbacks suppressed [ 867.137997] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000001c0f0000, [ 867.217412] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000001c0f0000, 03:43:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1f000000}}]}) 03:43:17 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7000000, 0x0}) 03:43:17 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0) 03:43:17 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) write$sndseq(r0, &(0x7f0000000000)=[{0x80000001, 0x2, 0x7d1f829b, 0x401, @tick=0x1, {0x0, 0x5270}, {0x4, 0x1f}, @raw8={"246bb3a407d2b18640c18a43"}}], 0x30) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0xfffffffffffffffd) 03:43:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:18 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:18 executing program 3: write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) [ 867.400202] hfs: can't find a HFS filesystem on dev loop1 [ 867.414272] binder: 14815:14821 ioctl c0306201 20a20000 returned -14 03:43:18 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, 0x0) 03:43:18 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x12000000, 0x0}) 03:43:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @tick, {0x0, 0x9}}], 0x11e) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000000, 0x0) vmsplice(r0, &(0x7f0000001200)=[{&(0x7f0000000180)="d64245e6fe9b1e81e079b3ae275397ba009b2310722f086b8d4a2f0dbd23a0762907bf32fa91391fba965251086078ba1b3cd83005a384882dea613c9cf99ffd14d169706507770d339bae3d31fe395ebd", 0x51}, {&(0x7f0000000200)="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", 0x1000}], 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$P9_RAUTH(r0, &(0x7f0000001240)={0x14, 0x67, 0x1, {0x0, 0x0, 0x4}}, 0x14) 03:43:18 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 867.638508] hfs: can't find a HFS filesystem on dev loop1 [ 867.697823] binder: 14843:14844 ioctl c0306201 20a20000 returned -14 [ 867.865205] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000001f000000, 03:43:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x20000000}}]}) 03:43:18 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, 0x0) 03:43:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:18 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:18 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x20000000, 0x0}) [ 867.979291] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000001f000000, [ 868.098837] binder: 14873:14874 ioctl c0306201 20a20000 returned -14 [ 868.117391] hfs: can't find a HFS filesystem on dev loop1 03:43:18 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x101000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x40, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/161) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) 03:43:18 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:18 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3f000000, 0x0}) 03:43:18 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, 0x0) 03:43:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000080)={'ip6gretap0\x00', 0x1, 0x800}) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x6b4) [ 868.356512] binder: 14895:14896 ioctl c0306201 20a20000 returned -14 03:43:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 868.404516] hfs: can't find a HFS filesystem on dev loop1 [ 868.590410] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000020000000, 03:43:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2d000000}}]}) 03:43:19 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:19 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x48000000, 0x0}) 03:43:19 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x3, 0x0, @pic={0x1, 0x8, 0xffffffffffff4cab, 0x6, 0x0, 0x7, 0x3, 0xfffffffffffffffe, 0xb7d, 0x4, 0x7, 0x9d, 0x6, 0xffffffffffffffe1, 0x1000, 0xd8a}}) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000003c0)={0x2d, 0x401}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000002c0)={r0, r1, 0x800, 0x56, &(0x7f0000000240)="a90b730d5193196461a9ed1dfcdf037b811afd746049b7ef8228870c2167b10e5a8a2a13f00b7b81d81435fd984966ce928af1745bc6641db17aebb8e1b444405325b52faf36c06b6c1ad37d12fa056aa184c70c4a03", 0x1, 0x1, 0x8001, 0x2, 0x9, 0x0, 0x5, 'syz1\x00'}) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={r3, r4+30000000}, &(0x7f00000001c0)) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000380)=0x3) 03:43:19 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, 0x0) [ 868.656659] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000020000000, 03:43:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 868.755283] hfs: can't find a HFS filesystem on dev loop1 [ 868.802507] binder: 14926:14927 ioctl c0306201 20a20000 returned -14 03:43:19 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:19 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, 0x0) 03:43:19 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4c000000, 0x0}) 03:43:19 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 868.985617] binder: 14948:14950 ioctl c0306201 20a20000 returned -14 [ 869.018926] hfs: can't find a HFS filesystem on dev loop1 03:43:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:19 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x60000000, 0x0}) [ 869.059477] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000002d000000, [ 869.203173] binder: 14964:14968 ioctl c0306201 20a20000 returned -14 [ 869.303166] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000002d000000, 03:43:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3f000000}}]}) 03:43:19 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0) 03:43:19 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 869.420489] hfs: can't find a HFS filesystem on dev loop1 [ 869.545075] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000003f000000, 03:43:20 executing program 3: write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x2, 0x4) 03:43:20 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x68000000, 0x0}) 03:43:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:20 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:20 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9000000, 0x0) [ 869.642831] binder: 14999:15001 ioctl c0306201 20a20000 returned -14 03:43:20 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6c000000, 0x0}) 03:43:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40000000}}]}) 03:43:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) r1 = getuid() r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000040)=""/28, 0x1c}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000000200), 0xd7a1d53051f19818, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) r3 = getegid() bind$netlink(r0, &(0x7f0000000700)={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc) r4 = getuid() getresgid(&(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000640)={0x2b, 0xfff, 0x8, 0x9, 0x8, 0x2, 0xe30, 0xfff, 0x0}, &(0x7f0000000680)=0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000006c0)={r7, 0x7, 0x6, 0x80000001, 0x10001, 0xfffffffffffffffb}, 0x14) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000600), 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) write$FUSE_DIRENTPLUS(r0, &(0x7f00000002c0)={0x1f8, 0x0, 0x2, [{{0x5, 0x3, 0xfffffffffffffff9, 0x7, 0x6c, 0x3, {0x6, 0xffffffff, 0x2, 0x6, 0x9, 0x1d9, 0x2, 0xb4, 0xda8a, 0x0, 0x80000000, r1, r3, 0x7, 0x7}}, {0x0, 0x6, 0x1, 0x8, ':'}}, {{0x2, 0x2, 0x8, 0x400, 0x3710, 0x0, {0x0, 0x8, 0x3, 0x100000000, 0x400, 0x9, 0xffffffffffffff54, 0x8000, 0x2, 0x9, 0x80000000, r4, r5, 0x7f}}, {0x4, 0x100000000, 0x10, 0x3f, '/dev/sequencer2\x00'}}, {{0x4, 0x2, 0x4, 0x8, 0x6, 0x3, {0x2, 0x7fff, 0x6, 0x2085, 0x9901, 0xaac, 0xa0d2, 0x80, 0xff, 0xffffffffffffffc1, 0x6, r6, r8, 0x8001, 0x9}}, {0x3, 0x60d2cfd9, 0x5, 0x918, 'wlan1'}}]}, 0x1f8) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r9, 0x808, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x400}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xffffffffffffffc1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) 03:43:20 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 869.816884] hfs: can't find a HFS filesystem on dev loop1 [ 869.842465] binder: 15017:15018 ioctl c0306201 20a20000 returned -14 03:43:20 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa000000, 0x0) 03:43:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 03:43:20 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) [ 870.163214] hfs: can't find a HFS filesystem on dev loop1 03:43:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:20 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:20 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x74000000, 0x0}) 03:43:20 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb000000, 0x0) 03:43:20 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000080)=""/6, &(0x7f00000000c0)=0x6) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) [ 870.386863] binder: 15061:15064 ioctl c0306201 20a20000 returned -14 [ 870.426459] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000040000000, [ 870.542185] hfs: can't find a HFS filesystem on dev loop1 03:43:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x48000000}}]}) 03:43:21 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:21 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7a000000, 0x0}) 03:43:21 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x5}], 0x30) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x8) 03:43:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:21 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc000000, 0x0) [ 870.737713] binder: 15088 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 870.737727] binder: 15088:15094 ioctl c018620c 20a20000 returned -22 [ 870.749216] binder: 15092:15093 ioctl c0306201 20a20000 returned -14 03:43:21 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000000c0)={0x0, 0x1, [0x1, 0xfffffffffffffff8, 0xe0, 0x3, 0x5fb, 0x0, 0x2, 0x5]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) fcntl$setown(r0, 0x8, r1) lookup_dcookie(0x20, &(0x7f0000000180)=""/33, 0x21) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000240)={{r3, r4/1000+10000}, 0x0, 0x5a21bd87, 0x8}, 0x18) getpgid(r1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xffffffffffffff80, @local, 0xffff}}, 0x101, 0x1, 0x81, 0x7}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x1, 0x3, 0x4, 0x3, 0x8, 0x13, 0x75, 0x1, r5}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) getpeername(r0, &(0x7f0000000400)=@in={0x2, 0x0, @loopback}, &(0x7f0000000480)=0x80) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000004c0)) openat$cgroup_subtree(r2, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0x50, &(0x7f0000000640)}, 0x10) write$P9_RSETATTR(r0, &(0x7f0000000700)={0x7, 0x1b, 0x2}, 0x7) poll(&(0x7f0000000740)=[{r0, 0x402}, {r2, 0x4000}, {r2, 0x20}], 0x3, 0x10001) bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0xd, 0x1ff, 0x6, 0x3, 0x2, r0, 0x3}, 0x2c) r6 = getuid() setfsuid(r6) getuid() r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000a00)={&(0x7f00000007c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x160, r7, 0x700, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd00000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x52e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fc3a60a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff3063}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x733}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffe01}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x80) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000b00)={0x3}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000bc0)={0x2, &(0x7f0000000b80)=[{0x8, 0x10000000000, 0xfffffffffffffeff, 0x6}, {0x8, 0x0, 0x5b67, 0x8000}]}, 0x10) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000c00)={{0x4, @name="962a7452dc35a3bd2fea0c2d124e98d2bc5b748729bf0f03cf5ff189df91e353"}, "59f09c1b1f177b0cf6b23b67ee6ca996786615f90abaff0193f7108baecf6f56", 0x1}) 03:43:21 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x100000000000000, 0x0}) [ 870.822357] hfs: can't find a HFS filesystem on dev loop1 03:43:21 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:21 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe000000, 0x0) [ 870.965829] binder: 15110:15111 ioctl c0306201 20a20000 returned -14 03:43:21 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:21 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x200000000000000, 0x0}) [ 871.045433] hfs: can't find a HFS filesystem on dev loop1 [ 871.151936] binder: 15129:15130 ioctl c0306201 20a20000 returned -14 03:43:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4c000000}}]}) 03:43:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:21 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:21 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x300000000000000, 0x0}) 03:43:21 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10000000, 0x0) [ 871.366071] binder: 15142:15144 ioctl c0306202 20a20000 returned -22 [ 871.367134] hfs: can't find a HFS filesystem on dev loop1 [ 871.375634] binder: 15140:15141 ioctl c0306201 20a20000 returned -14 03:43:22 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306209, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 871.569959] binder: 15160:15161 ioctl c0306209 20a20000 returned -22 03:43:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, @in={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @mcast2}], 0x58) fcntl$getown(r1, 0x9) 03:43:22 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x400000000000000, 0x0}) 03:43:22 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20000000, 0x0) 03:43:22 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 871.814252] binder: 15175:15176 ioctl c0306225 20a20000 returned -22 [ 871.822855] binder: 15179:15180 ioctl c0306201 20a20000 returned -14 03:43:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x60000000}}]}) [ 871.862679] hfs: can't find a HFS filesystem on dev loop1 03:43:22 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306248, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:22 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x500000000000000, 0x0}) 03:43:22 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20100000, 0x0) 03:43:22 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @multicast1}, &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r1}) sendmsg$netlink(r0, &(0x7f00000057c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005680)=[@rights={0x10}, @cred={0x30}], 0x30}, 0x0) [ 872.035744] binder: 15196:15198 ioctl c0306248 20a20000 returned -22 [ 872.080427] binder: 15202:15204 ioctl c0306201 20a20000 returned -14 03:43:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:22 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306263, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:22 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x23000000, 0x0) 03:43:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x8fe}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x5, 0x10000) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) r2 = dup3(r0, r0, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r3, 0x208, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4395}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x953}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000400)="e6a3731daa5c525079e39170fb1a78b9eebf019b9051843bfac5b4e9c4f6200d7a1edbe103ea7aa3a68405c1574ff0ca69f6af40bfe3f0c9b253ce9a9af23b4462639991869a84bf5d0658db69421271d86d4f9218c179c3f5548124bdf319e427658c05632fd0119eabb34cec548a662b27253cc153a323db343dbb4258e503fb3708589be1830ef0b73206aaebca06a9546b787e5eb22e8f135d20933ef2fd8aef41455454421efa47ae921958826c38950b45fd3c42e67eae7d236626b74d578f7dced1036868092fdbbbde82ffe86fd238628fb3ee7989922ad682a4b8dcdef8", 0xe2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)={0x2, 0x0, 0x1, 0x1, 0x4, [{0x1, 0x9, 0x5, 0x0, 0x0, 0x2}, {0x8, 0xffff, 0x3}, {0x9, 0x0, 0x23, 0x0, 0x0, 0x204}, {0x5, 0x7, 0x2, 0x0, 0x0, 0x1}]}) 03:43:22 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x600000000000000, 0x0}) [ 872.282230] binder: 15218:15219 ioctl c0306263 20a20000 returned -22 [ 872.341177] hfs: can't find a HFS filesystem on dev loop1 03:43:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00\x1e\x00', {0x2, 0x4e24, @multicast1}}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'lapb0\x00', {0x2, 0x4e20, @broadcast}}) 03:43:22 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x7, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 872.382166] binder: 15228:15229 ioctl c0306201 20a20000 returned -14 [ 872.477924] binder: 15235:15239 ioctl c0306201 20a20000 returned -14 [ 872.522731] EXT4-fs: 5 callbacks suppressed [ 872.522744] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000060000000, [ 872.644960] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000060000000, 03:43:23 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3f000000, 0x0) 03:43:23 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x700000000000000, 0x0}) 03:43:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:23 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x9, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x68000000}}]}) 03:43:23 executing program 3: r0 = socket$kcm(0x10, 0xb, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000007f00)=[{&(0x7f0000006a40)=""/142, 0x8e}, {&(0x7f0000006b00)=""/129, 0x81}, {&(0x7f0000006bc0)=""/181, 0xb5}, {&(0x7f0000006c80)=""/38, 0x26}, {&(0x7f0000006cc0)=""/146, 0x92}, {&(0x7f0000006d80)=""/182, 0xb6}, {&(0x7f0000006e40)=""/55, 0x37}, {&(0x7f0000006e80)=""/4096, 0x1000}, {&(0x7f0000007e80)=""/76, 0x4c}], 0x9}, 0x0) 03:43:23 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x600000, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000140)={0x2a, 0x37, 0x2, {0x0, 0x0, 0x7, r0, 0xc, '/dev/ashmem\x00'}}, 0x2a) tkill(r0, 0x1b) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000180)) socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:43:23 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x2f, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 872.794617] hfs: can't find a HFS filesystem on dev loop1 [ 872.803706] binder: 15257:15264 ioctl c0306201 20a20000 returned -14 [ 872.829014] binder: 15261:15270 ioctl c0306201 20a20000 returned -14 03:43:23 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x40000000, 0x0) 03:43:23 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x1200000000000000, 0x0}) [ 872.937797] binder: 15279:15282 ioctl c0306201 20a20000 returned -14 03:43:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:23 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$notify(r0, 0x402, 0x18) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r1}) 03:43:23 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x48, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 873.034462] hfs: can't find a HFS filesystem on dev loop1 03:43:23 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x42440000, 0x0) [ 873.135184] binder: 15293:15294 ioctl c0306201 20a20000 returned -14 [ 873.173251] binder: 15297:15298 ioctl c0306201 20a20000 returned -14 03:43:23 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x2000000000000000, 0x0}) 03:43:23 executing program 3: accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(0x0, 0x5) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab556fcc", 0x4) mkdir(0x0, 0x0) r1 = creat(0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) [ 873.381542] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000068000000, [ 873.396393] binder: 15316:15317 ioctl c0306201 20a20000 returned -14 [ 873.526784] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000068000000, 03:43:24 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4d500000, 0x0) 03:43:24 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x3f00000000000000, 0x0}) 03:43:24 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x63, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6c000000}}]}) [ 873.667499] binder: 15335:15336 ioctl c0306201 20a20000 returned -14 [ 873.694118] binder: 15332:15338 ioctl c0306201 20a20000 returned -14 [ 873.727013] gfs2: fsid=_h: Trying to join cluster "lock_nolock", "_h" [ 873.767522] gfs2: fsid=_h: Now mounting FS... 03:43:24 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4800000000000000, 0x0}) 03:43:24 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x53540000, 0x0) 03:43:24 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x2, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 873.839511] gfs2: not a GFS2 filesystem [ 873.856731] gfs2: fsid=_h: can't read superblock [ 873.880986] gfs2: fsid=_h: can't read superblock: -22 [ 873.904553] binder: 15349:15351 ioctl c0306201 20a20000 returned -14 [ 873.928107] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000006c000000, 03:43:24 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x4c00000000000000, 0x0}) [ 874.007007] binder: 15357:15359 ioctl c0306201 20a20000 returned -14 [ 874.040710] binder: 15360:15361 ioctl c0306201 20a20000 returned -14 03:43:24 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x3, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:24 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6000000000000000, 0x0}) [ 874.145625] binder: 15364:15365 ioctl c0306201 20a20000 returned -14 [ 874.271513] binder: 15372:15375 ioctl c0306201 20a20000 returned -14 [ 874.300708] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000006c000000, 03:43:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x8000000000000002) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0xffffffffffffffff) write$evdev(r1, &(0x7f0000000080)=[{}, {{}, 0x2, 0x400000000}], 0x30) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x21) sendfile(r2, r1, &(0x7f0000000000)=0x700, 0x100000001) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x400000) 03:43:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:24 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6800000000000000, 0x0}) 03:43:24 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x74000000}}]}) 03:43:24 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5e020000, 0x0) [ 874.406664] binder: 15385:15386 ioctl c0306201 20a20000 returned -14 03:43:25 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x6c00000000000000, 0x0}) [ 874.531243] binder: 15393:15395 ioctl c0306201 20a20000 returned -14 [ 874.598800] binder: 15403:15407 ioctl c0306201 20a20000 returned -14 03:43:25 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x60000000, 0x0) 03:43:25 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x5, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:25 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000001840)='/dev/adsp#\x00', 0x2000403, 0x400) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, 0x0) r1 = add_key(&(0x7f0000001680)='big_key\x00', &(0x7f00000016c0)={'syz', 0x1}, &(0x7f0000001700)="bffb8ea06321ed7008970ed6320db7cd829e999a422994e398905f1606b3dc29aea4a2553bccaa7dce656e7a786bc9b3cce5e814449ac573709c1eb5c8cd4da98f7e1ca46011942646e5b91176f364439a07840a0c5b1c9708f32a6fe9789cf881dce4918a765c25dba3d97ee380bc610451df9069431f0e8e2bda9b053d5c2eb1db67be240d3008a2fe35604468290c98c0609f0711ce47319d6aaa76d8b55153b7ccb6085069a9dfc7f3b364a022825b18d11495dee1fa13fdc1fb365101ff2cbb", 0xc2, 0xfffffffffffffffd) add_key(&(0x7f00000015c0)='asymmetric\x00', &(0x7f0000001600)={'syz', 0x0}, &(0x7f0000001640)="e015142c02449f9665c542d7229be174433f098ef31aef4fd1de578a3496f53a767bebbdb7583ac69fef1934295a8db94e728f37b0be", 0x36, r1) r2 = syz_open_dev$sndmidi(&(0x7f0000001380)='/dev/snd/midiC#D#\x00', 0x9, 0x400000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800)='/proc/self/net/pfkey\x00', 0x200, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001580)='TRUE', 0x4, 0x2) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0xe, 0x401) sendmsg$nl_route(r4, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000003e000c042bbd7000fbdbdf250a000000"], 0x14}}, 0x4000000) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f0000000180)={0x80323}) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, 0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f0000001300)=[{&(0x7f0000000080)="fc8d597fc234226ceb16c47cb5bf5731b74d907c9402d880a08f208862bbcf854b3db2c57604327e4f92d45b0b16cba41be5c979f60dc1b6efe5096316a6d8d5f74522d10f6cde1701c890cb2aff4521093941ba471436b5fe2b978f61c511359dc3", 0x62, 0x1}, {&(0x7f0000001500)="61ca7ed1d697c5620c9c277304bcd30f67d46d940c0f8e37f5d81194a552181f45a459dab981f4efb283908a11a77ecb7c81735f9f898b26c4e27e66d9918613f3f5e79a610fbd260f8337f190f3a7dcec8af101e3baf0788d32b0627b32af987e5a1d37ffbb33f3875c2ce9b864336c29b1da", 0x73, 0xf364}, {&(0x7f0000000300)="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", 0x1000, 0x1000}, {&(0x7f00000001c0)="ae635592fdb768c773212c0dc3e2157c47a2d40351bf49c1a13fdef16309c7b121bcbebf7299a50a0fbabf7c0701415f36bc726f53e783f380fab49ecb8b72b61049ee10d2bdfa652bb1e5d512e7adf1e38171fe3bf4cea79fd94f7732a1a1e99922836cb624a8b65ca8db816f23a4172945acf518106333b54ead9bda08098f8a12ab2cdeb6acf380dec6e5337cd78e0d332759e8e75af97348348e792531d974d6dde0040b6f5dd776de975321815fcd297eb0ceb4de3077025204b62c9df4785f0c2ceb1840a09d1ff7d6f63792c943bb63", 0xd3, 0x7}], 0x20, &(0x7f0000000140)='/dev/bus/usb/00#/00#\x00') ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f00000014c0)) 03:43:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:25 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7400000000000000, 0x0}) [ 874.753684] binder: 15412:15414 ioctl c0306201 20a20000 returned -14 [ 874.806757] vhci_hcd: invalid port number 0 03:43:25 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 874.835299] binder: 15420:15421 ioctl c0306201 20a20000 returned -14 [ 874.860232] hfs: can't find a HFS filesystem on dev loop1 03:43:25 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x7a00000000000000, 0x0}) [ 874.930817] vhci_hcd: invalid port number 0 03:43:25 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff, 0x0) [ 875.009949] binder: 15436:15441 ioctl c0306201 20a20000 returned -14 [ 875.068435] binder: 15442:15444 ioctl c0306201 20a20000 returned -14 [ 875.208590] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000074000000, [ 875.307597] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000074000000, 03:43:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7a000000}}]}) 03:43:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000103000/0x4000)=nil, 0x4000}) ioctl(r0, 0xd3, &(0x7f00000000c0)) pwrite64(r0, &(0x7f0000000000)="0c1716f6b1afcc0c9fa8af566afc9e3f8df1b80ec1cd25841f83d191a601da6502b26d2ebc937d5bf652b634801362a55a4aa623d057bbe8533068d8d010b6110b3c8e16650bf8693ddac68998523e5748fe3c746223709589b9156fd8d463f7842d4462ad170d797044468d598977569b6479aaf37c2237e9293d3335404681b9d74453d4627cb8b655331aad9d22d2081dd28e4fba90", 0x97, 0x0) close(r0) 03:43:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:25 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x800) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000040)={0x6, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:25 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:25 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb2000000, 0x0) 03:43:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000280)=r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10) r2 = getpgid(0x0) migrate_pages(r2, 0x8, &(0x7f00000000c0)=0x5, &(0x7f0000000140)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000100)=0x1) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x1, 0x36) close(r5) [ 875.420518] binder: 15467:15468 ioctl c0306201 20a20000 returned -14 03:43:26 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400200, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x609}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf96c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8810}, 0xc000) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:26 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x48, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:26 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, 0x0) 03:43:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 875.730511] binder: 15488:15498 ioctl c0306201 20a20000 returned -14 [ 875.734154] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000007a000000, [ 875.779910] hfs: can't find a HFS filesystem on dev loop1 03:43:26 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4c, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 876.047788] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x000000007a000000, [ 876.068475] device nr0 entered promiscuous mode 03:43:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8cffffff}}]}) 03:43:26 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 03:43:26 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xebffffff, 0x0) 03:43:26 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x60, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:27 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf4ffffff, 0x0) 03:43:27 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x68, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:27 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000003840)='/dev/full\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/174, 0xae}, {&(0x7f0000001340)=""/251, 0xfb}], 0x6, &(0x7f00000014c0)}, 0x10000}, {{&(0x7f0000001500)=@ax25={{0x3, @bcast}, [@null, @null, @bcast, @default, @rose, @remote, @rose, @null]}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001580)=""/35, 0x23}, {&(0x7f00000015c0)=""/60, 0x3c}, {&(0x7f0000001600)=""/53, 0x35}, {&(0x7f0000001640)=""/218, 0xda}, {&(0x7f0000001740)=""/150, 0x96}, {&(0x7f0000001800)=""/65, 0x41}, {&(0x7f0000001880)=""/206, 0xce}, {&(0x7f0000001980)=""/123, 0x7b}, {&(0x7f0000001a00)=""/170, 0xaa}], 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/129, 0x81}], 0x1, &(0x7f0000001c80)=""/99, 0x63}, 0xc1}, {{&(0x7f0000001d00)=@alg, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/220, 0xdc}], 0x2}, 0x7fff}, {{&(0x7f0000002ec0)=@un=@abs, 0x80, &(0x7f0000003140)=[{&(0x7f0000002f40)=""/10, 0xa}, {&(0x7f0000002f80)=""/117, 0x75}, {&(0x7f0000003000)=""/139, 0x8b}, {&(0x7f00000030c0)=""/65, 0x41}], 0x4}, 0xffffffff}, {{&(0x7f0000003180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003200)=""/116, 0x74}, {&(0x7f0000003280)=""/198, 0xc6}, {&(0x7f0000003380)=""/145, 0x91}, {&(0x7f0000003440)=""/42, 0x2a}, {&(0x7f0000003480)=""/97, 0x61}], 0x5, &(0x7f0000003580)=""/151, 0x97}}], 0x6, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000037c0)={'NETMAP\x00'}, &(0x7f0000003800)=0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0xffffffffffffff62, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) bind$bt_sco(r3, &(0x7f00000014c0)={0x1f, {0xfffffffffffffc00, 0x10001, 0x7cc5f1b9, 0x468bd2c6, 0x8, 0x800}}, 0x8) r5 = add_key$keyring(&(0x7f0000003900)='keyring\x00', &(0x7f0000003940)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000003880)='keyring\x00', &(0x7f00000038c0)={'syz', 0x1}, 0x0, 0x0, r5) 03:43:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x97ffffff}}]}) 03:43:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000280)=r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10) r2 = getpgid(0x0) migrate_pages(r2, 0x8, &(0x7f00000000c0)=0x5, &(0x7f0000000140)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000100)=0x1) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x1, 0x36) close(r5) 03:43:27 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:27 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6c, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:27 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf5ffffff, 0x0) [ 877.012258] binder: 15577:15578 ioctl c0306201 20a20000 returned -14 03:43:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:27 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x280, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000240)={0x40002000}) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x9, 0x6}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_timedreceive(r2, &(0x7f0000000140)=""/68, 0x44, 0x5, &(0x7f0000000080)) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x5, 0x4) 03:43:27 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x74, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:27 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff, 0x0) [ 877.321468] binder: 15598:15604 transaction failed 29189/-22, size 0-0 line 2896 [ 877.431531] device nr0 entered promiscuous mode 03:43:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:28 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7a, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:28 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x8000, 0xb2) accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x9, 0x0, [{0xa12, 0x0, 0x4691ec8d}, {0x8b3}, {0xadf, 0x0, 0x1}, {0x0, 0x0, 0x5cffffd}, {0x33e, 0x0, 0x2000000000000}, {0x613, 0x0, 0xffffffffffff6613}, {0x829, 0x0, 0x1}, {0x269, 0x0, 0xdec}, {0xb73, 0x0, 0xe0}]}) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000140)={'rose0\x00', {0x2, 0x4e23, @multicast1}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x410, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x34}}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000340)={0x4, 0x9, 0x7}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 877.484163] binder: undelivered TRANSACTION_ERROR: 29189 03:43:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xc0000000}}]}) 03:43:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000280)=r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10) r2 = getpgid(0x0) migrate_pages(r2, 0x8, &(0x7f00000000c0)=0x5, &(0x7f0000000140)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000100)=0x1) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x1, 0x36) close(r5) 03:43:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:28 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:28 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x300, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:28 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfbffffff, 0x0) 03:43:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xc0ed0000}}]}) [ 878.080843] binder: 15643:15645 ioctl c0306201 20a20000 returned -14 03:43:28 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x500, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:28 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 03:43:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:28 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xff0f0000, 0x0) [ 878.317927] binder: 15667:15671 ioctl c0306201 20a20000 returned -14 03:43:28 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x600, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:29 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 878.590261] binder: 15686:15692 ioctl c0306201 20a20000 returned -14 [ 878.921368] device nr0 entered promiscuous mode 03:43:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000280)=r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10) r2 = getpgid(0x0) migrate_pages(r2, 0x8, &(0x7f00000000c0)=0x5, &(0x7f0000000140)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000100)=0x1) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x1, 0x36) close(r5) 03:43:29 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xffffff7f, 0x0) 03:43:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xebffffff}}]}) 03:43:29 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffff45, 0x0, &(0x7f0000000040)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:29 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x700, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 879.156718] binder: 15704:15705 transaction failed 29189/-22, size 0-0 line 2896 03:43:29 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x2000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:29 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0x10000) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0x200, [], &(0x7f0000000080)=0x4}) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040000000009e6e54978387c9696531bb2dc4658bd0b1651b8de0b21d559846bcbc9037d64dd17d762cba0bc7fb3fbfb4613978d3a1e7d01e68d06c62433490874f4dece06ee9c9a9684f316fee5556880e51fc43d4bf7d645ff6bd308214e8fb3617927a9d2a0285b03daf4918b432bd1b703ed9b69d0e46c0220ba0f0a29c164d1505360d051ee2cc1b0e0507f13b2ccc093de98454f93896b3cb9a90d3ad27a4958a9b7b862b1fc387a495906826ce5de5ae3c99dcbe58ddaf4ee25611567ce738d4ea25a82f04f311e92b003b1e533f10e7573100000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 879.263728] binder: undelivered TRANSACTION_ERROR: 29189 03:43:29 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xffffff8c, 0x0) [ 879.432337] binder: 15725:15735 transaction failed 29189/-22, size 3203886522828208016-7040462399014898618 line 2896 03:43:30 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x3f00, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:30 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x400000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 879.601905] binder: undelivered TRANSACTION_ERROR: 29189 [ 879.756061] binder: 15751:15757 ioctl c0306201 20a20000 returned -14 [ 880.038350] device nr0 entered promiscuous mode 03:43:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000280)=r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10) r2 = getpgid(0x0) migrate_pages(r2, 0x8, &(0x7f00000000c0)=0x5, &(0x7f0000000140)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000100)=0x1) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x1, 0x36) close(r5) 03:43:30 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffeb, 0x0) 03:43:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xf5ffffff}}]}) 03:43:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:30 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="f792bf0e"], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400400, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000040)=0x1) 03:43:30 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4800, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 880.321143] binder: 15763:15769 unknown command 247436023 [ 880.349825] binder: 15763:15769 ioctl c0306201 20a20000 returned -22 03:43:30 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4c00, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:31 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffff4, 0x0) [ 880.421871] binder: 15763:15780 unknown command 0 03:43:31 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000040)={0x6, &(0x7f0000000140)="028b6c620ce00f571837ecefb698685add44c53d77e5e81186a9fd96008c7806e2634f186ed6593571f567fb9966376a44518931687886c3e41e46dc58326a03e9c35ad20b1675b10b30a000a739b1c1b3b15052e643f978444420519c6977784fae27c6144612f3232ef900366e819749e222f707fc232737ff7996416e0a9c1658afb07d908810941ee5f5ee5385849d2ebdf91b2c717bf6f5af3cf058904b09353a7fc4b1be13a8522eee49461d1bdb36437e9c4023fbda9b1a2e5b6b06fbdd4011939ba9f50bf3d23025c4057e6d8cb9dd2d3a8710053fb580eefccd456d541f8f327150243faa989f6c6876b29aabba88ed"}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) [ 880.473574] binder: 15763:15780 ioctl c0306201 20a20000 returned -22 03:43:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 880.606688] binder: 15790:15796 ioctl c0306201 20a20000 returned -14 03:43:31 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:31 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 880.820020] device nr0 entered promiscuous mode [ 880.931303] binder: 15815:15817 ioctl c0306201 20a20000 returned -14 03:43:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000280)=r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xf, 0x2}, 0x10) r2 = getpgid(0x0) migrate_pages(r2, 0x8, &(0x7f00000000c0)=0x5, &(0x7f0000000140)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000100)=0x1) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x1, 0x36) close(r5) 03:43:31 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffff5, 0x0) 03:43:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xf6ffffff}}]}) 03:43:31 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6800, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:31 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x4, 0x5}) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x7fffffff}, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000080)={0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 881.258113] binder: 15826:15827 ioctl c0306201 20a20000 returned -14 03:43:31 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6c00, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:31 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffff6, 0x0) 03:43:32 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000140), 0x4) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634094c846c241b7a5613c1144349797843138f49a407c6b100faa5b13b3282cbbac5d0e05aba3d831a93a84a0e48b7aa9d8efd3238b12880e1aa7cb39b9d77920b6186dea379999c5c5e71b37b788e7fbfb0f02e65f932fafcc4d03ef7f722a7101bae3f07eca7f41682c880ab5b5967a2b"], 0x0, 0x0, 0x0}) 03:43:32 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7400, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 881.543521] binder: 15851:15857 unknown command -1807719680 03:43:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 881.631557] binder: 15851:15857 ioctl c0306201 20a20000 returned -22 03:43:32 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffffb, 0x0) [ 881.841410] device nr0 entered promiscuous mode 03:43:32 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 03:43:32 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x20002) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000040)={0x4, 0xd1cb, 0x3, 0x4}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:32 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7a00, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xf8f73f00}}]}) 03:43:32 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xedc000000000, 0x0) 03:43:32 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)='/dev/binder#\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0x800, 0x7, 0x1, 0x101}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 882.283214] INFO: trying to register non-static key. [ 882.288394] the code is fine but needs lockdep annotation. [ 882.297153] turning off the locking correctness validator. [ 882.305767] CPU: 1 PID: 15903 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 882.312721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.322097] Call Trace: [ 882.324718] dump_stack+0x172/0x1f0 03:43:32 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x1000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 882.329685] register_lock_class+0x1bdc/0x1bf0 [ 882.334386] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 882.337734] binder: 15905:15906 ioctl c0306201 20a20000 returned -14 [ 882.340067] ? bpf_prog_kallsyms_find+0x50/0x2c0 [ 882.340087] ? check_noncircular+0x20/0x20 [ 882.356147] ? is_bpf_text_address+0xd3/0x170 [ 882.364920] ? kernel_text_address+0x73/0xf0 [ 882.369612] __lock_acquire+0x11f/0x4700 [ 882.373692] ? check_noncircular+0x20/0x20 [ 882.378038] ? mark_held_locks+0x100/0x100 03:43:32 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634000000000009184a98f275413957849fd2d099a21c1488402d257020b5ad70c4e6d5b1a311c7d45e9987ac8f0ca2e9de9e9ebab08e0947cfca9389764877a350ebaf5c31260f612ad6b2ba83961ed7648644fb041b42e2cbb9adb754df6b582a3545021106699ba520dee2ed28652a53ee27a935472f6d45b005a0ce0f7f35659ceb1a8f5ede942397a9cbb74a38be729ab0494e23497b389eaf6a0dec23e2f51f1cc1a6a0e8de9c022d6b3a47f2bdcb71017812de8e581a7b6e9f2297ffdb0c91558efc9a7ddd407ef9a07be453d53c5a9f0f8921bc20bfebb588fdcfe739b141e8c181dbd115abae33ab644f66cbc16aa66fcb0"], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) close(r0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040)) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000100)=0x2, 0x4) [ 882.382318] ? debug_smp_processor_id+0x1c/0x20 [ 882.387125] ? perf_trace_lock_acquire+0xf5/0x580 [ 882.391995] ? __lock_acquire+0x53b/0x4700 [ 882.396539] ? __lock_acquire+0x53b/0x4700 [ 882.400807] ? perf_trace_lock+0x510/0x510 [ 882.405069] lock_acquire+0x16f/0x3f0 [ 882.409081] ? __flush_work+0x61a/0x840 [ 882.409944] binder: 15909:15910 unknown command 4219648 [ 882.413985] __flush_work+0x640/0x840 [ 882.413999] ? __flush_work+0x61a/0x840 03:43:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="000000000000001b"], 0x0, 0x0, 0x0}) [ 882.414012] ? try_wait_for_completion+0x9a/0xd0 [ 882.414025] ? insert_work+0x3a0/0x3a0 [ 882.414039] ? mark_held_locks+0xb1/0x100 [ 882.414055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 882.414074] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 882.414090] ? refcount_inc_checked+0x70/0x70 [ 882.414107] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 882.414253] ? __drm_atomic_helper_crtc_destroy_state+0xf3/0x340 [ 882.414287] flush_work+0x18/0x20 [ 882.424469] binder: 15909:15910 ioctl c0306201 20a20000 returned -22 [ 882.428042] vkms_atomic_crtc_destroy_state+0x2d/0x40 [ 882.428114] drm_atomic_state_default_clear+0x37c/0xd60 [ 882.475127] binder: 15912:15913 unknown command 0 03:43:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, r0, 0x36) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 882.484634] drm_atomic_state_clear+0x9d/0xc0 [ 882.484651] __drm_atomic_state_free+0x3c/0xf0 [ 882.484667] drm_atomic_helper_set_config+0xe5/0x160 [ 882.484683] drm_mode_setcrtc+0x613/0x1490 [ 882.484707] ? drm_mode_getcrtc+0x870/0x870 [ 882.484721] ? perf_trace_lock_acquire+0xf5/0x580 [ 882.484739] ? drm_unbind_agp+0x20/0x20 [ 882.484752] ? find_held_lock+0x35/0x130 [ 882.484767] ? drm_unbind_agp+0x20/0x20 [ 882.484871] ? drm_lease_owner+0x45/0x60 03:43:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 882.484889] ? drm_is_current_master+0x5c/0x140 [ 882.496387] binder: 15912:15913 ioctl c0306201 20a20000 returned -22 [ 882.523608] drm_ioctl_kernel+0x23b/0x2e0 [ 882.523625] ? drm_mode_getcrtc+0x870/0x870 [ 882.523636] ? drm_setversion+0x8c0/0x8c0 [ 882.523652] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 882.523667] ? _copy_from_user+0xdd/0x150 [ 882.523682] drm_ioctl+0x545/0xa50 [ 882.523698] ? drm_mode_getcrtc+0x870/0x870 [ 882.523715] ? drm_version+0x3d0/0x3d0 [ 882.523728] ? smack_log+0x415/0x540 [ 882.523743] ? debug_smp_processor_id+0x1c/0x20 [ 882.523762] ? smk_tskacc+0x2ba/0x390 [ 882.523774] ? drm_version+0x3d0/0x3d0 [ 882.523798] do_vfs_ioctl+0xd6e/0x1390 [ 882.523812] ? smk_curacc+0x7f/0xa0 03:43:33 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 03:43:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="0263404000000000"], 0x0, 0x0, 0x0}) [ 882.523826] ? ioctl_preallocate+0x210/0x210 [ 882.523843] ? smack_file_ioctl+0x196/0x300 [ 882.523858] ? smack_file_lock+0x240/0x240 [ 882.523870] ? __fget+0x367/0x540 [ 882.523888] ? nsecs_to_jiffies+0x30/0x30 [ 882.523905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 882.523922] ? security_file_ioctl+0x93/0xc0 [ 882.523936] ksys_ioctl+0xab/0xd0 [ 882.523951] __x64_sys_ioctl+0x73/0xb0 [ 882.523968] do_syscall_64+0x103/0x610 [ 882.523989] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 882.524000] RIP: 0033:0x457f29 [ 882.524016] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 882.524024] RSP: 002b:00007f63e2c08c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 882.524037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 882.524046] RDX: 0000000020000180 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 882.524054] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 882.524062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63e2c096d4 [ 882.524076] R13: 00000000004bfc39 R14: 00000000004d16f8 R15: 00000000ffffffff [ 882.607875] binder: 15918:15919 ioctl c0306201 20a20000 returned -14 [ 882.644603] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 882.806553] binder: 15923:15924 unknown command 0 [ 882.808862] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 882.813156] binder: 15923:15924 ioctl c0306201 20a20000 returned -22 [ 882.824861] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 882.949463] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 882.949628] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 882.960030] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 882.991080] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 882.993218] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:43:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00638df4f12dc14d152a0ab451404000000000"], 0x0, 0x0, 0x0}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) [ 883.052363] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 883.071228] binder: 15936:15937 unknown command -192060672 [ 883.075503] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 883.080311] binder: 15936:15937 ioctl c0306201 20a20000 returned -22 03:43:33 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000000000, 0x0) [ 883.100795] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 883.111092] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 883.124462] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 883.139242] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 883.158374] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 883.171150] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 883.178358] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 883.184949] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 883.190189] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 883.193569] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 883.223485] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 883.231116] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:43:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfcfdffff}}]}) 03:43:33 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x2000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:33 executing program 3: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634000000000009184a98f275413957849fd2d099a21c1488402d257020b5ad70c4e6d5b1a311c7d45e9987ac8f0ca2e9de9e9ebab08e0947cfca9389764877a350ebaf5c31260f612ad6b2ba83961ed7648644fb041b42e2cbb9adb754df6b582a3545021106699ba520dee2ed28652a53ee27a935472f6d45b005a0ce0f7f35659ceb1a8f5ede942397a9cbb74a38be729ab0494e23497b389eaf6a0dec23e2f51f1cc1a6a0e8de9c022d6b3a47f2bdcb71017812de8e581a7b6e9f2297ffdb0c91558efc9a7ddd407ef9a07be453d53c5a9f0f8921bc20bfebb588fdcfe739b141e8c181dbd115abae33ab644f66cbc16aa66fcb0"], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) close(r0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040)) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000100)=0x2, 0x4) 03:43:33 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/25) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240)=[0x18, 0x48]}}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x14000) write$P9_RREAD(r3, &(0x7f0000000140)={0x97, 0x75, 0x2, {0x8c, "8882138eb27d1d02bdb4b2cb9db7a3060afcbf7d1e2f9b1f2448697eb9cd2b188a6eac9dc3e820a672c8f19b61ae4e25627a46d1e28c488bc4d54bab914de017f3bf42069722867d6ac2259eafa4b0abbdae65bd2b1e2fbee44c1a2db8721589360e1360127666cab4f532200146edd3f3b0044f409ced950fb258f720c4191f5afe61d3978aadc0ac2f9f06"}}, 0x97) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000005c0)={@empty, 0x0}, &(0x7f0000000600)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000740)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000023c0)={0x0, @broadcast, @broadcast}, &(0x7f0000002400)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002440)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002480)={@remote, @remote, 0x0}, &(0x7f00000024c0)=0xc) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000002500)={@mcast1, 0x0}, &(0x7f0000002540)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002580)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000002680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000027c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000002a80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002800)={0x234, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x218, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffe00}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x50}, 0x800) 03:43:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 883.316615] binder: 15955:15956 unknown command 4219648 [ 883.322129] binder: 15955:15956 ioctl c0306201 20a20000 returned -22 [ 883.332934] binder: 15953:15958 ioctl 4b4a 20000000 returned -22 [ 883.342025] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env 03:43:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:33 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x3000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:33 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000000000, 0x0) [ 883.367120] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 883.390694] binder: 15953:15958 got transaction to invalid handle [ 883.407659] binder: 15953:15958 transaction failed 29201/-22, size 0-16 line 2896 03:43:34 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 883.428708] binder: undelivered TRANSACTION_ERROR: 29201 [ 883.444562] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 883.451155] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 883.456263] binder: 15965:15966 ioctl c0306201 20a20000 returned -14 [ 883.470289] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env 03:43:34 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000004cede7c703e0f31b85e2364a8ecd9585cd0475e270f6e514bd668869a8e5d605f1bf7aae23590b85b9beadf9d5ca1451d46d5e6278f2e7c26a5875e339c9bd5b4992cf0fc9e503324f91fc74107370d9a2fe0259ac0f04e2b64911f3d25f96c04326c4127d88ba57259f0d01dd38b9e88764c409987604ae16b3b0cafe0ffcc1426236c586fc47d2fc4542c9d7a9801784ded68432e37644dfc91f59ed69fb2490219fac7ad141fa9d16f2515f0dc169afad010a263d84ca"], 0x0, 0x0, 0x0}) [ 883.498543] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 883.522866] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env 03:43:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:34 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 883.574469] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 883.574725] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 883.612673] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 883.634590] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 883.646610] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 883.653502] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 883.664869] binder: 15979:15981 transaction failed 29189/-22, size -5874171722045397592--455498283284211421 line 2896 [ 883.666629] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 883.731284] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 883.747078] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 883.782237] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 883.802441] binder: undelivered TRANSACTION_ERROR: 29189 [ 883.807865] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 883.844659] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 883.851198] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 883.876722] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 883.885790] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:43:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfdfdffff}}]}) 03:43:34 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000000000, 0x0) 03:43:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:34 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x5000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:34 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 883.921833] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 883.928671] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:43:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:34 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 884.017667] binder: 16005:16008 ioctl c0306201 20a20000 returned -14 [ 884.135142] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 884.141747] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 884.154897] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 884.161370] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 884.178096] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env 03:43:34 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000780)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0xe}, 0x20) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = dup2(r3, r3) sendto$isdn(r4, &(0x7f0000000200)={0x7, 0x4, "4963b84581dcc091eb47dfb2b9cd268dbf2b58b3341269f01a3643ae00f1837b748541f37d7d5cb41a5019264117c86f63a41e31193cb91f630481e407e27d8ff1ec027961deda862543bdc8343dac4c1d710b3400e544a53c5a2da4838dc9fdb087deed2480cd0d0aef747b46ef16c3b346771156901de2cc887a261b1ad968523c6e9d86fc7d0e21f991d3b8d26fb3cfbbd301f7d45c35ca9f07876d047b3a1ca67299cf0f00c54f9788a2e469bef2f0f9e7ea5038fd69e6aaa1da60c67382e7b5a977fa6dac3f2018364af5fbc14fa7cce3189480963ce3c386fed616ca6b9ba98dcf973a7965ee0d94a5eccb94bbbf42d498b009d9bb616e53"}, 0x103, 0x20000000, &(0x7f0000000000)={0x22, 0x9, 0x400, 0xf62, 0x6}, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f0000000340)=0x8) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={@mcast1, 0x80003b, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000a20000)={0xf3, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 884.201784] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 884.228502] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env 03:43:34 executing program 0: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/111, 0x6f}, {&(0x7f0000000240)=""/1, 0x1}], 0x2}, 0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="dafa27628312f571"], 0x0, 0x0, 0x0}) accept4$inet6(r1, 0x0, &(0x7f0000000300), 0x80000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000080)=0x1c) 03:43:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 884.252464] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 884.270414] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 884.283238] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:43:34 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 884.303603] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 884.319560] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 884.364522] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 884.371149] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 884.383629] binder: 16026:16032 unknown command 1646787290 [ 884.390022] binder: 16026:16032 ioctl c0306201 20a20000 returned -22 [ 884.398984] kobject: 'loop3' (000000005268df8b): kobject_uevent_env 03:43:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7ffffffffffff, 0x0) [ 884.429928] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 884.464740] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 884.479823] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 884.509057] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 884.532589] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 884.548008] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 884.555473] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 884.568821] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env 03:43:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfdffffff}}]}) 03:43:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x20000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 884.578471] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:43:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x3f000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) [ 884.644583] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 884.651204] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 884.665637] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 884.680197] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' 03:43:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x48000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 884.719797] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 884.724739] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 884.732922] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 884.734474] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:43:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe000000000000, 0x0) [ 884.797649] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 884.812308] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 884.843940] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 884.871892] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 884.884526] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env 03:43:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 884.891822] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 884.924553] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 884.931788] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 884.948603] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 884.955254] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 884.955979] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 884.961745] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 885.027187] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 885.043923] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 885.094857] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 885.101394] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 885.130584] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env 03:43:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4c000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:35 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100000000000000, 0x0) 03:43:35 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 885.148491] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 885.149603] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 885.157538] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:43:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfffffdfc}}]}) 03:43:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x60000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:35 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20200, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000077ea391fce52914557e089cc9252328d1ef4"], 0x0, 0x0, 0x0}) [ 885.227090] binder: 16099:16103 ioctl c0306201 20a20000 returned -14 03:43:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:43:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 885.267476] binder: 16105:16106 unknown command 0 [ 885.272530] binder: 16105:16106 ioctl c0306201 20a20000 returned -22 [ 885.289493] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 885.297382] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:43:35 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x8, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 885.316906] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 885.324934] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 885.354540] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env 03:43:35 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x68000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 885.363881] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 885.382481] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 885.395976] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 885.419090] binder: 16118:16120 ioctl c0306201 20a20000 returned -14 [ 885.420166] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 885.432805] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 885.444470] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 885.454710] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:43:36 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e672d9dd3fc0b37c42449afdc4ef7e7f416240bc00010000"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x400, 0x8) 03:43:36 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x200000000000000, 0x0) 03:43:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:36 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6c000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 885.572651] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 885.597729] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 885.613393] binder: 16133:16134 unknown command -572951834 [ 885.628009] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 885.638177] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 885.650403] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 885.664759] binder: 16133:16134 ioctl c0306201 20a20000 returned -22 03:43:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 885.667932] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 885.698692] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 885.711358] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 885.734561] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 885.749233] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 885.765628] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 885.783519] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 885.794075] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 885.814987] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 885.884435] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 885.892992] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 885.903544] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 885.917875] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 885.939806] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 885.949928] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 885.960487] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 885.968332] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:43:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfffffdfd}}]}) 03:43:36 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x74000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:36 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000000000)=""/3, 0x3, 0x0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000f6b4af0000000080000001b83a4f79917ecf915795eaa7ed8195d595cf32"], 0x0, 0x0, 0x0}) r3 = dup3(r0, r1, 0x80000) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000140)) 03:43:36 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x300000000000000, 0x0) 03:43:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 886.028743] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 886.068546] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' 03:43:36 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x7a000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 886.104639] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 886.124969] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 886.139133] binder: 16169:16178 got transaction to invalid handle [ 886.147330] binder: 16169:16178 transaction failed 29201/-22, size 50-0 line 2896 [ 886.160005] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 886.160362] binder: 16169:16174 ioctl 227d 20000140 returned -22 [ 886.174533] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:43:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e02000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:36 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001640)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000001700)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xaa37eb3645f3ae8) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20000, 0x0) pwritev(r2, &(0x7f0000001540)=[{&(0x7f0000000180)="315db20544920904c10247b253580e06986e7d4e177c76c24568005b0357ef36673545cb7ed7b3b1498a1ff0838d05d3b5241de8b00a55ffb403db1547a14745c7aff400c51b810712f5cd328f83f1d45f6ea808a54d58881fe8029956503316ca84ae8485d91a10b44f8951d23afff0e6eed6c51fa0edd11c1a612e4dce6968cdd0bff73cb94c0f5b05ce1ef0db12cb98db7943c18b64e7781336c9f7f80e5c2d6300beac17d4f514b4b25a0bf8237cb45096cf066f8f290b5bfe60c4a5d53ba1afe8486f6df8fbac8a58a1961779ae603e60290e2b5215f74bcbca5d455c2ee0b34e9477e1a2d51a78d1fa4acc43509e3f7f73dae18d94", 0xf8}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="89c47966cd7ce38cae518cdbcd65c7f9e7b59c073ca15f125de69096235349627cc3a075a1e37fbcbecadc3a65b3c1bff7baa9b1e661924803bd17d1c0ca8efc7888cdb2e0d6f3e2ff162baa0b63f7dfb97c89c6457b6467c50d5d8d1f593fc99fa46477ffed4b9f5d78608061b91347a28dee882929c25a3d4d927ab9e4520f0f2328cb48088dfed984b22a7152fe6fda119ba15b40a4e154c13713c495eb", 0x9f}, {&(0x7f0000001340)="ec9c0319ae376a8a3edca78e392b488e2e645f3c15896e398fa92f4bfba30298b52b420329d8de76f0c7535430211e4d2682790de496e78203aa5727", 0x3c}, {&(0x7f0000001380)="34a392909e5747960f45e2facff0109622334ece71d50b70a6156470c46565c14f5d86c3932cece6cc7983ba750f7e1bc7845a87a681dcfddce840d03e6a66c33245cdabaa900748a3c9daa75872e1fcf408ce5787818fb60d1fbce965f1452fdf2d8f694403ae9ee73e85bd74535daa9003fe2c54fd0d79c774c32b966c8c5bacfff6c20a6010ac7c36b7d68cd5c0fce304f8b3be9a01041545071befa3cc3d8484c10498c88be24212c693e3d2f7ee92cb", 0xb2}, {&(0x7f0000001440)="2ed397a2d77b85d7f0c3270f6255526f9597e00a171fc21737f17c1872f781af15a28b5d7f12a13e4bc58bfb328cbd242e28", 0x32}, {&(0x7f0000001480)="323a9737e85acc4d6bb6a7608350", 0xe}, {&(0x7f00000014c0)="7e0040be4d5b8a933346d28e11d22cf27f5351a67c2019484e6b8b3889a56c67f5fe41a3dd47", 0x26}, {&(0x7f0000001500)}], 0x9, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigpending(&(0x7f0000001740), 0x8) vmsplice(r3, &(0x7f0000002b00)=[{&(0x7f00000018c0)}, {&(0x7f0000001900)="40b1d5a8d0b7d65ba53d98367901e1d796e19071e4cd4e731aecdde1cbb586ed5379845bb5807e6b75e80dc8168ca6460c8397967344a63a07026efd787c701ad0e9fde6d3d728265049e5f1886b39dde268bd1c62fca2f5c3c78114f52f2989310bac8df7ce8e6c781e2b2ed1d3ddd260726631354860fad1dec86bc31d0a06a9afba07a3cc840158c85807fed62f6275aa1691b9ffe48d0f71038a76eadb913e84048744aab241e2c1", 0xaa}, {&(0x7f00000019c0)="60aa2a18645332698240adc246b57ab869c72ea4a67e7e77fcebde88474674809359538686c65ee6282a6562c016b9b17c01eb468c6bb02d5cc13265ea9d380fab22de7ab4769faf264580b2887ed147e38089db83ba7100fa658ff55e8578794b0913563fa898b231c883d7dbf46ec34ec2ddbb9ad943307ece53885ff3f8d06f81c472d83b89f47e0c60ad88afa1abe88495d9d8aafbc9a2173ddcde7ef3d56840982a", 0xa4}, {&(0x7f0000001a80)="55696f08316868a708c05cb5f654603fcc789f2e5243da235241f5b48563976ab125f7e400875065c609bc389eaedd1dd896cbb03e5c04476c03db58623342ee4e755b96d385bbd85b507cab838ff265", 0x50}, {&(0x7f0000001b00)="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", 0x1000}], 0x5, 0xa) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000001880)={{&(0x7f0000001780)=""/150, 0x96}, &(0x7f0000001840), 0x7}, 0x20) ppoll(&(0x7f0000000000)=[{r3, 0x8000}, {r4, 0x2024}, {r3, 0x480}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x9}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 886.199227] binder: undelivered TRANSACTION_ERROR: 29201 [ 886.209091] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 886.219620] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 886.245112] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env 03:43:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 886.268715] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 886.284717] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 886.294816] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:43:36 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x100000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 886.321496] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 886.330113] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 886.342696] binder: 16187:16191 ioctl c0306201 20a20000 returned -14 [ 886.358330] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env 03:43:36 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400000000000000, 0x0) [ 886.367944] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 886.379490] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 886.383349] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 886.427918] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 886.439261] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 886.457343] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 886.480206] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 886.506594] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 886.513258] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 886.530976] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 886.538496] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:43:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xffffff8c}}]}) 03:43:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipx\x00') setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:43:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x200000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:37 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:43:37 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x500000000000000, 0x0) 03:43:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xff, 0x8000) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="4a6f04004da64454"], 0x0, 0x0, 0x0}) [ 886.641397] binder: 16214:16215 ioctl c0306201 20a20000 returned -14 03:43:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x300000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 886.705104] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 886.711789] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 886.729469] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 886.736239] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 886.741555] binder: 16231:16232 ioctl c0306201 20a20000 returned -14 [ 886.766973] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 886.780356] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 886.796530] binder: 16231:16239 unknown command 0 03:43:37 executing program 3: open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 886.811554] binder: 16231:16239 ioctl c0306201 20a20000 returned -22 [ 886.814634] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 886.827980] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 886.857105] kobject: 'loop3' (000000005268df8b): kobject_uevent_env 03:43:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x400000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2280) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x8, 0x5, 0x8, 0x0, 0x10001, 0x80000001, 0x9, 0x5, 0x8, 0x2, 0x9, 0x8, 0x0, 0xa4, 0x400000000, 0xffffffffffffffff, 0xfff, 0xdc, 0xe4}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 886.868932] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 886.913454] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 886.935449] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 886.962750] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 886.969999] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 886.992399] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 886.997830] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.002254] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 887.012034] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.030835] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 887.038289] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 887.104901] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.111446] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.122954] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.134478] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.138798] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env 03:43:37 executing program 3: open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:43:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xffffff97}}]}) 03:43:37 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x600000000000000, 0x0) 03:43:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x500000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x8]}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x1010, r0, 0x10000fffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40406300}], 0x327, 0x0, 0x0}) 03:43:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 887.152335] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.183944] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.190998] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:43:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x600000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:37 executing program 3: open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 887.255744] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 887.262581] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 887.273876] binder: 16271:16272 transaction failed 29189/-22, size 0-0 line 2896 [ 887.290990] binder: 16271:16272 ioctl c0306201 20a20000 returned -14 03:43:37 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r3 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000783000/0x4000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000140)=""/241) [ 887.322233] binder: undelivered TRANSACTION_ERROR: 29189 [ 887.345062] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.351644] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.362037] binder: 16280:16281 ioctl c0306201 20a20000 returned -14 03:43:37 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x700000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) [ 887.369105] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 887.379476] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:43:38 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000d93000/0x2000)=nil, 0x2000, 0x4000000003, 0x30, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000061e6f02"], 0x0, 0x0, 0x0}) 03:43:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 887.424586] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 887.431284] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 887.463602] kobject: 'loop3' (000000005268df8b): kobject_uevent_env 03:43:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 887.482123] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 887.492686] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.494158] binder: 16293:16294 transaction failed 29189/-22, size 0-0 line 2896 [ 887.504983] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.544796] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 887.551389] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 887.583347] binder: undelivered TRANSACTION_ERROR: 29189 [ 887.604595] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.617046] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.656286] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 887.674536] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 887.688144] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.692079] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 887.700717] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.709993] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' 03:43:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xffffffeb}}]}) 03:43:38 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x700000000000000, 0x0) 03:43:38 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x2000000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:38 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x81, 0x4e840) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$sndpcmp(&(0x7f00000055c0)='/dev/snd/pcmC#D#p\x00', 0xa, 0x400) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000005600), &(0x7f0000005640)=0x18) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0063403ffffffff6adabad88d79cde55b774d1f0f818f087e2cfd07a589e36a7a42310145a9a470c820951667c16bc1405e6f12086baf04ef3376663080f9d9cf8"], 0x0, 0x0, 0x0}) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:43:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:43:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:43:38 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x3f00000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:38 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x840000000000031, r0, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x3, 0x1, 0x8, 0x3f, 'syz1\x00', 0x3}, 0x1, [0x3, 0xb8, 0x9, 0xbd, 0x4, 0xfffffffffffffff8, 0x398, 0x7, 0x100000001, 0x2, 0x5, 0x1, 0x9, 0x914, 0x3, 0x3ff, 0x10000, 0xffff, 0x4, 0x8, 0x2, 0x1, 0x9, 0x6, 0x9, 0x7f1, 0x4b6a7fa9, 0x4, 0x8, 0x200, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0x100, 0x6c, 0x1, 0x7fffffff, 0x5f, 0x4, 0x6, 0x6, 0xf35, 0x5, 0x1, 0x5, 0x1ff, 0x9, 0x2, 0xee73, 0x6, 0x1ff, 0x7fffffff, 0x8, 0x3, 0x40, 0x0, 0x31, 0x2, 0xa000, 0xfffffffffffffff9, 0x1, 0x0, 0xff, 0xfffffffffffffff8, 0x9, 0x85e1, 0x7fe, 0x0, 0x7, 0x3f, 0x9, 0x80, 0xe9d, 0x40, 0x3, 0x8001, 0x6, 0x0, 0x4, 0x0, 0x10000000000000, 0x101, 0xfffffffffffffff9, 0x1f, 0x2f1, 0x0, 0x8, 0x6, 0x2, 0x4, 0x200, 0x6, 0x5, 0x10001, 0x0, 0x2, 0x4, 0x5, 0x5, 0x9, 0x58ab, 0x7, 0x88, 0x6, 0x800000000000, 0x40, 0x3a76, 0xfffffffffffffff8, 0x6, 0x1, 0x1ff, 0x7, 0x69f0566b, 0x7, 0xfffffffffffffff9, 0xb1, 0x40, 0x6, 0x9, 0x2, 0xffffffff, 0x1000, 0x3, 0xde, 0x9, 0x8, 0x4, 0x1], {r2, r3+30000000}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000700)={0x0, 0x7fff}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000780)={0x8000, 0x820e, 0xf800000000000, 0x7, r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) ioctl$NBD_SET_SIZE(r6, 0xab02, 0x100) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x262, 0x0, 0x0, 0x0, 0xd2a, &(0x7f0000000000)='bond0\x00', 0xffffffff, 0x10000, 0x81}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1a665c9ebdb3b608eb0af63ae02215dc29f3357a2d17bc37706663f4f348"], 0x0, 0x0, 0x0}) ioctl$UI_DEV_DESTROY(r6, 0x5502) 03:43:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 887.840240] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 887.850077] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 887.875654] binder: 16326:16327 unknown command -1638111718 [ 887.881586] binder: 16326:16327 ioctl c0306201 20a20000 returned -22 [ 887.907219] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 887.913706] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 887.941136] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env 03:43:38 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0x8, 0x7, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) [ 887.954955] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 887.961982] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 887.974772] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 887.993140] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env 03:43:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 888.024479] binder: 16334:16335 ioctl c0306201 20a20000 returned -14 03:43:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 888.042110] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 888.163085] binder: 16334:16347 ioctl c0306201 20a20000 returned -14 [ 888.169942] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 888.184673] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 888.199810] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 888.211026] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 888.230823] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 888.242666] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 888.261882] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 888.264692] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 888.334692] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 888.341277] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 888.371967] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 888.378901] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 888.401493] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 888.412394] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 888.423319] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env 03:43:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfffffff5}}]}) 03:43:39 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4800000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:39 executing program 1: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x800000000000000, 0x0) 03:43:39 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:43:39 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) r3 = mmap$binder(&(0x7f0000ab8000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) r6 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0xd656, 0x2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000500)={0x0, 0x3f}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xd0, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r2}, @exit_looper, @release={0x40046306, 0x2}, @exit_looper, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x80000000, 0x0, 0x10, 0x0, 0x0, 0x60, 0x30, &(0x7f0000000140)=[@flat={0x77682a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x1, 0x3, 0x1e}, @fda={0x66646185, 0x2, 0x3, 0x13}], &(0x7f00000001c0)=[0x0, 0x40, 0x0, 0x18, 0x20, 0x30]}, 0x9}}, @transaction={0x40406300, {0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000240)=[@flat={0x0, 0x100, r4, 0x4}], &(0x7f0000000280)=[0x28, 0x38, 0x30, 0x18, 0x20, 0x18, 0x78, 0x0]}}, @free_buffer={0x40086303, r5}, @increfs, @increfs={0x40046304, 0x1}], 0x50, 0x0, &(0x7f0000000400)="740b7488d88fa4099b1ae5ecc508dca047c80957c1050500d86f80aed2212224fabae56094db9f019212712209dbae28867911c4aec357f8d7d53aa1b1a088eeb41fdc71800e81d5f8497184b424d689"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) 03:43:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 888.429932] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:43:39 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 03:43:39 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x4c00000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:39 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 888.533611] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 888.545447] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 888.561223] binder: 16375:16377 ioctl c0306201 20a20000 returned -14 [ 888.571781] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env 03:43:39 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x1ff, 0x3) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7, 0x1f}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r4, 0xcde7}, 0x8) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) [ 888.581213] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 888.611746] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 888.632761] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 888.666293] kobject: 'loop3' (000000005268df8b): kobject_uevent_env 03:43:39 executing program 5: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x6000000000000000, &(0x7f0000fc1ffc)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 03:43:39 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 888.682393] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 888.691165] binder: 16388:16389 ioctl c0306201 20a20000 returned -14 [ 888.705189] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 888.714191] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 888.808511] kobject: 'loop4' (000000007d920ee5): kobject_uevent_env [ 888.821691] kobject: 'loop4' (000000007d920ee5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 888.825293] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 888.840821] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 888.841083] kobject: 'loop5' (000000009a3d3d71): kobject_uevent_env [ 888.858179] kobject: 'loop5' (000000009a3d3d71): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 888.869194] kobject: 'loop3' (000000005268df8b): kobject_uevent_env [ 888.875799] kobject: 'loop3' (000000005268df8b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 888.885901] kobject: 'loop1' (00000000d48d3d74): kobject_uevent_env [ 888.892432] kobject: 'loop1' (00000000d48d3d74): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 888.924505] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 888.931424] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 888.957090] kobject: 'loop2' (000000005016ef6d): kobject_uevent_env [ 888.963791] kobject: 'loop2' (000000005016ef6d): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:43:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfffffff6}}]}) 03:43:39 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in6}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil,