4c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x83, 0xd9f2}) 01:11:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) [ 1030.566774][ T4095] binder: 3906:4095 ioctl c0306201 20000200 returned -14 [ 1030.606428][ T4130] binder: 4127:4130 transaction failed 29201/-28, size 4-0 line 3147 01:11:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48000000, 0x0, 0x0}) 01:11:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1030.735479][ T4259] binder: BINDER_SET_CONTEXT_MGR already set [ 1030.751164][ T4259] binder: 4256:4259 ioctl 40046207 0 returned -16 [ 1030.771853][ T4259] binder_alloc: 4127: binder_alloc_buf failed to map pages in userspace, no vma 01:11:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000080)=0x1e) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:46 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) [ 1030.801712][ T4259] binder: 4256:4259 transaction failed 29189/-3, size 0-0 line 3147 [ 1030.817579][ T4259] binder: 4256:4259 ioctl c0306201 20000200 returned -14 01:11:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1d, 0x0, "ea3ee7d780917776e53dd4bc07422093c85559f58ff08f8b652ee65c957896f9a52f177345d3c95451c1e6920ebc018add480dae1c42da5e75494c161c3c6ca5", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c2d1053b0da1c518868a5c211243c8b509ffac1db536fa47ffc8ef94c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000180)={'batadv0\x00', {0x2, 0x4e24, @empty}}) 01:11:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1030.883365][ T4346] binder: 4343:4346 transaction failed 29201/-71, size 0-0 line 3044 [ 1030.908702][ T4259] binder: BINDER_SET_CONTEXT_MGR already set 01:11:46 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) [ 1030.953736][ T4259] binder: 4256:4259 ioctl 40046207 0 returned -16 [ 1030.978187][ T4354] binder: 4256:4354 transaction failed 29201/-71, size 0-0 line 3044 01:11:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c000000, 0x0, 0x0}) [ 1031.002908][ T4354] binder: 4256:4354 ioctl c0306201 20000200 returned -14 [ 1031.011994][ T6208] binder: release 4256:4354 transaction 7287 out, still active 01:11:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1031.126851][ T4553] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.145498][ T4553] binder: 4535:4553 ioctl 40046207 0 returned -16 01:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) write$capi20_data(r2, &(0x7f0000000080)={{0x10, 0x751, 0x8f, 0x83, 0x4, 0x8}, 0xb9, "153873dcbe293b1cf96057036def46e1a185bc0e0d21088a3e76db0070553a9c88f5d4ec4f25500b03c83de304c538bb1ea80cc66060f6626d155321689466c5ecc007e3e316127a990170b68fff4fc6c27690f976b66a67684796ba085f6854e7a6f7f5b9998a82691cb2bc7d86b38741b2e06cddc689bb7a875982061c719a372d735218e6c435fc476168f94e0d973b3271f984a27056b810b7ad7d702807dcfb6b2ff452a7ed4c8918c5cfb2e8ddbede53feed80d986f4"}, 0xcb) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:47 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) [ 1031.179685][ T4574] binder: 4535:4574 ioctl c0306201 20000200 returned -14 [ 1031.187084][ T6208] binder: send failed reply for transaction 7285 to 4343:4346 01:11:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x8000, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x6, 0x4, 0x5, 0x5, 0x2, 0x81, 0x7}, 0xc) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008004) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1d, 0x0, "ea3ee7d780917776e53dd4bc07422093c85559f58ff08f8b652ee65c957896f9a52f177345d3c95451c1e6920ebc018add480dae1c42da5e75494c161c3c6ca5", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c2d1053b0da1c518868a5c211243c8b509ffac1db536fa47ffc8ef94c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[0xb45b930, 0x2, 0x0, 0x100, 0x6]}) [ 1031.234305][ T6208] binder: send failed reply for transaction 7287, target dead [ 1031.236509][ T4553] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1031.236516][ T4553] binder_alloc: 4535: binder_alloc_buf, no vma [ 1031.258860][ T6208] binder: send failed reply for transaction 7289 to 4535:4574 01:11:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) [ 1031.315770][ T4553] binder: 4535:4553 ioctl c0306201 20000200 returned -14 01:11:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x60000000, 0x0, 0x0}) 01:11:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2000000000000800) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1031.394101][ T6208] binder: send failed reply for transaction 7294 to 4576:4578 01:11:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) [ 1031.519318][ T4796] binder: BINDER_SET_CONTEXT_MGR already set 01:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0)) semget$private(0x0, 0x2, 0x8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000440), 0x4) r1 = creat(&(0x7f0000000a80)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x10, 0x5, 0x1000f4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='Wo\x00']) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) r4 = open(&(0x7f00000008c0)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team_slave_0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x2) sendfile(r1, r4, 0x0, 0x8000fffffffe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x10000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1d, 0x0, "ea3ee7d780917776e53dd4bc07422093c85559f58ff08f8b652ee65c957896f9a52f177345d3c95451c1e6920ebc018add480dae1c42da5e75494c161c3c6ca5", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c2d1053b0da1c518868a5c211243c8b509ffac1db536fa47ffc8ef94c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) [ 1031.561248][ T4796] binder: 4764:4796 ioctl 40046207 0 returned -16 [ 1031.622358][ T4910] binder: 4764:4910 ioctl c0306201 20000200 returned -14 01:11:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) 01:11:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000deff0000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000"], 0x0, 0x0, 0x0}) 01:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1031.692484][ T4796] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.792299][ T4796] binder: 4764:4796 ioctl 40046207 0 returned -16 [ 1031.794184][ T4910] binder_alloc: 4712: binder_alloc_buf, no vma [ 1031.798939][ T6208] binder: release 4764:4910 transaction 7299 out, still active [ 1031.806148][ T4946] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.824926][ T4910] binder: 4764:4910 ioctl c0306201 20000200 returned -14 [ 1031.832709][ T4946] binder: 4945:4946 ioctl 40046207 0 returned -16 01:11:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68000000, 0x0, 0x0}) 01:11:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) [ 1031.848468][ T6208] binder: release 4712:4742 transaction 7297 out, still active [ 1031.856072][ T6208] binder: send failed reply for transaction 7297, target dead [ 1031.877454][ T4912] overlayfs: unrecognized mount option "Wo" or missing value [ 1031.926294][ T6208] binder: send failed reply for transaction 7299, target dead 01:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000700)={0x1008, 0xa3f, "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"}, 0x100) 01:11:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x5, 0x1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0xb, 0x5, "74b2764a3c262ef214480424521fb3f166a82968c9b1876c85e26955c365105fb318c2b2764be1b1e6dc39e5624940dff7eadae53b0beae7d7b6d602f3986985", "68a2a4e4192f5279383319fec2bba9f20100a3ac6f53104d8fedee582232af9e3c7e5a2e6d2d507ad924175c184b845d29ac541ffadce706625b516e761c1b2d", "2f94e7507cf64a862574486664cc4d76485f7b37095dc7f339c3df615d2303a6", [0x200, 0x8]}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x1, 0x1d, 0xffffffffffffffff, "ea3ee7d7808ff08f8b652ee65c957896f9a52f177345d3c95451c1e6920ebc018add480dae1c42da5e75494c161c3c6ca500", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c84b2957ab904f61c68a5c211243c8b509ffac1db536fa47ffc8ef94c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000)) [ 1032.013259][ T5118] binder_alloc: 5083: binder_alloc_buf, no vma [ 1032.048009][ T5118] binder: 5083:5118 ioctl c0306201 20000200 returned -14 [ 1032.098180][ T5118] binder: BINDER_SET_CONTEXT_MGR already set 01:11:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) [ 1032.138617][ T5143] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.156890][ T5118] binder: 5083:5118 ioctl 40046207 0 returned -16 01:11:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1032.186245][ T5143] binder: 5141:5143 ioctl 40046207 0 returned -16 [ 1032.197456][ T5147] binder_alloc: 5083: binder_alloc_buf, no vma 01:11:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1032.233724][ T5147] binder: 5083:5147 ioctl c0306201 20000200 returned -14 01:11:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) 01:11:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c000000, 0x0, 0x0}) 01:11:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1d, 0x0, "ea3ee7d780917776e53dd4bc07422093c85559f58ff08f8b652ee65c937896f9a52f177345d3c95451c1e6920ebc018add480dae1c42da5e75494c161c3c6ca5", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c2d1053b0da1c518868a5c211243c8b509ffac1db536fa47ffc8ef94c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) 01:11:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000c, 0x20011, r1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xffffffffffffff9a, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f00000000c0)=[@flat={0x73682a85, 0x1, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x2, 0x3b}], &(0x7f0000000100)=[0x78]}}], 0x0, 0x0, 0x0}) 01:11:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) [ 1032.435096][ T5466] binder_alloc: 5465: binder_alloc_buf, no vma 01:11:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x8000, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0xfa3, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x7f, 0x800) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1d, 0x0, "ea3ee7d780917776e53dd4bc07422093c85559f58ff08f8b652ee65c957896f9a52f177345ae1c42da5e75494c161c3c6ca500", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c2d1053b0da1c518868a5c211f94c0f1700", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) [ 1032.490905][ T5473] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.496936][ T5473] binder: 5472:5473 ioctl 40046207 0 returned -16 [ 1032.509367][ T5466] binder: 5465:5466 ioctl c0306201 20000200 returned -14 [ 1032.563726][ T5481] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.579112][ T5481] binder: 5465:5481 ioctl 40046207 0 returned -16 01:11:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) 01:11:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1032.615341][ T5482] binder: 5465:5482 ioctl c0306201 20000200 returned -14 01:11:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x75, 0x2, 0x5, "8f7aa63315ae9427bf1d304a75d10e40", "3c478b146db3bf79d800e09feac52686cf35f9536e778c5f67d13337e0be62300e387b93efcf3d6fc4d91926ed6028383b3e366cfc8683e4740c03ac57bff00f5a288ab579b41b822bbc586f9d5a6e3b4b1edff2709e0e59c83a04edc50df907"}, 0x75, 0x3) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @multicast2}, &(0x7f0000000180)=0x8) 01:11:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x74000000, 0x0, 0x0}) 01:11:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af00, 0x0) 01:11:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1d, 0x0, "ea3ee7d780917776e53dd4bc07422093c85559f58ff08f8b652ee65c957896f9a52f177345d3c95451c1e6920ebc018add480dae1c42da5e75494c161c3c6ca5", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c2d1053b0da1c518868a5c211243c8b509ffac1db536fa47ffc8ef94c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x90042, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in6=@rand_addr="0bb7ee6a3b0086c48c2618a68835315d", 0x4e21, 0x8, 0x4e23, 0x0, 0x2, 0xa0, 0x80, 0x87, r2, r3}, {0xffffffff, 0x27fe9fe1, 0x0, 0x5, 0x8, 0x7ff, 0x9f, 0x3}, {0x4, 0x1, 0x7, 0x5}, 0x71, 0x6e6bbc, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d5, 0xff}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x10001, 0x4, 0x9, 0x9}}, 0xe8) [ 1032.792330][ T5697] binder_transaction: 8 callbacks suppressed [ 1032.792343][ T5697] binder: 5694:5697 got new transaction with bad transaction stack, transaction 7309 has target 5694:0 [ 1032.812308][ T5699] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.842425][ T5699] binder: 5696:5699 ioctl 40046207 0 returned -16 [ 1032.866448][ T5705] binder: 5696:5705 got new transaction with bad transaction stack, transaction 7311 has target 5694:0 01:11:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1032.888700][ T5705] binder: 5696:5705 ioctl c0306201 20000200 returned -14 01:11:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) 01:11:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1032.915968][ T5699] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.942788][ T5699] binder: 5696:5699 ioctl 40046207 0 returned -16 [ 1032.952652][ T5705] binder: 5696:5705 got new transaction with bad transaction stack, transaction 7313 has target 5694:0 [ 1032.966226][ T5705] binder: 5696:5705 ioctl c0306201 20000200 returned -14 [ 1033.013432][ T7769] binder: release 5696:5705 transaction 7311 out, still active [ 1033.026756][ T7769] binder_release_work: 8 callbacks suppressed [ 1033.026761][ T7769] binder: undelivered TRANSACTION_COMPLETE 01:11:48 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000300)={r1, 0x3}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000080), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000240)={0xed5d, 0x9, 0xffff, 0x19, &(0x7f00000000c0)=""/25, 0x1c, &(0x7f0000000100)=""/28, 0xa3, &(0x7f0000000140)=""/163}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2001e, r3, 0x80000000000000) r5 = getpid() ptrace$cont(0x7, r5, 0x8, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a000000, 0x0, 0x0}) [ 1033.072863][ T7769] binder: release 5696:5705 transaction 7313 out, still active [ 1033.106674][ T7769] binder: undelivered TRANSACTION_COMPLETE 01:11:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) 01:11:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x3, 0x7, 0x81, 'queue1\x00', 0x4}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6e, 0x400000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'ip6tnl0\x00', {0x2, 0x4e22, @empty}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1d, 0x0, "ea3ee7d780917776e53dd4bc07422093c85559f58ff08f8b652ee65c957896f9a52f177345d3c95451c1e6920ebc018add480dae1c42da5e75494c161c3c6ca5", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c2d1053b0da1c518868a5c211243c8b509ffac1db536fa47ffc8ef94c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c15b390df58"}) [ 1033.131195][ T7769] binder: send failed reply for transaction 7309 to 5694:5697 [ 1033.142448][ T5921] binder_alloc: 5920: binder_alloc_buf, no vma [ 1033.154603][ T7769] binder: send failed reply for transaction 7311, target dead [ 1033.166243][ T7769] binder: send failed reply for transaction 7313, target dead [ 1033.205328][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1033.218366][ C0] net_ratelimit: 22 callbacks suppressed [ 1033.218374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.229891][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1033.235725][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.241530][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1033.248178][ T5928] binder: BINDER_SET_CONTEXT_MGR already set 01:11:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1033.254439][ T5928] binder: 5923:5928 ioctl 40046207 0 returned -16 [ 1033.262437][ T5928] binder_alloc: 5920: binder_alloc_buf, no vma [ 1033.285283][ T5928] binder: 5923:5928 ioctl c0306201 20000200 returned -14 01:11:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1033.316184][ T5928] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.334299][ T6067] binder_alloc: 5920: binder_alloc_buf, no vma 01:11:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) [ 1033.363624][ T5928] binder: 5923:5928 ioctl 40046207 0 returned -16 01:11:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x1, 0x1d, 0xffffff7ffffffffd, "ea3ee7d780917776e53dd4bc07422093c85559f58ff08f8b652ee65c957896f9a52f177345d3c95451c1e6920ebc018add480dae1c42da5e75494c161c3c6ca5", "c2f94735b5d2e47f07c77e5a88927c463395800d4203c45b0058e9479c415044f87c2d1053b0da1c518868a5c211243c8b509ffac1db536fa47ffc8ef94c0f17", "30846cc0820a10d5a410cfeb6ed08c849377637675b74bb0cc483c14b390df58", [0x5b2a]}) r1 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) [ 1033.403919][ T6067] binder: 5923:6067 ioctl c0306201 20000200 returned -14 [ 1033.432454][ T6140] binder: 6139:6140 got new transaction with bad transaction stack, transaction 7320 has target 6139:0 01:11:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff, 0x0, 0x0}) 01:11:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1033.543194][ T6203] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.552672][ T6203] binder: 6199:6203 ioctl 40046207 0 returned -16 [ 1033.570979][ T6203] binder: 6199:6203 got new transaction with bad transaction stack, transaction 7322 has target 6139:0 01:11:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) [ 1033.594936][ T6203] binder: 6199:6203 ioctl c0306201 20000200 returned -14 [ 1033.613753][ T6203] binder: BINDER_SET_CONTEXT_MGR already set 01:11:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="00d27f2cf01534d75e26a723ef0956e4738f5adf0dd0f5b344ba9c06878d0a1bd0914ebd7e5a519e71574d6b8d7ebe902bf9871335371a79fce7b3c0", 0x3c}, {&(0x7f0000000080)="47dcbf65f67d53a366f3fc5c53f3d8bc4d189da14bf697000101061e56712cab8e15b2c9bb19dc8d01155d40f88bc67e2da2d3da2729a2785c51e66e64a1c69b6e2ea1ac3d129b43ec064d84e0144876a2798f5678d34cdccb7b881278c11c66b872655901dafec0d02f36c274149a67a9eb0685868e5e67ff666ce2165a", 0x7e}], 0x2, 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5, 0x60101) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000240)={0x0, @data}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b0600000000000000"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000300)) [ 1033.654779][ T6301] binder: 6199:6301 got new transaction with bad transaction stack, transaction 7324 has target 6139:0 [ 1033.687590][ T7769] binder: send failed reply for transaction 7320 to 6139:6140 [ 1033.708174][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1033.731449][ T6203] binder: 6199:6203 ioctl 40046207 0 returned -16 [ 1033.745943][ T7769] binder: undelivered TRANSACTION_COMPLETE 01:11:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) 01:11:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1033.759022][ T6364] binder: 6362:6364 got new transaction with bad transaction stack, transaction 7327 has target 6362:0 [ 1033.773226][ T6301] binder: 6199:6301 ioctl c0306201 20000200 returned -14 [ 1033.788736][ T6208] binder: undelivered TRANSACTION_COMPLETE 01:11:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffdfd, 0x0, 0x0}) 01:11:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) 01:11:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1033.947586][ T6414] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.987292][ T6414] binder: 6412:6414 ioctl 40046207 0 returned -16 01:11:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000003c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xd0, 0x0, &(0x7f0000000240)=[@register_looper, @transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185, 0x1, 0x3, 0x24}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000000)=[0x20]}, 0x10001}}, @register_looper, @release={0x40046306, 0x1}, @release={0x40046306, 0x1}, @exit_looper, @release={0x40046306, 0x2}, @release={0x40046306, 0x4}, @acquire_done={0x40106309, r2, 0x3}, @transaction={0x40406300, {0x4, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x78, 0x78, 0x18]}}], 0x1, 0x0, &(0x7f00000001c0)="f5"}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000006dbc96000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x6, 0x2, 0xffffffffffffffe1, 0x2, 0x6}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000380)) [ 1034.016472][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1034.050156][ T6488] binder: 6412:6488 ioctl c0306201 20000200 returned -14 01:11:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x8008af00, 0x0) 01:11:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1034.074989][ T6490] binder: 6489:6490 ioctl 8070ae9f 200003c0 returned -22 [ 1034.082858][ T6488] binder_alloc: 6412: binder_alloc_buf, no vma [ 1034.095065][ T6488] binder: 6412:6488 ioctl c0306201 20000200 returned -14 [ 1034.107320][ T6490] binder: 6489:6490 ERROR: BC_REGISTER_LOOPER called without request [ 1034.133843][ T6490] binder: 6489:6490 got transaction to invalid handle [ 1034.143304][ T7769] binder_release_work: 39 callbacks suppressed [ 1034.143310][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 01:11:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x100000000000000, 0x0, 0x0}) 01:11:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1034.177366][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1034.189316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.195719][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.202658][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.209248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.263953][ T6583] binder_alloc: 6568: binder_alloc_buf, no vma 01:11:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x8008af00, 0x0) [ 1034.307921][ T6583] binder: 6568:6583 ioctl c0306201 20000200 returned -14 [ 1034.342239][ T6583] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.348226][ T6583] binder: 6568:6583 ioctl 40046207 0 returned -16 01:11:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1034.369781][ T6707] binder: 6568:6707 ioctl c0306201 20000200 returned -14 [ 1034.398929][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1034.406424][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 01:11:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1034.418370][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.424140][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:11:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x8008af00, 0x0) 01:11:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x200000000000000, 0x0, 0x0}) [ 1034.481557][ T6715] binder: 6711:6715 got new transaction with bad transaction stack, transaction 7337 has target 6711:0 01:11:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x40000000000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3, 0x101000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @loopback}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions='default_permissions'}], [{@obj_role={'obj_role', 0x3d, ',]*#!\xbfposix_acl_access@'}}, {@uid_eq={'uid', 0x3d, r5}}, {@smackfstransmute={'smackfstransmute'}}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) 01:11:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000080)=""/9, &(0x7f00000000c0)=0x9) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1034.653511][ T6828] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.687590][ T6208] binder: release 6711:6715 transaction 7337 out, still active [ 1034.695511][ T6828] binder: 6743:6828 ioctl 40046207 0 returned -16 01:11:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1034.710022][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1034.715996][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 01:11:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1034.772065][ T6208] binder: send failed reply for transaction 7337, target dead [ 1034.785610][ T6828] binder: 6743:6828 got new transaction with bad transaction stack, transaction 7340 has target 6834:0 [ 1034.804478][ T6838] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.825822][ T6838] binder: 6837:6838 ioctl 40046207 0 returned -16 [ 1034.825886][ T6835] binder: 6834:6835 got new transaction with bad transaction stack, transaction 7342 has target 6834:0 [ 1034.859796][ T6835] binder_transaction: 26 callbacks suppressed [ 1034.859814][ T6835] binder: 6834:6835 transaction failed 29201/-71, size 0-0 line 3044 [ 1034.881886][ T6828] binder: 6743:6828 transaction failed 29201/-71, size 0-0 line 3044 [ 1034.905431][ T6828] binder: 6743:6828 ioctl c0306201 20000200 returned -14 01:11:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1034.942002][ T6828] binder: BINDER_SET_CONTEXT_MGR already set 01:11:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000080)=""/9, &(0x7f00000000c0)=0x9) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1035.013175][ T6828] binder: 6743:6828 ioctl 40046207 0 returned -16 [ 1035.022679][ T6208] binder: release 6743:6828 transaction 7340 out, still active [ 1035.043184][ T6987] binder: 6743:6987 transaction failed 29201/-71, size 0-0 line 3044 01:11:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x111040, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='cpuacct.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x7ff, 0x9, "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", 0xda, 0x31f, 0x7, 0x6, 0x5, 0x3, 0x3}, r4}}, 0x128) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xf8, r6, 0x30b, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xf8}}, 0x0) [ 1035.058887][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1035.070367][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1035.084559][ T6987] binder: 6743:6987 ioctl c0306201 20000200 returned -14 [ 1035.096261][ T7769] binder: send failed reply for transaction 7340, target dead 01:11:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300000000000000, 0x0, 0x0}) 01:11:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1035.111362][ T7195] binder: 7168:7195 transaction failed 29201/-71, size 0-0 line 3044 [ 1035.111424][ T7769] binder_send_failed_reply: 3 callbacks suppressed [ 1035.111433][ T7769] binder: send failed reply for transaction 7342 to 6834:6835 01:11:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1035.217845][ T7258] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.247585][ T7769] binder: send failed reply for transaction 7344 to 6743:6987 [ 1035.261641][ T7258] binder: 7249:7258 ioctl 40046207 0 returned -16 01:11:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000080)=""/9, &(0x7f00000000c0)=0x9) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1035.273604][ T7260] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.302302][ T7260] binder: 7259:7260 ioctl 40046207 0 returned -16 [ 1035.326662][ T7769] binder: send failed reply for transaction 7347 to 7168:7195 [ 1035.353420][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1035.360083][ T7352] binder: 7259:7352 transaction failed 29189/-22, size 0-0 line 2994 [ 1035.375888][ T7769] binder: undelivered TRANSACTION_ERROR: 29201 01:11:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x2, 0x80000001}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x189) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000000c0)={0x7f, @broadcast, 0x4e22, 0x4, 'nq\x00', 0x2, 0x6, 0x45}, 0x2c) r3 = getpgrp(0xffffffffffffffff) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180)=0x8, 0x4) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000100)={0x17, 0xffffffff, 0x200}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1035.410417][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1035.415160][ T7352] binder: 7259:7352 ioctl c0306201 20000200 returned -14 [ 1035.425628][ T7414] binder: 7299:7414 transaction failed 29201/-71, size 0-0 line 3044 [ 1035.430867][ T7769] binder: undelivered TRANSACTION_ERROR: 29201 [ 1035.475930][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1035.479111][ T7260] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.513114][ T7260] binder: 7259:7260 ioctl 40046207 0 returned -16 01:11:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000080)=""/9, &(0x7f00000000c0)=0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1035.513181][ T7769] binder: release 7299:7414 transaction 7351 out, still active [ 1035.529117][ T7521] binder: BINDER_SET_CONTEXT_MGR already set 01:11:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x400000000000000, 0x0, 0x0}) [ 1035.594724][ T7521] binder: 7513:7521 ioctl 40046207 0 returned -16 [ 1035.611453][ T7769] binder: send failed reply for transaction 7351, target dead 01:11:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000080)=""/9, &(0x7f00000000c0)=0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1035.671265][ T7610] binder: 7588:7610 transaction failed 29189/-22, size 0-0 line 2994 [ 1035.688610][ T7628] binder: 7627:7628 transaction failed 29189/-3, size 0-0 line 3147 01:11:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1035.744515][ T7628] binder: 7627:7628 ioctl c0306201 20000200 returned -14 01:11:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20014, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1035.803781][ T7765] binder: 7763:7765 transaction failed 29189/-3, size 0-0 line 3147 [ 1035.835982][ T7628] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.876772][ T7628] binder: 7627:7628 ioctl 40046207 0 returned -16 [ 1035.880407][ T7785] binder: 7627:7785 transaction failed 29189/-3, size 0-0 line 3147 [ 1035.892542][ T7812] binder: BINDER_SET_CONTEXT_MGR already set 01:11:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000080)=""/9, &(0x7f00000000c0)=0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x500000000000000, 0x0, 0x0}) [ 1035.929388][ T7812] binder: 7790:7812 ioctl 40046207 0 returned -16 [ 1035.958515][ T7785] binder: 7627:7785 ioctl c0306201 20000200 returned -14 01:11:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:11:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x9, 0xfffffffffffffff8}) 01:11:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1036.066437][ T7968] binder: 7934:7968 ioctl c0306201 20000200 returned -14 [ 1036.138047][ T7974] binder: BINDER_SET_CONTEXT_MGR already set [ 1036.168899][ T7968] binder: BINDER_SET_CONTEXT_MGR already set 01:11:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1036.183247][ T7974] binder: 7973:7974 ioctl 40046207 0 returned -16 [ 1036.197419][ T7976] binder: 7934:7976 ioctl c0306201 20000200 returned -14 [ 1036.198011][ T7979] binder: BINDER_SET_CONTEXT_MGR already set [ 1036.207804][ T7968] binder: 7934:7968 ioctl 40046207 0 returned -16 01:11:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x600000000000000, 0x0, 0x0}) [ 1036.264800][ T7979] binder: 7975:7979 ioctl 40046207 0 returned -16 [ 1036.331983][ T8149] binder_alloc_new_buf_locked: 6 callbacks suppressed [ 1036.331991][ T8149] binder_alloc: 8143: binder_alloc_buf, no vma [ 1036.346634][ T8149] binder: 8143:8149 ioctl c0306201 20000200 returned -14 [ 1036.356199][ T8149] binder: BINDER_SET_CONTEXT_MGR already set [ 1036.362733][ T8167] binder_alloc: 8143: binder_alloc_buf, no vma 01:11:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:11:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffffffff800}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x192, 0x4, 0x81}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 01:11:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1036.384252][ T8149] binder: 8143:8149 ioctl 40046207 0 returned -16 [ 1036.405940][ T8167] binder: 8143:8167 ioctl c0306201 20000200 returned -14 01:11:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1036.449936][ T8221] binder: 8219:8221 unknown command 1077967616 01:11:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700000000000000, 0x0, 0x0}) [ 1036.495877][ T8221] binder: 8219:8221 ioctl c0306201 20000200 returned -22 01:11:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, 0x0) [ 1036.611321][ T8273] binder: BINDER_SET_CONTEXT_MGR already set [ 1036.634349][ T8273] binder: 8233:8273 ioctl 40046207 0 returned -16 [ 1036.641447][ T8303] binder: BINDER_SET_CONTEXT_MGR already set 01:11:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, 0x0) [ 1036.657023][ T6208] binder: release 8233:8273 transaction 7367 out, still active 01:11:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1036.692832][ T8303] binder: 8272:8303 ioctl 40046207 0 returned -16 [ 1036.709555][ T8348] binder: 8272:8348 ioctl c0306201 20000200 returned -14 01:11:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1036.737858][ T8303] binder: BINDER_SET_CONTEXT_MGR already set [ 1036.767378][ T8348] binder: 8272:8348 ioctl c0306201 20000200 returned -14 01:11:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xe6, 0x101001) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x6, 0x3}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000000c0)={0x0, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840ffc1d38cff0000000000000000000035e5d7f59c51249b7ed6aa2500000093e9b883284a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006340400000000000000000001ed711f33bb8440eca8b8fa3c684000000000000000000000000000000000000000000000000007d8edf77"], 0x0, 0x0, 0x0}) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x656, 0x20001) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) [ 1036.804285][ T7769] binder: release 8219:8221 transaction 7366 out, still active [ 1036.812614][ T8303] binder: 8272:8303 ioctl 40046207 0 returned -16 [ 1036.820014][ T7769] binder: release 8272:8348 transaction 7369 out, still active [ 1036.844421][ T8366] binder: BINDER_SET_CONTEXT_MGR already set 01:11:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, 0x0) 01:11:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa00000000000000, 0x0, 0x0}) [ 1036.871071][ T7769] binder: release 8272:8348 transaction 7371 out, still active [ 1036.873868][ T8365] binder: 8363:8365 got transaction to invalid handle [ 1036.881661][ T8366] binder: 8360:8366 ioctl 40046207 0 returned -16 [ 1036.907793][ T7769] binder: send failed reply for transaction 7366, target dead [ 1036.931898][ T7769] binder: send failed reply for transaction 7367, target dead [ 1036.963414][ T7769] binder: send failed reply for transaction 7369, target dead 01:11:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1036.991640][ T8424] binder_alloc: 8372: binder_alloc_buf, no vma [ 1036.998045][ T7769] binder: send failed reply for transaction 7371, target dead [ 1037.006329][ T8424] binder: 8372:8424 ioctl c0306201 20000200 returned -14 [ 1037.025803][ T8424] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.032785][ T8517] binder_alloc: 8372: binder_alloc_buf, no vma 01:11:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1037.041325][ T8424] binder: 8372:8424 ioctl 40046207 0 returned -16 01:11:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fdatasync(r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x3, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)=0x2) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000180)=0x1ff) r2 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000000000000000000200000000002d242b2e42d800000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000634040000000006813000000000000040000003b9375133d1c6f5900f168ba5086c104000000000000000000f500000000000000000000000000000000"], 0x0, 0x0, 0x0}) 01:11:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x1, 0x5c24, 0xc6, 0x4, 0x0, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1037.129156][ T8517] binder: 8372:8517 ioctl c0306201 20000200 returned -14 01:11:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000000000000000, 0x0, 0x0}) 01:11:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1037.249121][ T7769] binder: send failed reply for transaction 7378 to 8609:8620 [ 1037.265041][ T8598] QAT: Invalid ioctl [ 1037.272825][ T8598] QAT: Invalid ioctl 01:11:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1037.337802][ T8743] binder_alloc: 8726: binder_alloc_buf, no vma 01:11:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063403ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) [ 1037.396732][ T8743] binder: 8726:8743 ioctl c0306201 20000200 returned -14 [ 1037.468576][ T8743] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.474613][ T8743] binder: 8726:8743 ioctl 40046207 0 returned -16 [ 1037.525296][ T8813] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.543351][ T8813] binder: 8809:8813 ioctl 40046207 0 returned -16 [ 1037.549171][ T8816] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.556266][ T8816] binder: 8814:8816 ioctl 40046207 0 returned -16 [ 1037.567378][ T8806] binder_alloc: 8726: binder_alloc_buf, no vma 01:11:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1037.585865][ T8813] binder_alloc: 8726: binder_alloc_buf, no vma [ 1037.599266][ T8806] binder: 8726:8806 ioctl c0306201 20000200 returned -14 01:11:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f00000000000000, 0x0, 0x0}) 01:11:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x400000) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x8, 0x9e0}}, 0x30) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380)=0x0) r4 = getuid() r5 = getegid() ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)=0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="28e6ffa00fc5e567177ad9fa0428dc26e2f704d8b97978a6188b1b2a04648e82a55bfe19931b4d9533dcf12f137ca37a8249488d8d5c7893dc73b6979c89b1b5889c810d9736370b3e6ee513c6ecab70f02e80892ddb66d183c77994aeb5b2b1d8afd71eeb99ba6ff87a7a0894570be18246a434c7e26f78a5ceb0ec51c405d13c0b87e161d37be0062d0bab6b248c04057933847256dab07af436157f1da9644427ab84c3433d9cb2776ecc819458d633b1ee4dd6c44a097a2cda07e4e9ec444cb06711e960a5d4ce0b1bcd3c2c4f85135527d55464a2991bf4ac0ed016b695be7dad", 0xe3}, {&(0x7f0000000180)="5a16726bf2cbadcd4731c66ce77ffc3487c547b3be65f662d101f575bcd657d275c8ed273c89c8f5920825fe7f43995ddd968c808e6dc197648b639af8e22a13601a2fd47e72d8bed6d8cb398eaff575bbb5b2a7ed634743f50a8532d5a5368cbd95ef1c1ed32981a67cd415", 0x6c}, {&(0x7f0000000700)="4f2cd7d04d035e6ecf8fe54e8b0e40a2a9c00566b81d0dca100c6c178786a427f33d6b19a975cb317092de9d7ff6294ef5069aa7e7a757548ca9e89ec1c006d2c98dcc66c7dd50e3ffdba8f92a092316fb0400fe234b7f1af34c854fe7ee4fc7388b08821316d90d78e529fb0ad1671b4b06a01f5a3e2389b7fc209c6a62ac89f52e05650c0d21822f3e8dff53b9b323753bd14ad6eb325d8dd0204bc5b311373348b726a30c3b3308ca4564a89c918699d345f1ec3aa99b990e581c1f2ab587f498dbe0277aaf5524beb22e8d60134698f7bbd30f19ed6d4912ace85de7207cffe3782939adbf13466c973b154fea411e6b4ad999c7a50f1bca6e223e2bbfdaba8e9ad1913f646aa864ce62d4b57bc2a8b74451a94707874af572dd5263c7ba1b50d99082e322715892b2c816a119bf748871470bd98848d5ea1427e60d8385c688e30e5e7e43e10642318520cf583d0ad5cc3b4cdaa43d8e6fcbd779b337fe7dcd87c878b8f934cca424352605d9e981a88383fd1bab301959676fa03e99498ac4ab6ed04690e78f89382c234bc38005d6343370b778450f33430632d82c09fe26b6c581eb6b5007f21448f74a775475d0fa2e95708dcf8cdffdf752f57256d1a34e71ccf31e9388dd5a09833113162cc867e6fcf5b7dba4aad2085662b478e93112af7f1dea0424dfd12a95cff88cd71655e31c045a8c5a77330423954c1ec8e4b2fe98febd07e01cbfe3df14829150827bc10d1a075afdb18acde1184fd89f3f44c4e017099febd5590cd6348edb1a357fad0ff5bbe048315eeb56c5968f7b2a3b18356e21cc3de07046fc8c430f435c77002d31a8c587821646f01d92a76ae1a5193faa4873cd74be57e6ba56e1bf82333fe586820a4139bcacbcca2dcd26edc12df8c84d1bc3f7f7e765c98d8e50256b9216279b1d907827f9ec2a1e8d0ed13dfc11c19b7820b72d6d1056ef280efe24d91000065e9c8d42fc364611afe07d520e456e7e05b4b5da07c9b911be5c71c2a8b0ef7dd58fa879c56b30ba0844322d73f31d77e61932a926c2098529b4bb7ce99bb17b78d4452a96dda6072bd58e3cf9f057386356a0dcdba0b41be5f10dd59e38429a56163938de0d959c762a2b63a33bbd702c19afdf172df45fe8d05b1253decd8552b297beb7f4f6b18dbe935fb95bce08014de06d733b4106b5fac504d4dfda7e3c96ac03ae72bb67fe9edd2d093f929c512a56e4ebfc6ce03b5eae334f6146319369405210baae7471319813b62207f7da9cf402d24ed58aa2569834cd0680102205d71fddf4e94f53173334c9115909a15fc2fd48c944682962da0c89d6b5fe2ae8ec8fa62147546df595c79d910a35d303c1c26802102f935763004f29f09f975e1c257a4663039c8308df92ef41d70c5fc8d49d112fb0bfdf79659e2b6c63861a5c38dcfeee13834f6a81fdd40601826ae98d22e054fb7cfbd0bdd26a7d27c44353982ed1130aec89407fa19257d522347142bc0f21abc83f91116098f39815d6ebb83579e16d491ae30a9271c8d1a93183c15387ec8388a414777cbeb65a637980e49009875fcf99adc39cd39de25f58558fe2c3f44db781199f3b2447ec9902b423c6034c447f7ba27313666ae61d69c34d284548898fa7b14622abdee8400cfbe05898e56505cd91b0693b284c4e03761e1b6938f993b08f3461fbba1f90247608ed665cecd20b08f44c341f29cc9ea6437561772814ef29d5ad231314770dbf6e7e3330dd56801991f918760b638f55048a44d3f153c1ee9bf6ba8b5e688486c2c1c730bdbf911c75765fc7e4843e47ca4832ed162182744492fedb659d10ade6c469f103dbf94ede0241e882dc791d5b62e8e2d2675d4be830910f2d65cbae37aeecca2aeffb6c05057e10dab24780127a3fff0b210496cca643ec41a6ee5c1a9efa8e185916e10d67d3f61ab003555c8545246d51dc6f4cfcde6df3f89891349d775f6b77e2e4bcdaf894740549e2cc51bb623414da8ef652e0ecbd99b4277a411ff6d64723076aa2f0b4df3620796e1b9a9f9b5fcbd1659044ba64e2fa062590d7d0369771dd9874f3970b49e70961055a46974b813e57569366b2920cf0b7fe23d6e959ad03dff8b51beeb16b0f92bd54bed333eeb4e698792999113aae33f97494270887f6b8ac50c32cbd2a81cf8b0630591f9a9ea54c2c5ef1cd70ceeeec90875a0cb64a12d69d33ae685fd215e8d498845b3ffa9e07f3e080e1f89e98a2c5ec7e556f3dded871691c8c2d9f4b48dd9d8a0969610b3071e197f40f7f5d106952835b8b8594a1ad446fab8f7c7ffaf3f60a1329d3b378e5fabb5d049b842d985011f6915c10de54b390276adb4d44be2228aa09f44454cd91a94bf10118463328ab4ef8e520671bb295ef1c767b022ea37e7a5c9a8328584b1759b6050a78a3fa6e350c8e6e392d2619bd388ae8e8852488b7b01019bcbbe0300dfe0acf64519ec513eef451bdc179831c565919fc47ad65910af4268bd69d5bfbac4b682aa2b9c4a0c59f1e22c0c6789c8859ca9d316d27d897bc58b4676f545033336f35e7f20264278fead96c552a9073b4445063b89b4a358cf735eab2abbc28cd514918b1ef0574d0f3b67eff431037fd29dd76b63f40440a339963cfd1a013ef6113799a5d1c25dfd86af75665d53cd9c890fe807406d0d018927c12e280587540e8ecf7d1046207d6f46067d6357b60fe6d0f6bb76f427a8ca2ee81195bd6a1893a0fe81224170ef9c265a743f0cb037c57453e49afe5c48c64545c58844c3615769046fc955c6a02561f73fc1baf138a4f9c114c4ba4588b4ca6201fb24e6d285f47f09c6a9c6deb125130e67af0ca5b8ac786b3a0a1e44732a97e133843d09b39f21df5889875961740b5d37c751b6702ca3d198f722a2f63dc24a972a2adeaa26e680499b530304c4b72b83b599539c97c7f3e84a37ee57d401fe837812bb268264d12494e1584ac50d96416cbba8aa507ebe5deba5a696de018117ebe6bf69e719ebfc737fdb7835c908dfc22e37b6743d2baf7bacb2c05c8e923d6a42bc55817598c2b50e2a6b5c62b7b42526e5e1480715211ff000fc9d5e149cfd41302c3598dc027ad2153fd0b0a0e46fb21ea67d899f17b85223e6aa4fc9c52702914e5aac99ad5357a6539a8c408e700cb31086c9a5a25680fe2e751dad000b7344023a0ae08dea7b537df0036488a8d9cb1e681709aa55ee1c2b9a4fa7bd87b08118eb372d5ab86c24b62e43f6e30aebfd2c9dc719851231b9def62570f8a817f930afc3872261de0635c89f6e1e2fd8b966fc7f620b5a9cfedec2d7c80b64629f98b6842922c79f43ca6f7c33b3e919a27fa158bde1d3d74a15a4aacd4106133e52d5fcb8caa7dd87c293458b599d88908270b997657848fb11ef3b1e0c1309219625a4637e286a5a5985af279978be97b2911b3a3c1b74818916771e7a30fa4b777c67076c6e2f2b78ec819f280ccfdf0797a99ce0532e0bab6cdddab22365c34630235b6175b5e8c36c10ad2d92c38b912651fcf6ba64d0ce14b8b44615d41b31eff3e9ebc2d3e04434f280f4b61b5a14f8e571d4a583457256119911e2b17d6c1cf9494b2b358a42761e7eb46dcf86056cdfc22bb6f1226a0be3cc4ba66c335630fd806f5bb2672bc625e72be9d0bcf301c4984177fa82d0a7da9a8304f26eadd5f6361bc2294e23e1c13f67081a2b3c0121be23410c027e6240afb7f0f2cd31a180b147692d38ce1101e284a2cc836af6b785afed5ad3b594eddcb5846c22b778f10322c88b4dcfc91abec3a566a5b95e298cada616c23e5b7432afac23e51a17723fdf2d73bf4696acb87b35e9a4abf62ab4e30214b6097a6da98b0ebc29b62173a610502e96417465adacd05b1c47836bd2c71e28763551fe5e07605f291d16bf24a204e4c02d30dc6cd97cfbc55348f524f9ebd3c08da2498f8e35e6478fbdd4f7eca6cac32632f6f608c40167fae5bc1101ad4f2c24823fd3a5b6ff0de0a2068d25735d44bcf64c624c48698cca2fd6afe6f059d0ec497325f29f2de2e6fde24272bccb6882d41c63336cc010c6c4efa09c09de44e863897ec727992316733e7c768f65c220c26933aaa3ee2f6b08bb05c389230c2ee391fa8a9cac0d333e8de9e78df3909c55030c0c9e3dc32f26eafc6dcfb75a009791262336350f5c4d774c543cf9e121aa8f381bb95ea38672d55403a6678953e153fdce9e643c8a98bef55cc099e7595f05b73713af4eaa7fc8e91e594b30858c8271c0a5f1f141ebe6da0b3168720be48997c6c5f801ca2850fb4016866de6a44f46add3b87331ba50619319074cad1f31719c5e14fddf395ab54b0ab27620040da9296e9757982e311d86b7861298452f5d767942903432aefd378a541b6975aa828820539b6cce09c262bae09e05deca67dc0df942ebdc7fc6f806024dbe947d3e45f4ea2c2dc01e2adbd18420caf6e24dec86ad9e9ff6455a3377b1cfce148ea4da16e7445068892a6175f04ed254dabdd46b599f1ef7c6cf51d210c44876ff8600fefceba9256cf6ce971deb3bd1d6f83e4d5171107dfbaa9d503f7853725a47291e86804507242ccd30ef259a65c3d8909b21df33422e6ed2b7945f7c373bbb3ba34656b7ab82fba1a9971b09903b5617274bbb4f6b78848021f3a6cd80172933faab12293c682018b3d5cd04835cca7c878854796c7f4373a7df10c71ab8cc704887db2f52df6b1569a103ea95b1aa89847adedaf3f1082baf3dbb64969336cdc5926fa6e36741022c5a815c35e283ff73e5b6e461f303ae468b6e405f6e58adc24588f0b0c46c7db2c92870b59a7602575cd511d9d11fc82b0db8a2fada8804eb848e4096736add80cc6eb60a86dafd43a3a1643708601abb56dc88457acd5d024e409d014a398c2d4a93a854da32f2c11fc3b098d5f900acebf64ec5409e2fc77067e44efa7239f322603abca604eb173de199001ce7b5e03d1e192c505e753c98650dc12c15ecd65830b48f3338497976658d92a7e0bb68f3a7a29ac66e9c5c26a7f8c6b7ccc17a0315515cb832d2829e21850e907bc6803d39be58812b68e0c402fd2851dc041d9f287fccd1efd02f97225ae83bfdc4509a26807d0772508b75bccac1de0c399421399ffe2e69fcc5d76c9807eea767889a3125ab8c8057a7f7277134d3861cb593287d81c10aa6b2c024b24b761f773038f92c8e6eb3e499aee50352f767c75e3da5fdd2584101577bc8c0ef93bae531ac25e4609d0f0b50df107f6df97b1afb496cbb52bd56db46453a1d0cc8323f9e7b092815832027ecfd3d83ceb3a1da84cda6fd21032d14dd56006e29a92de9ebc2f074c961802bc26b9e4a122a7e6da63f0f62f3ea34c9dedba76cd4908de80d9a90a7a405343736552f8afa996677d9442f797992f4abfdcd3725f461452cf0e26697ab93e1416912e338a93b6daca5b5d79f823111b68acff7452b873483a86d1b5fab881d9316864edddde3dda76b7ba3c6cbd32e99ac36b52843465e2e3d4aeeb9b7176254a7d80098f027f75b4d559ec482660917e00c7083e088573dfbd65a43264e41433e9dff7791b68b791834138ede38f8386f7879e8f45b2316f509a23c8119161693b722ac282095e74fb2f86bc6e48c82f107c3826271a7b1966989cc29ab5b2920cf45eae16945f508c6ebbeb29b857784b20f1764de8bccd84d6091c7b90808a95b96a6d19476aea65a78fb0b945ec3cf73cfc542724529c482b744ddb14737181f68a8a71e2cbb3", 0x1000}, {&(0x7f0000000080)="571d7080546fa05b850f39a1353df82e4ca07b2bc2c65b18610669b484f611d133db08f088f4aabe34590e15de9b", 0x2e}], 0x4, &(0x7f0000000580)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x40, 0x4000040}], 0x1, 0x40) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1037.724842][ T7769] binder: release 8904:8925 transaction 7386 out, still active 01:11:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1037.793858][ T8937] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.800547][ T8937] binder: 8935:8937 ioctl 40046207 0 returned -16 [ 1037.807931][ T8937] binder_transaction: 8 callbacks suppressed [ 1037.807959][ T8937] binder: 8935:8937 got new transaction with bad transaction stack, transaction 7388 has target 8904:0 [ 1037.826078][ T8936] binder: BINDER_SET_CONTEXT_MGR already set 01:11:53 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1037.861468][ T8936] binder: 8930:8936 ioctl 40046207 0 returned -16 [ 1037.861488][ T7769] binder: send failed reply for transaction 7386, target dead [ 1037.873271][ T8940] binder: 8930:8940 ioctl c0306201 20000200 returned -14 01:11:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1037.905625][ T7769] binder: send failed reply for transaction 7388 to 8935:8937 [ 1037.910180][ T8943] binder: 8942:8943 got new transaction with bad transaction stack, transaction 7392 has target 8942:0 [ 1037.943433][ T8936] binder: BINDER_SET_CONTEXT_MGR already set 01:11:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1037.956580][ T8936] binder: 8930:8936 ioctl 40046207 0 returned -16 [ 1037.956809][ T8940] binder: 8930:8940 got new transaction with bad transaction stack, transaction 7394 has target 8942:0 [ 1037.984486][ T8940] binder: 8930:8940 ioctl c0306201 20000200 returned -14 [ 1037.987362][ T7769] binder: release 8942:8943 transaction 7392 out, still active 01:11:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4800000000000000, 0x0, 0x0}) [ 1038.047308][ T7769] binder_release_work: 9 callbacks suppressed [ 1038.047313][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1038.069897][ T9059] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.075903][ T9059] binder: 9058:9059 ioctl 40046207 0 returned -16 01:11:53 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) 01:11:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be000000000000"], 0x0, 0x0, 0x0}) [ 1038.106087][ T7769] binder: send failed reply for transaction 7392, target dead [ 1038.151063][ T7769] binder: send failed reply for transaction 7394 to 8930:8940 [ 1038.183559][ T9071] binder: 9067:9071 got new transaction with bad transaction stack, transaction 7397 has target 9067:0 01:11:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1038.202726][ T9075] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.218552][ T9075] binder: 9069:9075 ioctl 40046207 0 returned -16 [ 1038.225235][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1038.238802][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1038.248516][ T9150] binder: 9069:9150 got new transaction with bad transaction stack, transaction 7399 has target 9067:0 01:11:54 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) 01:11:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1038.301116][ T9150] binder: 9069:9150 ioctl c0306201 20000200 returned -14 [ 1038.338384][ C0] net_ratelimit: 18 callbacks suppressed [ 1038.338391][ C0] protocol 88fb is buggy, dev hsr_slave_0 01:11:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1038.349938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.355734][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.360704][ T9075] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.361548][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.367680][ T9075] binder: 9069:9075 ioctl 40046207 0 returned -16 01:11:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x8, 0x8}, 'port1\x00', 0x2, 0x1, 0x5, 0xffffffffffffa0e5, 0x4, 0x401, 0x81, 0x0, 0x5, 0xfffffffffffffffc}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1038.419582][ T7769] binder: release 9069:9150 transaction 7399 out, still active [ 1038.427178][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1038.441401][ T7769] binder: send failed reply for transaction 7397 to 9067:9071 01:11:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:11:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c00000000000000, 0x0, 0x0}) [ 1038.487452][ T7769] binder: send failed reply for transaction 7399, target dead [ 1038.507692][ T9296] binder: 9295:9296 got new transaction with bad transaction stack, transaction 7402 has target 9298:0 [ 1038.519039][ T9300] binder: 9298:9300 got new transaction with bad transaction stack, transaction 7404 has target 9298:0 [ 1038.548247][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1038.578696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.585047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.592390][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:11:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1038.598617][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.618665][ T7769] binder: send failed reply for transaction 7402 to 9295:9296 01:11:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1038.643698][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1038.652062][ T9311] binder_alloc: 9306: binder_alloc_buf, no vma 01:11:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ptrace(0x11, 0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1038.708211][ T9382] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.712780][ T9311] binder: 9306:9311 ioctl c0306201 20000200 returned -14 [ 1038.714665][ T9382] binder: 9346:9382 ioctl 40046207 0 returned -16 01:11:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x9ffd, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000080)=0x7) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10022abd7000fddbdf2501000000000000000c410000000c00147379000000000000"], 0x28}}, 0x800) 01:11:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1038.776641][ T9311] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.798527][ T9311] binder: 9306:9311 ioctl 40046207 0 returned -16 [ 1038.798632][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1038.818865][ T9423] binder_alloc: 9306: binder_alloc_buf, no vma [ 1038.853626][ T9423] binder: 9306:9423 ioctl c0306201 20000200 returned -14 [ 1038.885225][ T9498] binder: 9482:9498 got new transaction with bad transaction stack, transaction 7410 has target 9482:0 01:11:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000000000000000, 0x0, 0x0}) 01:11:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1039.026639][ T9596] binder: BINDER_SET_CONTEXT_MGR already set [ 1039.048139][ T9596] binder: 9574:9596 ioctl 40046207 0 returned -16 [ 1039.062793][ T9642] binder: BINDER_SET_CONTEXT_MGR already set [ 1039.104969][ T9596] binder: 9574:9596 got new transaction with bad transaction stack, transaction 7412 has target 9482:0 [ 1039.108681][ T9753] binder: 9599:9753 got new transaction with bad transaction stack, transaction 7414 has target 9482:0 [ 1039.117345][ T9642] binder: 9599:9642 ioctl 40046207 0 returned -16 01:11:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xffffffffffffffa8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 01:11:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1039.148881][ T6208] binder: send failed reply for transaction 7410 to 9482:9498 [ 1039.156402][ T6208] binder: send failed reply for transaction 7412 to 9574:9596 [ 1039.194777][ T6208] binder: undelivered TRANSACTION_COMPLETE 01:11:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1039.237808][ T6208] binder_release_work: 40 callbacks suppressed [ 1039.237814][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 01:11:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1039.313740][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1039.345812][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1039.374031][ T9800] binder: BINDER_SET_CONTEXT_MGR already set [ 1039.380431][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1039.407831][ T9753] binder: 9599:9753 ioctl c0306201 20000200 returned -14 01:11:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) 01:11:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ptrace(0x11, 0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') write$binfmt_aout(r0, &(0x7f0000000700)={{0x1cf, 0x8, 0x80000000, 0x2f2, 0x3e0, 0x101, 0x39d}, "1f3cc226b7569cccd568b103b8bf1f99930545d1f55dc0c8243b050316e2ed9240b42b1de04f3071f8ffbf7b5243b4f0472f58fbee121cc46ba02659a0f7564c81773148e6278e3a8073fd001bb8aa8b7f74dc9473f3db153a4c0502620eca2e3b586ef7", [[], [], []]}, 0x384) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r3, 0x710, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd0}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf9}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00010000120000032dbd7000ffdbdf25736861332d3235362d63650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b34c2703ef6a6143000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000e624000000000000000000000800010003000000080001000900000008000100feffffff08000100ff030000"], 0x100}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1039.430726][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1039.449604][ T9800] binder: 9793:9800 ioctl 40046207 0 returned -16 [ 1039.458412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.464187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.509489][ T9642] binder_alloc: 9599: binder_alloc_buf, no vma [ 1039.556681][ T9642] binder: 9599:9642 ioctl c0306201 20000200 returned -14 [ 1039.572063][ T9885] binder: BINDER_SET_CONTEXT_MGR already set 01:11:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) 01:11:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6800000000000000, 0x0, 0x0}) [ 1039.640446][ T9885] binder: 9880:9885 ioctl 40046207 0 returned -16 [ 1039.640745][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1039.683494][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1039.706801][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 01:11:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ptrace(0x11, 0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1039.733511][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1039.748518][T10051] binder: 10036:10051 ioctl c0306201 20000200 returned -14 [ 1039.772928][T10051] binder: BINDER_SET_CONTEXT_MGR already set 01:11:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1039.792515][T10068] binder: 10036:10068 ioctl c0306201 20000200 returned -14 [ 1039.830803][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1039.841365][T10051] binder: 10036:10051 ioctl 40046207 0 returned -16 01:11:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x29, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1039.880787][T10106] binder_transaction: 33 callbacks suppressed [ 1039.880802][T10106] binder: 10092:10106 transaction failed 29189/-22, size 0-0 line 2994 01:11:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c00000000000000, 0x0, 0x0}) [ 1039.926012][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1039.967649][T10112] binder: 10110:10112 transaction failed 29189/-22, size 0-0 line 2994 [ 1039.972829][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 01:11:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1040.015748][T10115] binder: 10114:10115 transaction failed 29189/-3, size 0-0 line 3147 [ 1040.076556][T10115] binder: 10114:10115 ioctl c0306201 20000200 returned -14 [ 1040.096591][T10197] binder: 10114:10197 transaction failed 29189/-3, size 0-0 line 3147 [ 1040.096698][T10115] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.105231][T10197] binder: 10114:10197 ioctl c0306201 20000200 returned -14 01:11:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ptrace(0x11, 0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:11:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1040.161627][T10115] binder: 10114:10115 ioctl 40046207 0 returned -16 01:11:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7400000000000000, 0x0, 0x0}) 01:11:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1040.229626][T10226] binder: 10225:10226 transaction failed 29189/-22, size 0-0 line 2994 [ 1040.255936][T10231] binder: 10230:10231 transaction failed 29201/-71, size 0-0 line 3044 [ 1040.329179][T10238] binder: 10237:10238 transaction failed 29189/-3, size 0-0 line 3147 [ 1040.337406][T10238] binder: 10237:10238 ioctl c0306201 20000200 returned -14 01:11:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:11:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000001a00)={0x1358, 0x34, 0x0, 0x70bd2c, 0x25dfdbfb, {0x17}, [@generic="b27bc9a850d46b69ef2088590a9cd0bdb39b17af5c8248e62177ac4a1c2701f616b87a0b39dbd72d7a9e57bed49e0780993b7cdbdb9e6c5a564f8dcbb6d23fc3d90d6d92627ff7d3da98c7c12902c34c75897d777769091a467726f802d99b12ea3a8775a19f2cf91845b4e03495f874bdcda2398ed8113cacdfbd1d9e6daee78be2f87a40ce25bfe2a51627bedda0f0dbed0987b36ef3aa65", @generic="081e13012cf310277e05cea87a02e8894b730652cadcdc0804ac01b54dd865c8097726487b9c5b80", @nested={0xec, 0x21, [@generic="2c65fd3c40a3518d10120e181297841b05ce7b772cd703810295873517a2e8e3a1372c16aaeb0f56a2766779fedf2bf61b3349cff7f5d6dd824c670c2361309545ca991be763512663e719f3815f1031eb7a363dc674aee1f010477db8d8daa8a03c441a1ab9bd87f855d2b42118c38ca6825cb94375d80c39a3754bd5f18325198127abbb0db57eb362a202a21abe5784f07038806dd0a91ac90312469dbcbfcb97010282ad460450ce8154bb173fddcd61ae988cb547c1cb632b89cf709ad9b1c316e8534a56effc4177f56f2ecbdc1d33847f4f9a2c8f9fc904053960b76789199ca16729"]}, @nested={0x1194, 0x4b, [@generic="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", @typed={0x8, 0x17, @pid=r2}, @generic="8939dac8943f7f96fd3984999767539b6692755209202bc0e1ab5e5cef4f5ab2934d7525ec291c0c15d9dda1f2b89abe4ebbc1b451ecd47c4e0be6c41b3ce1e435775147a2205ff9f199312696f656f4c4c763edf49eced1217a899bcfd90554aac3a24fe250c2991c53ea772553faee41da2d804831b0ebca0676c65fe3139114daa96b8bf391be5f0fed436815fd1c9b14f64ec5d21445eaf4cb906832ebbec26ff7479ef92eba9f876fda8df4c6c749887e7e3c17a581deafe19815908cfff38c9a70", @generic, @generic="e6aaae0c8423c687cfb52cdfdd880842e016fdf0dfdee04a1c0a984c97c7acbef843473b70f64e789a2e2af1126c4817c4faf6b55cf796c71d66886df93c60fe1e1634c69f2add7144fb2ee8d561d78e7bc8462ed44d7b39fb4864e526094267a724e431fdf441be9a97d321ff2613bcd280dac1e0232aa7b2280cd14f964b1b58d86289040ecb80388be75aaa74067f985d8c7b668159655858a4e97fac01f696aec77cde17d8e8fba7fca316609d99ecd8f81a05143bdb9af98fc6cf89f21a82fc"]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xa332a09f44b5dcbb, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x12e8, 0x25, 0x420, 0x70bd2b, 0x25dfdbff, {0x1a}, [@nested={0x12d4, 0x58, [@generic="495f7b01c97586691494ba1ead845898c0040c47e6345ff762fe0697bc70e6f6fac79d072e5bebd32d4053b4262c9c3ec1cef8114edaafd0d624b635650a1846b19a66c6f0be813de768c2c2af8edf11e2dc01db613a7bd386e8a8aa8d5fe4ca", @generic="1b236f48b4796b8465616c1ba1828216e5da10db4e15aca3d6386abdc5d859cae8ffd4a5d260469bc547a7ec8d9aa686708cb136424d3a546315788e90a5e2a9acbde40eb4031e2ea797fb2e39a85fc7783741fec7c2db32c83600918d4ffc8bc3427c0d1cc132974b652b7ba2236ae99666d7c1aeeb04216f17eb96b567b2b357cca0c57e8b421249b99b379204b8bbe7bba93f1577fe6f98edb8f720f982234645a9c45a4190d0d24ec9215ad844994266e8b1488fccea56ea83ec099c79c32ce0793aa5c8585cc760e1acebfa10a98a99", @typed={0x8, 0x23, @pid=r4}, @typed={0x8, 0x93, @fd=r0}, @generic="b285ce8f51fc3002dc12fd95ab67e0ae5867f9db83c0c8aceacc67509c4a5ec8b6abb774f02cb9cfcf074fe1024006a88dff796b1b72", @generic="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", @typed={0x74, 0x44, @binary="2441889f77f094e7d14189a397b600093bbfe1699d7574d3c7c41f54db425b4ebc4e819b7d95c510a6155457a8e40de0de52eee29f8b891f476628f68732fa4c137e1bad0da0c65181ce81257884985ec6ea06b7244daeb61f81da30e79f1ebb0151f87e29d3f90605951abc82"}, @generic="515fa82926050b8ebd819f462e629fae84ac21275815c959efed9e01c37ec799fd6dcc481efc4725cc52d9be4e9d4e7b52febb8fc769da599555c0a3fbae03f6583f10aebc9a20a5b9e52f8416c8fb37a46523d4680e07370b47d5ecf1cbea7cb9e9b9277fa91153fb6b02db8a065ad01521d782944f59070dfe7c42a99145127921ac1f9e5cb238ae4975176fae570198499efd543710d8a44fc07c5efa7517658b70865aa17f846317b4a8e18eac998632c16ba814e10f7274c40b38d3931b79cb70ca46", @typed={0x4, 0x8d}, @generic="c80419635cd22b849788bf2dae60743422a6e5bed805a5806fb146"]}]}, 0x12e8}, 0x1, 0x0, 0x0, 0x20004801}, 0x20004000) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1040.467293][T10238] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.474049][T10345] binder: 10237:10345 transaction failed 29189/-3, size 0-0 line 3147 [ 1040.483042][ T6208] binder_send_failed_reply: 1 callbacks suppressed [ 1040.483052][ T6208] binder: send failed reply for transaction 7429 to 10230:10231 01:11:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1040.535527][T10350] binder: 10347:10350 transaction failed 29189/-3, size 0-0 line 3147 [ 1040.536777][T10238] binder: 10237:10238 ioctl 40046207 0 returned -16 [ 1040.563386][T10345] binder: 10237:10345 ioctl c0306201 20000200 returned -14 01:11:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:56 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1040.594660][T10354] binder: 10349:10354 transaction failed 29201/-71, size 0-0 line 3044 01:11:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:11:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a00000000000000, 0x0, 0x0}) 01:11:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:11:56 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x14) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000380)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {0x0}, {}, {}, {}]}) r4 = openat$cgroup_ro(r2, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000240)={r3, 0x1, &(0x7f0000000100)=[0x200], &(0x7f0000000140)=[0x2, 0x1f, 0x2, 0x2, 0x80000000, 0x7], 0x0, 0x3, 0x7, &(0x7f0000000180)=[0x9, 0xfff, 0x101], &(0x7f00000001c0)=[0x8001]}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x6, 0x10}, 0xc) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000500)={@mcast2}, &(0x7f0000000540)=0x14) setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000280)="b65e11780c5a9a49fd18b18dcbefffd61a77aa13d3a9c7a6d9418601d5809e7b24533fd2b37a616fb46f60510368e7c555bf27ee13a713", 0xfffffffffffffd86) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) setxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@sha1={0x1, "b67048e0c721c27d8616d741afdcaa8fd4f1d2a5"}, 0x15, 0x1) [ 1040.832016][ T6208] binder: send failed reply for transaction 7436 to 10349:10354 [ 1040.882437][T10498] binder: 10478:10498 ioctl c0306201 20000200 returned -14 [ 1040.923296][T10498] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.936124][T10553] binder: 10478:10553 ioctl c0306201 20000200 returned -14 [ 1040.951588][T10552] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.954013][T10498] binder: 10478:10498 ioctl 40046207 0 returned -16 01:11:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ptrace(0x11, 0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:56 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1040.972897][T10552] binder: 10515:10552 ioctl 40046207 0 returned -16 01:11:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff00000000, 0x0, 0x0}) 01:11:57 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 1041.151610][T10695] binder: 10694:10695 ioctl c0306201 20000200 returned -14 [ 1041.188395][T10695] binder: BINDER_SET_CONTEXT_MGR already set 01:11:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, 0x0) 01:11:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1041.214439][T10695] binder: 10694:10695 ioctl 40046207 0 returned -16 [ 1041.232755][T10696] binder: 10694:10696 ioctl c0306201 20000200 returned -14 01:11:57 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) [ 1041.341599][T10711] binder_alloc: 10704: binder_alloc_buf size 17179869184 failed, no address space 01:11:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:57 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1041.422270][T10711] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 1041.439483][T10717] binder: BINDER_SET_CONTEXT_MGR already set 01:11:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, 0x0) [ 1041.478464][T10717] binder: 10716:10717 ioctl 40046207 0 returned -16 [ 1041.511014][T10717] binder: BINDER_SET_CONTEXT_MGR already set 01:11:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1041.547711][ T6208] binder_thread_release: 1 callbacks suppressed [ 1041.547722][ T6208] binder: release 10716:10728 transaction 7446 out, still active [ 1041.566686][T10717] binder: 10716:10717 ioctl 40046207 0 returned -16 [ 1041.584674][ T6208] binder: release 10716:10728 transaction 7448 out, still active 01:11:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3, 0x0}) 01:11:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)={0x133c, 0x39, 0x300, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x60, @fd=r0}, @nested={0x1138, 0x37, [@typed={0x8, 0x62, @ipv4=@multicast2}, @generic="48f21429230557ebf9082aa77cf2a565e2ffb7754866b14da79f314d", @typed={0x8, 0x86, @uid=r2}, @generic="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", @typed={0x8, 0x2, @fd=r0}, @typed={0x8, 0x68, @u32=0x2}, @generic="0d2ad4593caccc4d70694ef43dec1d3abad163bc7f6de45de3b5bc37ef179e4cbb142ccd37b9428d988155c2fa6cc2e7b18d484777f4fdc90de01a5368f796a2039f3adc351b351f6d35defda81b3ea34529a58fca1e6283cfdee78c7263e1e9c9ddd6f26ad28cbc4f1dce6d5a48d4eee89be7b004cc586aad0180f9cfd38a401cafa1aff93d10594f18c80f4d5d1409dc094e04bf217c7cb33ddd4c46064f48a5c82f7f2888324f239e353499800d", @generic="764134d7b3ab658bd74d5b9a3c4c405dcab4435182383ce5a0ac71b55c9f13dd3537e7873404c2114a6814554bc478203f5d051990bcb8567c2a02a98359401a6af46df14b835f482f"]}, @nested={0x3c, 0x22, [@typed={0x1c, 0x55, @str='md5sum\\trustedeth1ppp0\xee\x00'}, @typed={0x8, 0x8c, @pid=r3}, @generic="f0073cc8b17cbc2b6a2ec29292591b0a27"]}, @generic="b31a6417aa715430b9761d465a7be2ff1a78c4c425d0c989b899497eb7382139630ce23c7963c6ffe903a71059749b8a9c3605013b035e74bb6adf6a3eaab2d21befe3f2eba704ef2b4ac289116a0f712fa5dee6485f7fdfc90359d0fbc18779f4ebf8efad009fb85510d34bb45bdbf93e1aed037442968721c5af7239631812c748b9bc56055c14", @generic="f24a9a67cad6f3d86a1f07a1a3817a9dc6f9ab6e91796275b1b8d8de4e1cbc0a173b675546bd474cbb826e90be773b79fa7ee702b576cf2bcff117bcfe532de39a9dab31c736f366339a9379319b315ae875c22df17fff74e8cc0ac2dc7f9bbb1dfc290b67c19f15b928554908", @typed={0x8, 0x53, @ipv4=@empty}, @generic="4b09a6627f76342ece4ceaa49b1ed3a9c7b79c298af622e993cbe531f45765e1fedfa12d4537072edc9bedde71522481893478f3cd21bdea9df1f6f04c96a2c8e8ec90a6bb325fdc344c8acd2584e67995ef473fcc6066f8a87fa0ed6ed7c01d898d88256f9321bc54cb9f6f05664fd9d876dd75aac0e260080379a9679862c2f25cdd7e37269108dde765980b971c44fc72b5fdc4283e7e4c9ab330da2450ed74fc11f0a7419b1a42ace94cdebf68c4"]}, 0x133c}, {&(0x7f0000000100)={0xb8, 0x39, 0x20, 0x70bd29, 0x25dfdbfd, "", [@typed={0x14, 0x8a, @ipv6=@local}, @generic="d174a7a9c2d2ae71af6882b98fec38d477599454bfac452a023a85b54cd9b57f8792c3499812686fb3fc0ad60513c72bc8b454d8a8fe2a1e24d0a33069d975dd0021f7884186a9308c98f0ad5cd1577bcb7e701e6383edd6ba289f5b254971f8d6fd6f77caeccc7aaac78532adf1dabaa86c09c20cf7ab7f2200d73c874198d43ee88a9b91ebea2000b6e9a7c0748a7fba"]}, 0xb8}], 0x2, 0x0, 0x0, 0x24044000}, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, 0x0) [ 1041.695674][ T7769] binder_send_failed_reply: 1 callbacks suppressed [ 1041.695681][ T7769] binder: send failed reply for transaction 7446, target dead [ 1041.747325][T10843] binder_alloc_new_buf_locked: 11 callbacks suppressed [ 1041.747333][T10843] binder_alloc: 10833: binder_alloc_buf, no vma [ 1041.764835][ T7769] binder: send failed reply for transaction 7448, target dead 01:11:57 executing program 5 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1041.799115][T10845] binder: BINDER_SET_CONTEXT_MGR already set [ 1041.800034][T10836] binder_alloc: 10833: binder_alloc_buf, no vma [ 1041.818970][T10845] binder: 10841:10845 ioctl 40046207 0 returned -16 01:11:57 executing program 2 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1041.879246][T10842] binder_alloc: 10835: binder_alloc_buf, no vma 01:11:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4, 0x0}) 01:11:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1041.938217][T10865] FAULT_INJECTION: forcing a failure. [ 1041.938217][T10865] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.965813][T10946] binder_alloc: 10910: binder_alloc_buf, no vma [ 1042.008753][T10865] CPU: 1 PID: 10865 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1042.017878][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.027935][T10865] Call Trace: [ 1042.031244][T10865] dump_stack+0x172/0x1f0 [ 1042.035605][T10865] should_fail.cold+0xa/0x15 [ 1042.040218][T10865] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1042.042279][T10958] binder_alloc: 10957: binder_alloc_buf, no vma [ 1042.046037][T10865] ? ___might_sleep+0x163/0x280 [ 1042.046084][T10865] __should_failslab+0x121/0x190 [ 1042.046107][T10865] should_failslab+0x9/0x14 [ 1042.059389][T10958] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.062095][T10865] kmem_cache_alloc_trace+0x2d1/0x760 [ 1042.062112][T10865] ? ptrace_may_access+0x3b/0x60 [ 1042.062129][T10865] ? find_held_lock+0x35/0x130 [ 1042.062151][T10865] perf_event_alloc.part.0+0xc0/0x2f90 [ 1042.062172][T10865] ? __perf_event_read+0xe10/0xe10 [ 1042.066787][T10958] binder: 10957:10958 ioctl 40046207 0 returned -16 01:11:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5, 0x0}) [ 1042.072621][T10865] ? kasan_check_read+0x11/0x20 [ 1042.072638][T10865] ? do_raw_spin_unlock+0x57/0x270 [ 1042.072662][T10865] __do_sys_perf_event_open+0x830/0x24d0 [ 1042.072690][T10865] ? perf_event_set_output+0x4e0/0x4e0 [ 1042.072712][T10865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1042.078218][T10959] binder_alloc: 10957: binder_alloc_buf, no vma [ 1042.083006][T10865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1042.083021][T10865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1042.083037][T10865] ? do_syscall_64+0x26/0x610 [ 1042.083051][T10865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1042.083065][T10865] ? do_syscall_64+0x26/0x610 [ 1042.083086][T10865] __x64_sys_perf_event_open+0xbe/0x150 [ 1042.109834][T10865] do_syscall_64+0x103/0x610 [ 1042.109853][T10865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1042.109880][T10865] RIP: 0033:0x457e29 [ 1042.109894][T10865] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:11:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1042.109902][T10865] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1042.109916][T10865] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1042.109925][T10865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1042.109941][T10865] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1042.120660][T10865] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1042.120669][T10865] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 01:11:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:11:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1042.301465][T10967] binder_alloc: 10962: binder_alloc_buf, no vma [ 1042.308061][T10964] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.316961][T10964] binder: 10963:10964 ioctl 40046207 0 returned -16 [ 1042.331203][T10964] binder_alloc: 10962: binder_alloc_buf, no vma [ 1042.335343][T10967] binder: BINDER_SET_CONTEXT_MGR already set 01:11:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x2, 0x0) [ 1042.382872][T10967] binder: 10962:10967 ioctl 40046207 0 returned -16 [ 1042.382876][T10971] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.382896][T10971] binder: 10966:10971 ioctl 40046207 0 returned -16 01:11:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6, 0x0}) [ 1042.457550][T10985] binder_alloc: 10972: binder_alloc_buf, no vma 01:11:58 executing program 5 (fault-call:6 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1042.524294][T11031] binder_alloc: 11024: binder_alloc_buf, no vma 01:11:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1042.573318][T11031] binder: BINDER_SET_CONTEXT_MGR already set 01:11:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$netlink(r2, 0x10e, 0xf, &(0x7f0000000080)=""/224, &(0x7f0000000180)=0xe0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x5421, 0x0) 01:11:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1042.628837][T11031] binder: 11024:11031 ioctl 40046207 0 returned -16 [ 1042.651217][T11184] FAULT_INJECTION: forcing a failure. [ 1042.651217][T11184] name failslab, interval 1, probability 0, space 0, times 0 01:11:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7, 0x0}) 01:11:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1042.848490][T11184] CPU: 0 PID: 11184 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1042.857659][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.868238][T11184] Call Trace: [ 1042.871541][T11184] dump_stack+0x172/0x1f0 [ 1042.875896][T11184] should_fail.cold+0xa/0x15 [ 1042.880498][T11184] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1042.885445][ T7769] binder: send failed reply for transaction 7470 to 11202:11203 [ 1042.886315][T11184] ? ___might_sleep+0x163/0x280 [ 1042.886372][T11184] __should_failslab+0x121/0x190 [ 1042.886393][T11184] should_failslab+0x9/0x14 [ 1042.908291][T11184] kmem_cache_alloc_trace+0x2d1/0x760 [ 1042.913668][T11184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1042.913687][T11184] ? security_capable+0x9b/0xd0 [ 1042.913708][T11184] perf_uprobe_init+0x95/0x290 [ 1042.913728][T11184] perf_uprobe_event_init+0x106/0x1a0 [ 1042.934920][T11184] perf_try_init_event+0x137/0x3f0 [ 1042.934941][T11184] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1042.934971][T11184] ? __perf_event_read+0xe10/0xe10 [ 1042.950790][T11184] ? kasan_check_read+0x11/0x20 [ 1042.955649][T11184] ? do_raw_spin_unlock+0x57/0x270 [ 1042.960776][T11184] __do_sys_perf_event_open+0x830/0x24d0 [ 1042.966422][T11184] ? perf_event_set_output+0x4e0/0x4e0 [ 1042.971883][T11184] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1042.978147][T11184] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1042.983616][T11184] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1042.989086][T11184] ? do_syscall_64+0x26/0x610 [ 1042.993766][T11184] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1042.999849][T11184] ? do_syscall_64+0x26/0x610 [ 1043.004628][T11184] __x64_sys_perf_event_open+0xbe/0x150 [ 1043.007135][T11517] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.010184][T11184] do_syscall_64+0x103/0x610 [ 1043.010203][T11184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1043.010214][T11184] RIP: 0033:0x457e29 01:11:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000001f820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffc, 0x1) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x335, 0x3, 0xffffffffffff4d9c, 0x3d9b4c77, 0x8, @random="27e7ef760454"}, 0x10) setsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f00000000c0)=0x5, 0x4) 01:11:58 executing program 5 (fault-call:6 fault-nth:2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1043.010229][T11184] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1043.010236][T11184] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1043.010250][T11184] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1043.010258][T11184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1043.010267][T11184] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1043.010276][T11184] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1043.010285][T11184] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 01:11:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x5450, 0x0) [ 1043.072747][T11519] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.112066][T11517] binder: 11431:11517 ioctl 40046207 0 returned -16 01:11:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:11:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa, 0x0}) [ 1043.140039][T11519] binder: 11476:11519 ioctl 40046207 0 returned -16 [ 1043.149496][T11521] binder_transaction: 5 callbacks suppressed [ 1043.149510][T11521] binder: 11520:11521 got new transaction with bad transaction stack, transaction 7477 has target 11520:0 [ 1043.187781][T11619] FAULT_INJECTION: forcing a failure. [ 1043.187781][T11619] name failslab, interval 1, probability 0, space 0, times 0 01:11:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1043.273135][T11734] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.308761][T11734] binder: 11658:11734 ioctl 40046207 0 returned -16 [ 1043.333684][T11738] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.340318][T11738] binder: 11737:11738 ioctl 40046207 0 returned -16 [ 1043.347409][T11741] binder: 11658:11741 got new transaction with bad transaction stack, transaction 7479 has target 11520:0 [ 1043.363782][T11619] CPU: 1 PID: 11619 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1043.372898][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.372905][T11619] Call Trace: [ 1043.372940][T11619] dump_stack+0x172/0x1f0 [ 1043.372982][T11619] should_fail.cold+0xa/0x15 [ 1043.395226][T11619] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1043.401040][T11619] ? ___might_sleep+0x163/0x280 [ 1043.405910][T11619] __should_failslab+0x121/0x190 [ 1043.410854][T11619] should_failslab+0x9/0x14 [ 1043.415370][T11619] kmem_cache_alloc+0x2b2/0x6f0 [ 1043.420226][T11619] getname_kernel+0x53/0x370 [ 1043.420243][T11619] kern_path+0x20/0x40 [ 1043.420261][T11619] create_local_trace_uprobe+0x87/0x4e0 [ 1043.420280][T11619] ? bpf_get_uprobe_info+0x340/0x340 [ 1043.439724][T11619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1043.445968][T11619] ? strncpy_from_user+0x2a8/0x380 [ 1043.451086][T11619] perf_uprobe_init+0x1a2/0x290 [ 1043.455951][T11619] perf_uprobe_event_init+0x106/0x1a0 [ 1043.461356][T11619] perf_try_init_event+0x137/0x3f0 [ 1043.462551][ T6208] binder: send failed reply for transaction 7477 to 11520:11521 [ 1043.466476][T11619] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1043.466501][T11619] ? __perf_event_read+0xe10/0xe10 [ 1043.466517][T11619] ? kasan_check_read+0x11/0x20 [ 1043.466534][T11619] ? do_raw_spin_unlock+0x57/0x270 [ 1043.466557][T11619] __do_sys_perf_event_open+0x830/0x24d0 [ 1043.490133][ T6208] binder: send failed reply for transaction 7479 to 11658:11741 [ 1043.494858][T11619] ? perf_event_set_output+0x4e0/0x4e0 [ 1043.494875][T11619] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1043.494903][T11619] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1043.494923][T11619] ? trace_hardirqs_on_thunk+0x1a/0x1c 01:11:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x5451, 0x0) 01:11:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1043.519835][T11619] ? do_syscall_64+0x26/0x610 [ 1043.530717][T11619] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1043.530731][T11619] ? do_syscall_64+0x26/0x610 [ 1043.530757][T11619] __x64_sys_perf_event_open+0xbe/0x150 [ 1043.540258][ T6208] binder_release_work: 5 callbacks suppressed [ 1043.540263][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1043.541471][T11619] do_syscall_64+0x103/0x610 [ 1043.541490][T11619] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1043.541502][T11619] RIP: 0033:0x457e29 01:11:59 executing program 5 (fault-call:6 fault-nth:3): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:11:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='caif0\x00') r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x7) [ 1043.541517][T11619] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1043.541532][T11619] RSP: 002b:00007f560e693c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1043.548597][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1043.551719][T11619] RAX: ffffffffffffffda RBX: 00007f560e693c90 RCX: 0000000000457e29 [ 1043.551728][T11619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1043.551737][T11619] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.551747][T11619] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6946d4 [ 1043.551755][T11619] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1043.621679][ C0] net_ratelimit: 22 callbacks suppressed [ 1043.621691][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.664087][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1043.670011][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.675799][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:11:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48, 0x0}) [ 1043.681161][T11970] binder: 11950:11970 got new transaction with bad transaction stack, transaction 7484 has target 11950:0 [ 1043.714173][T11985] FAULT_INJECTION: forcing a failure. [ 1043.714173][T11985] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.735838][T12010] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.740319][T11985] CPU: 0 PID: 11985 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1043.750929][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.760986][T11985] Call Trace: [ 1043.764298][T11985] dump_stack+0x172/0x1f0 [ 1043.768666][T11985] should_fail.cold+0xa/0x15 [ 1043.769505][T12010] binder: 11983:12010 ioctl 40046207 0 returned -16 [ 1043.773266][T11985] ? fault_create_debugfs_attr+0x1e0/0x1e0 01:11:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1043.773288][T11985] ? ___might_sleep+0x163/0x280 [ 1043.773309][T11985] __should_failslab+0x121/0x190 [ 1043.773330][T11985] should_failslab+0x9/0x14 [ 1043.799977][T11985] __kmalloc+0x2dc/0x740 [ 1043.804282][T11985] ? alloc_trace_uprobe+0x3c4/0x790 [ 1043.809490][T11985] alloc_trace_uprobe+0x3c4/0x790 [ 1043.814530][T11985] create_local_trace_uprobe+0x109/0x4e0 [ 1043.820176][T11985] ? bpf_get_uprobe_info+0x340/0x340 [ 1043.825484][T11985] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1043.827080][T12183] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.831727][T11985] ? strncpy_from_user+0x2a8/0x380 [ 1043.831747][T11985] perf_uprobe_init+0x1a2/0x290 [ 1043.831766][T11985] perf_uprobe_event_init+0x106/0x1a0 [ 1043.831797][T11985] perf_try_init_event+0x137/0x3f0 [ 1043.831815][T11985] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1043.831845][T11985] ? __perf_event_read+0xe10/0xe10 [ 1043.831868][T11985] ? kasan_check_read+0x11/0x20 [ 1043.854708][T12183] binder: 12025:12183 ioctl 40046207 0 returned -16 [ 1043.858211][T11985] ? do_raw_spin_unlock+0x57/0x270 [ 1043.858236][T11985] __do_sys_perf_event_open+0x830/0x24d0 [ 1043.858262][T11985] ? perf_event_set_output+0x4e0/0x4e0 [ 1043.884353][T12237] binder: 12025:12237 got new transaction with bad transaction stack, transaction 7486 has target 11950:0 [ 1043.885466][T11985] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1043.885492][T11985] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1043.885513][T11985] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1043.912488][ T7769] binder: send failed reply for transaction 7484 to 11950:11970 [ 1043.914117][T11985] ? do_syscall_64+0x26/0x610 [ 1043.914133][T11985] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1043.914153][T11985] ? do_syscall_64+0x26/0x610 [ 1043.924416][ T7769] binder: send failed reply for transaction 7486 to 12025:12237 [ 1043.925060][T11985] __x64_sys_perf_event_open+0xbe/0x150 [ 1043.925102][T11985] do_syscall_64+0x103/0x610 [ 1043.965859][T11985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1043.969879][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1043.971768][T11985] RIP: 0033:0x457e29 01:11:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8f50, 0x101200) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/115, &(0x7f0000000100)=0x73) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1043.971783][T11985] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1043.971799][T11985] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1043.988589][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1044.002126][T11985] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1044.002135][T11985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 01:11:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c, 0x0}) 01:11:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:11:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x5452, 0x0) [ 1044.002144][T11985] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1044.002154][T11985] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1044.002163][T11985] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1044.127530][T12342] binder: 12328:12342 got new transaction with bad transaction stack, transaction 7492 has target 12328:0 [ 1044.157847][T12409] binder: BINDER_SET_CONTEXT_MGR already set 01:12:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1044.202037][T12409] binder: 12341:12409 ioctl 40046207 0 returned -16 [ 1044.220898][ T7769] binder: release 12328:12342 transaction 7492 out, still active [ 1044.229386][T11985] trace_uprobe: Failed to allocate trace_uprobe.(-12) 01:12:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1044.252298][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1044.286723][ T7769] binder_release_work: 43 callbacks suppressed [ 1044.286728][ T7769] binder: undelivered TRANSACTION_ERROR: 29201 01:12:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1044.295865][T12508] binder: BINDER_SET_CONTEXT_MGR already set 01:12:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x60, 0x0}) 01:12:00 executing program 5 (fault-call:6 fault-nth:4): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1044.360863][T12508] binder: 12489:12508 ioctl 40046207 0 returned -16 [ 1044.367636][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1044.376724][T12552] binder: BINDER_SET_CONTEXT_MGR already set 01:12:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x5460, 0x0) [ 1044.435349][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1044.443100][T12552] binder: 12546:12552 ioctl 40046207 0 returned -16 [ 1044.453117][T12598] binder: BINDER_SET_CONTEXT_MGR already set [ 1044.459501][T12598] binder: 12596:12598 ioctl 40046207 0 returned -16 [ 1044.462628][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1044.473291][T12598] binder: BINDER_SET_CONTEXT_MGR already set 01:12:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1044.508166][T12598] binder: 12596:12598 ioctl 40046207 0 returned -16 [ 1044.521484][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1044.531135][T12686] FAULT_INJECTION: forcing a failure. [ 1044.531135][T12686] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.541503][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1044.567526][ T7769] binder: send failed reply for transaction 7492, target dead [ 1044.578411][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.584187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.590020][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.595792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.598169][T12686] CPU: 1 PID: 12686 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1044.610600][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.620652][T12686] Call Trace: [ 1044.620675][T12686] dump_stack+0x172/0x1f0 [ 1044.620701][T12686] should_fail.cold+0xa/0x15 [ 1044.632866][T12686] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1044.632888][T12686] ? ___might_sleep+0x163/0x280 [ 1044.632910][T12686] __should_failslab+0x121/0x190 [ 1044.648488][T12686] should_failslab+0x9/0x14 [ 1044.653016][T12686] __kmalloc+0x2dc/0x740 [ 1044.657276][T12686] ? alloc_trace_uprobe+0x3c4/0x790 [ 1044.662481][T12686] alloc_trace_uprobe+0x3c4/0x790 [ 1044.667524][T12686] create_local_trace_uprobe+0x109/0x4e0 [ 1044.673176][T12686] ? bpf_get_uprobe_info+0x340/0x340 [ 1044.678482][T12686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1044.684727][T12686] ? strncpy_from_user+0x2a8/0x380 [ 1044.689847][T12686] perf_uprobe_init+0x1a2/0x290 [ 1044.694702][T12686] perf_uprobe_event_init+0x106/0x1a0 [ 1044.700076][T12686] perf_try_init_event+0x137/0x3f0 [ 1044.705196][T12686] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1044.710839][T12686] ? __perf_event_read+0xe10/0xe10 [ 1044.715954][T12686] ? kasan_check_read+0x11/0x20 [ 1044.720809][T12686] ? do_raw_spin_unlock+0x57/0x270 [ 1044.725933][T12686] __do_sys_perf_event_open+0x830/0x24d0 [ 1044.731615][T12686] ? perf_event_set_output+0x4e0/0x4e0 [ 1044.737094][T12686] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1044.743351][T12686] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1044.748810][T12686] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1044.754288][T12686] ? do_syscall_64+0x26/0x610 [ 1044.758980][T12686] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1044.765046][T12686] ? do_syscall_64+0x26/0x610 [ 1044.769730][T12686] __x64_sys_perf_event_open+0xbe/0x150 [ 1044.775277][T12686] do_syscall_64+0x103/0x610 [ 1044.779874][T12686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1044.785766][T12686] RIP: 0033:0x457e29 [ 1044.789657][T12686] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1044.809256][T12686] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1044.817664][T12686] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1044.825642][T12686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1044.833615][T12686] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1044.841592][T12686] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1044.849580][T12686] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1044.857871][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:12:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000dfeed2d4c57e9876d6b34f35672e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001834f717e86ff3e54e43aead557bc3e63c17d80381eeb2dc687db612e74fee27036b8813873ed63c8a28cc2d77a6f09d6a12566c902e6a8bee77def05b47ed8d9502be907d1788306f963f3796ac877aa1b557fa4655fd5684"], 0x0, 0x0, 0x0}) 01:12:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x68, 0x0}) 01:12:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1044.863824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.896218][T12939] binder: 12878:12939 got new transaction with bad transaction stack, transaction 7499 has target 12878:0 [ 1044.927736][T12989] binder: BINDER_SET_CONTEXT_MGR already set 01:12:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x40049409, 0x0) [ 1044.964863][T12989] binder: 12980:12989 ioctl 40046207 0 returned -16 [ 1044.965386][T13008] binder: BINDER_SET_CONTEXT_MGR already set [ 1044.975080][T12939] binder_transaction: 33 callbacks suppressed [ 1044.975098][T12939] binder: 12878:12939 transaction failed 29201/-71, size 0-0 line 3044 [ 1044.981266][T13008] binder: 12938:13008 ioctl 40046207 0 returned -16 [ 1044.998947][T13009] binder: 12980:13009 got new transaction with bad transaction stack, transaction 7501 has target 12878:0 [ 1045.056131][T13009] binder: 12980:13009 transaction failed 29201/-71, size 0-0 line 3044 [ 1045.076493][ T6208] binder: release 12878:12939 transaction 7499 out, still active [ 1045.087591][T12686] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1045.095026][T12989] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.095956][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1045.106653][T12989] binder: 12980:12989 ioctl 40046207 0 returned -16 [ 1045.112742][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1045.113837][T13009] binder: 12980:13009 got new transaction with bad transaction stack, transaction 7503 has target 12878:0 01:12:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000002840)='/dev/audio\x00', 0x40000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000002880)=0xfffffffffffeffff) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/151, 0x97}, {&(0x7f0000000240)=""/189, 0xbd}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000001700)=""/57, 0x39}, {&(0x7f0000001740)=""/100, 0x64}, {&(0x7f00000017c0)=""/139, 0x8b}], 0xa, &(0x7f0000001940)=""/239, 0xef}, 0xfff}, {{&(0x7f0000001a40), 0x80, &(0x7f0000001d00)=[{&(0x7f0000001ac0)=""/9, 0x9}, {&(0x7f0000001b00)=""/107, 0x6b}, {&(0x7f0000001b80)=""/98, 0x62}, {&(0x7f0000001c00)=""/216, 0xd8}], 0x4, &(0x7f0000001d40)=""/73, 0x49}, 0x100}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001dc0)=""/84, 0x54}, {&(0x7f0000001e40)=""/240, 0xf0}, {&(0x7f0000001f40)=""/102, 0x66}, {&(0x7f0000001fc0)=""/159, 0x9f}], 0x4, &(0x7f00000020c0)=""/149, 0x95}, 0x5}, {{&(0x7f0000002180)=@ax25={{}, [@default, @bcast, @rose, @default, @rose, @remote, @default, @rose]}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002200)=""/250, 0xfa}], 0x1, &(0x7f0000002340)=""/247, 0xf7}, 0x6}, {{&(0x7f0000002440)=@isdn, 0x80, &(0x7f0000002540)=[{&(0x7f00000024c0)=""/122, 0x7a}], 0x1, &(0x7f0000002580)=""/196, 0xc4}, 0x8001}], 0x6, 0x40, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000002800)=0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:01 executing program 5 (fault-call:6 fault-nth:5): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1045.159714][ T6208] binder: send failed reply for transaction 7499, target dead [ 1045.193533][T13009] binder: 12980:13009 transaction failed 29201/-71, size 0-0 line 3044 [ 1045.197152][ T6208] binder: send failed reply for transaction 7501 to 12980:13009 01:12:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4004af61, 0x0) [ 1045.293705][ T6208] binder: send failed reply for transaction 7503 to 12980:13009 [ 1045.316707][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1045.327283][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 01:12:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c, 0x0}) [ 1045.342983][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1045.362721][T13223] FAULT_INJECTION: forcing a failure. [ 1045.362721][T13223] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.374310][T13228] binder: 13220:13228 got transaction to context manager from process owning it [ 1045.384974][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1045.401256][T13227] binder: 13221:13227 transaction failed 29189/-3, size 0-0 line 3147 [ 1045.403074][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1045.420206][T13223] CPU: 0 PID: 13223 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1045.429388][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1045.438511][T13228] binder: 13220:13228 transaction failed 29201/-22, size 0-0 line 2985 [ 1045.439432][T13223] Call Trace: [ 1045.439460][T13223] dump_stack+0x172/0x1f0 [ 1045.439488][T13223] should_fail.cold+0xa/0x15 [ 1045.459898][T13223] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1045.465715][T13223] ? ___might_sleep+0x163/0x280 [ 1045.470585][T13223] __should_failslab+0x121/0x190 [ 1045.475532][T13223] should_failslab+0x9/0x14 [ 1045.480046][T13223] __kmalloc_track_caller+0x2d8/0x740 [ 1045.485423][T13223] ? rcu_read_lock_sched_held+0x110/0x130 [ 1045.491145][T13223] ? __kmalloc+0x5d5/0x740 [ 1045.495581][T13223] ? alloc_trace_uprobe+0x412/0x790 [ 1045.500804][T13223] kstrdup+0x3a/0x70 [ 1045.504730][T13223] alloc_trace_uprobe+0x412/0x790 [ 1045.509766][T13223] create_local_trace_uprobe+0x109/0x4e0 [ 1045.515401][T13223] ? bpf_get_uprobe_info+0x340/0x340 [ 1045.520724][T13223] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1045.522562][T13257] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.526995][T13223] ? strncpy_from_user+0x2a8/0x380 [ 1045.527014][T13223] perf_uprobe_init+0x1a2/0x290 [ 1045.527035][T13223] perf_uprobe_event_init+0x106/0x1a0 [ 1045.548304][T13223] perf_try_init_event+0x137/0x3f0 [ 1045.553423][T13223] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1045.559068][T13223] ? __perf_event_read+0xe10/0xe10 [ 1045.562131][T13257] binder: 13244:13257 ioctl 40046207 0 returned -16 [ 1045.564182][T13223] ? kasan_check_read+0x11/0x20 [ 1045.564199][T13223] ? do_raw_spin_unlock+0x57/0x270 [ 1045.564222][T13223] __do_sys_perf_event_open+0x830/0x24d0 [ 1045.564248][T13223] ? perf_event_set_output+0x4e0/0x4e0 [ 1045.591842][T13223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 01:12:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x39, 0x0, 0x8000, "d41b6ca06b2189e1c9cd4f9406169a82", "6909cb7c4d9c7e809ef012d3000189560bdaeccef2d336c27ca64924ffa4b43daf0900f2"}, 0x39, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) [ 1045.598095][T13223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1045.603643][T13223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1045.609106][T13223] ? do_syscall_64+0x26/0x610 [ 1045.613790][T13223] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1045.619863][T13223] ? do_syscall_64+0x26/0x610 [ 1045.620070][T13433] binder: 13244:13433 transaction failed 29189/-3, size 0-0 line 3147 [ 1045.624547][T13223] __x64_sys_perf_event_open+0xbe/0x150 [ 1045.624577][T13223] do_syscall_64+0x103/0x610 [ 1045.624598][T13223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1045.642861][T13223] RIP: 0033:0x457e29 01:12:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1045.652617][T13223] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1045.672218][T13223] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1045.672234][T13223] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1045.672242][T13223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 01:12:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) [ 1045.672251][T13223] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1045.672261][T13223] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1045.672269][T13223] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1045.682526][T13433] binder: 13244:13433 transaction failed 29189/-3, size 0-0 line 3147 [ 1045.728768][T13438] binder: 13437:13438 transaction failed 29189/-3, size 0-0 line 3147 [ 1045.741363][T13436] binder: BINDER_SET_CONTEXT_MGR already set 01:12:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1045.770122][T13436] binder: 13434:13436 ioctl 40046207 0 returned -16 01:12:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x74, 0x0}) [ 1045.822699][T13497] binder: 13456:13497 transaction failed 29189/-22, size 0-0 line 2994 01:12:01 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:01 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20ncci\x00', 0x105a00, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000005c0)={0x2, [0x0, 0x0]}, &(0x7f0000000600)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001700)={r1, @in6={{0xa, 0x4e21, 0x68a4, @ipv4={[], [], @remote}, 0x1}}}, &(0x7f00000017c0)=0x84) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1045.956847][T13656] binder: 13654:13656 transaction failed 29189/-3, size 0-0 line 3147 [ 1045.970167][T13655] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.994099][T13223] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1045.994645][T13655] binder: 13652:13655 ioctl 40046207 0 returned -16 [ 1046.008445][T13658] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.024746][T13658] binder: 13653:13658 ioctl 40046207 0 returned -16 [ 1046.026901][T13656] binder: BINDER_SET_CONTEXT_MGR already set 01:12:01 executing program 5 (fault-call:6 fault-nth:6): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4020940d, 0x0) 01:12:01 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1046.078671][T13656] binder: 13654:13656 ioctl 40046207 0 returned -16 01:12:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a, 0x0}) 01:12:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x44000) write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x2}, 0xb) 01:12:02 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:12:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x8008af00, 0x0) [ 1046.295880][T13825] FAULT_INJECTION: forcing a failure. [ 1046.295880][T13825] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.349866][T13883] binder: 13878:13883 got new transaction with bad transaction stack, transaction 7519 has target 13878:0 [ 1046.381214][T13825] CPU: 1 PID: 13825 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1046.390369][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.392183][T13893] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.400425][T13825] Call Trace: [ 1046.400453][T13825] dump_stack+0x172/0x1f0 [ 1046.400477][T13825] should_fail.cold+0xa/0x15 [ 1046.418623][T13825] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1046.424447][T13825] ? ___might_sleep+0x163/0x280 [ 1046.431402][T13825] __should_failslab+0x121/0x190 [ 1046.436361][T13825] should_failslab+0x9/0x14 [ 1046.440879][T13825] __kmalloc_track_caller+0x2d8/0x740 [ 1046.446259][T13825] ? rcu_read_lock_sched_held+0x110/0x130 [ 1046.451994][T13825] ? __kmalloc+0x5d5/0x740 [ 1046.456420][T13825] ? alloc_trace_uprobe+0x456/0x790 [ 1046.461628][T13825] kstrdup+0x3a/0x70 [ 1046.465531][T13825] alloc_trace_uprobe+0x456/0x790 [ 1046.470584][T13825] create_local_trace_uprobe+0x109/0x4e0 [ 1046.475828][T13893] binder: 13884:13893 ioctl 40046207 0 returned -16 [ 1046.476229][T13825] ? bpf_get_uprobe_info+0x340/0x340 [ 1046.488084][T13825] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1046.494333][T13825] ? strncpy_from_user+0x2a8/0x380 [ 1046.499462][T13825] perf_uprobe_init+0x1a2/0x290 [ 1046.504324][T13825] perf_uprobe_event_init+0x106/0x1a0 [ 1046.509715][T13825] perf_try_init_event+0x137/0x3f0 [ 1046.514840][T13825] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1046.520489][T13825] ? __perf_event_read+0xe10/0xe10 [ 1046.525611][T13825] ? kasan_check_read+0x11/0x20 [ 1046.528923][T14077] binder: 13884:14077 got new transaction with bad transaction stack, transaction 7521 has target 13878:0 [ 1046.530469][T13825] ? do_raw_spin_unlock+0x57/0x270 [ 1046.530495][T13825] __do_sys_perf_event_open+0x830/0x24d0 [ 1046.530521][T13825] ? perf_event_set_output+0x4e0/0x4e0 [ 1046.557970][T13825] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1046.564235][T13825] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1046.569709][T13825] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1046.575180][T13825] ? do_syscall_64+0x26/0x610 [ 1046.576562][T13893] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.579866][T13825] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1046.579883][T13825] ? do_syscall_64+0x26/0x610 [ 1046.579904][T13825] __x64_sys_perf_event_open+0xbe/0x150 [ 1046.579923][T13825] do_syscall_64+0x103/0x610 [ 1046.579943][T13825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1046.592792][T13893] binder: 13884:13893 ioctl 40046207 0 returned -16 [ 1046.596633][T13825] RIP: 0033:0x457e29 [ 1046.596650][T13825] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:12:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1046.596658][T13825] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1046.602978][ T6208] binder: send failed reply for transaction 7519 to 13878:13883 [ 1046.606778][T13825] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1046.606788][T13825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1046.606797][T13825] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1046.606807][T13825] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1046.606816][T13825] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 01:12:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x90, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1046.674156][T14203] binder: 14202:14203 ioctl c0306201 0 returned -14 [ 1046.708109][ T6208] binder: send failed reply for transaction 7521 to 13884:14077 [ 1046.771586][T14208] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.793879][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1046.800472][T14208] binder: 14205:14208 ioctl 40046207 0 returned -16 [ 1046.807213][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1046.816663][T13825] trace_uprobe: Failed to allocate trace_uprobe.(-12) 01:12:02 executing program 5 (fault-call:6 fault-nth:7): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300, 0x0}) 01:12:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0xc0045878, 0x0) 01:12:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1046.909907][T14281] binder: 14275:14281 ioctl c0306201 0 returned -14 [ 1046.920587][T14298] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.935115][T14298] binder: 14279:14298 ioctl 40046207 0 returned -16 01:12:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1046.956575][T14298] binder_alloc: 14275: binder_alloc_buf failed to map pages in userspace, no vma [ 1046.999308][T14397] binder_alloc_new_buf_locked: 15 callbacks suppressed [ 1046.999316][T14397] binder_alloc: 14279: binder_alloc_buf, no vma [ 1047.016011][T14406] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.028580][T14406] binder: 14402:14406 ioctl 40046207 0 returned -16 01:12:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x20) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x8, 0x2, 0x1}, 0x3f}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500, 0x0}) [ 1047.050600][T14410] FAULT_INJECTION: forcing a failure. [ 1047.050600][T14410] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.142629][T14410] CPU: 1 PID: 14410 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1047.151745][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.161802][T14410] Call Trace: [ 1047.165102][T14410] dump_stack+0x172/0x1f0 [ 1047.169453][T14410] should_fail.cold+0xa/0x15 [ 1047.174061][T14410] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1047.179893][T14410] ? ___might_sleep+0x163/0x280 [ 1047.184756][T14410] __should_failslab+0x121/0x190 [ 1047.189699][T14410] should_failslab+0x9/0x14 [ 1047.194205][T14410] __kmalloc_track_caller+0x2d8/0x740 [ 1047.199580][T14410] ? lockdep_init_map+0x10c/0x5b0 [ 1047.204645][T14410] ? __rwlock_init+0x2d/0x140 [ 1047.209399][T14410] ? create_local_trace_uprobe+0x1d1/0x4e0 [ 1047.215225][T14410] kstrdup+0x3a/0x70 [ 1047.219126][T14410] create_local_trace_uprobe+0x1d1/0x4e0 [ 1047.224780][T14410] ? bpf_get_uprobe_info+0x340/0x340 [ 1047.230078][T14410] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1047.236325][T14410] ? strncpy_from_user+0x2a8/0x380 [ 1047.241448][T14410] perf_uprobe_init+0x1a2/0x290 [ 1047.244028][ T6208] binder: send failed reply for transaction 7530 to 14469:14483 [ 1047.246300][T14410] perf_uprobe_event_init+0x106/0x1a0 [ 1047.246319][T14410] perf_try_init_event+0x137/0x3f0 [ 1047.246345][T14410] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1047.246367][T14410] ? __perf_event_read+0xe10/0xe10 [ 1047.275174][T14410] ? kasan_check_read+0x11/0x20 [ 1047.280042][T14410] ? do_raw_spin_unlock+0x57/0x270 [ 1047.285189][T14410] __do_sys_perf_event_open+0x830/0x24d0 [ 1047.290832][T14410] ? perf_event_set_output+0x4e0/0x4e0 [ 1047.296326][T14410] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1047.302595][T14410] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1047.308088][T14410] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1047.308706][T14642] binder_alloc: 14639: binder_alloc_buf size 5763481904858259784 failed, no address space [ 1047.313604][T14410] ? do_syscall_64+0x26/0x610 [ 1047.313635][T14410] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1047.313664][T14410] ? do_syscall_64+0x26/0x610 01:12:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:12:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x3, 0xffff, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000006d4e254100fc4f477429730000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000cacc372c0000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000008000000000000000000"], 0x0, 0x0, 0x0}) 01:12:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1047.313686][T14410] __x64_sys_perf_event_open+0xbe/0x150 [ 1047.313705][T14410] do_syscall_64+0x103/0x610 [ 1047.313726][T14410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1047.332117][T14642] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 1047.334343][T14410] RIP: 0033:0x457e29 [ 1047.334358][T14410] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1047.334365][T14410] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1047.334379][T14410] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1047.334388][T14410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1047.334396][T14410] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1047.334404][T14410] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1047.334412][T14410] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 01:12:03 executing program 5 (fault-call:6 fault-nth:8): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0xc0045878, 0x0) 01:12:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:12:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600, 0x0}) 01:12:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r1) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r1}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:03 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400000800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7ff, 0xd00) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000080)={0x0, {0x9, 0x1}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfe88, 0x0, 0x0}) 01:12:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 1047.605876][T14762] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.633391][T14763] binder: 14757:14763 got transaction to context manager from process owning it [ 1047.683403][T14762] binder: 14755:14762 ioctl 40046207 0 returned -16 [ 1047.683427][ T6208] binder: release 14754:14758 transaction 7537 out, still active [ 1047.697939][T14843] binder_alloc: 14754: binder_alloc_buf, no vma [ 1047.708262][ T6208] binder: send failed reply for transaction 7537, target dead [ 1047.719964][T14763] binder: 14757:14763 ioctl c0306201 20000200 returned -14 [ 1047.749978][T14835] FAULT_INJECTION: forcing a failure. [ 1047.749978][T14835] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.765327][T14835] CPU: 0 PID: 14835 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1047.774445][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.784491][T14835] Call Trace: [ 1047.787846][T14835] dump_stack+0x172/0x1f0 [ 1047.792189][T14835] should_fail.cold+0xa/0x15 [ 1047.796833][T14835] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1047.802673][T14835] ? ___might_sleep+0x163/0x280 [ 1047.807564][T14835] __should_failslab+0x121/0x190 [ 1047.812516][T14835] should_failslab+0x9/0x14 [ 1047.812534][T14835] __kmalloc+0x2dc/0x740 [ 1047.812549][T14835] ? __kmalloc_track_caller+0x5d1/0x740 [ 1047.812580][T14835] ? lockdep_init_map+0x10c/0x5b0 [ 1047.821310][T14835] ? traceprobe_set_print_fmt+0x3a/0xa0 [ 1047.821329][T14835] traceprobe_set_print_fmt+0x3a/0xa0 [ 1047.821346][T14835] create_local_trace_uprobe+0x38c/0x4e0 01:12:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700, 0x0}) [ 1047.821363][T14835] ? bpf_get_uprobe_info+0x340/0x340 [ 1047.821382][T14835] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1047.821397][T14835] ? strncpy_from_user+0x2a8/0x380 [ 1047.821417][T14835] perf_uprobe_init+0x1a2/0x290 [ 1047.821436][T14835] perf_uprobe_event_init+0x106/0x1a0 [ 1047.875284][T14835] perf_try_init_event+0x137/0x3f0 [ 1047.880417][T14835] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1047.886069][T14835] ? __perf_event_read+0xe10/0xe10 [ 1047.891188][T14835] ? kasan_check_read+0x11/0x20 [ 1047.896055][T14835] ? do_raw_spin_unlock+0x57/0x270 [ 1047.901175][T14835] __do_sys_perf_event_open+0x830/0x24d0 [ 1047.906823][T14835] ? perf_event_set_output+0x4e0/0x4e0 [ 1047.912299][T14835] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1047.918552][T14835] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1047.924031][T14835] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1047.924574][T15002] binder_alloc: 14988: binder_alloc_buf, no vma [ 1047.929505][T14835] ? do_syscall_64+0x26/0x610 [ 1047.929520][T14835] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1047.929534][T14835] ? do_syscall_64+0x26/0x610 [ 1047.929553][T14835] __x64_sys_perf_event_open+0xbe/0x150 [ 1047.929581][T14835] do_syscall_64+0x103/0x610 [ 1047.929631][T14835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1047.929642][T14835] RIP: 0033:0x457e29 [ 1047.929663][T14835] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1047.945617][T15002] binder: BINDER_SET_CONTEXT_MGR already set 01:12:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000100)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc5, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 01:12:03 executing program 5 (fault-call:6 fault-nth:9): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1047.946604][T14835] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1047.946619][T14835] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1047.946629][T14835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1047.946638][T14835] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1047.946647][T14835] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1047.946664][T14835] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 01:12:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0xc0189436, 0x0) 01:12:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r1) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r1}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa00, 0x0}) 01:12:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 1047.953409][T15003] binder_alloc: 14988: binder_alloc_buf, no vma [ 1047.962462][T15002] binder: 14988:15002 ioctl 40046207 0 returned -16 [ 1048.087692][T15078] binder: 15077:15078 unknown command 0 [ 1048.093313][T15078] binder: 15077:15078 ioctl c0306201 20000080 returned -22 01:12:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r1) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r1}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1048.166764][T15189] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.187552][T15189] binder: 15109:15189 ioctl 40046207 0 returned -16 [ 1048.195504][T15084] FAULT_INJECTION: forcing a failure. [ 1048.195504][T15084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1048.234858][T15272] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.245805][T15272] binder: 15181:15272 ioctl 40046207 0 returned -16 [ 1048.268690][T15291] binder_alloc: 15077: binder_alloc_buf failed to map pages in userspace, no vma [ 1048.268818][T15084] CPU: 1 PID: 15084 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1048.277956][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.278003][T15084] Call Trace: [ 1048.278029][T15084] dump_stack+0x172/0x1f0 [ 1048.278053][T15084] should_fail.cold+0xa/0x15 [ 1048.309381][T15084] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1048.315202][T15084] ? ___might_sleep+0x163/0x280 [ 1048.315873][T15189] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.320072][T15084] should_fail_alloc_page+0x50/0x60 [ 1048.320090][T15084] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1048.320113][T15084] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1048.320136][T15084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1048.320151][T15084] ? find_next_bit+0x107/0x130 [ 1048.320173][T15084] probe_event_enable+0x598/0xc40 [ 1048.326557][T15189] binder: 15109:15189 ioctl 40046207 0 returned -16 [ 1048.331327][T15084] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 1048.331351][T15084] ? traceprobe_set_print_fmt+0x3a/0xa0 [ 1048.331367][T15084] ? __uprobe_perf_filter.part.0+0x110/0x110 01:12:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000, 0x0}) 01:12:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), &(0x7f0000000080)=[0x78, 0x0]}, 0xc1b}}, @request_death={0x400c630e, 0x3, 0x4}], 0x10, 0x0, &(0x7f0000000180)="af51ed05239b41347657dea895311573"}) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000700)=""/4096) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x8c63, &(0x7f0000000240)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000001000000000000000000000000000000000000f887ea6a9800000000000000000000000000000000000000000000000000000001000000000000000000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000"], 0x0, 0x0, 0x0}) [ 1048.331388][T15084] trace_uprobe_register+0x4ba/0x960 [ 1048.331409][T15084] perf_trace_event_init+0x500/0x990 [ 1048.331429][T15084] perf_uprobe_init+0x1db/0x290 [ 1048.337423][T15291] binder_alloc: 15077: binder_alloc_buf failed to map pages in userspace, no vma [ 1048.342492][T15084] perf_uprobe_event_init+0x106/0x1a0 [ 1048.342511][T15084] perf_try_init_event+0x137/0x3f0 [ 1048.342530][T15084] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1048.342553][T15084] ? __perf_event_read+0xe10/0xe10 [ 1048.342581][T15084] ? kasan_check_read+0x11/0x20 [ 1048.342605][T15084] ? do_raw_spin_unlock+0x57/0x270 [ 1048.411929][T15084] __do_sys_perf_event_open+0x830/0x24d0 [ 1048.411957][T15084] ? perf_event_set_output+0x4e0/0x4e0 [ 1048.411974][T15084] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1048.411999][T15084] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1048.422722][T15084] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1048.422739][T15084] ? do_syscall_64+0x26/0x610 [ 1048.422760][T15084] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1048.476677][T15084] ? do_syscall_64+0x26/0x610 [ 1048.481376][T15084] __x64_sys_perf_event_open+0xbe/0x150 [ 1048.486938][T15084] do_syscall_64+0x103/0x610 [ 1048.491540][T15084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1048.497445][T15084] RIP: 0033:0x457e29 [ 1048.501356][T15084] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1048.520969][T15084] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 01:12:04 executing program 5 (fault-call:6 fault-nth:10): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1048.529382][T15084] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1048.537352][T15084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1048.545334][T15084] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1048.553320][T15084] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1048.561289][T15084] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 01:12:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0xc020660b, 0x0) [ 1048.682614][T15410] binder: 15405:15410 got transaction to invalid handle [ 1048.717861][ T7769] binder: release 15404:15411 transaction 7550 out, still active [ 1048.724725][T15414] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.732269][T15414] binder: 15413:15414 ioctl 40046207 0 returned -16 [ 1048.738701][ T7769] binder_release_work: 2 callbacks suppressed [ 1048.738706][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1048.739052][ C0] net_ratelimit: 18 callbacks suppressed [ 1048.739060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.756919][T15410] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.762157][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.773931][ C0] protocol 88fb is buggy, dev hsr_slave_0 01:12:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1048.775416][ T7769] binder: send failed reply for transaction 7550, target dead [ 1048.779711][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.787613][T15410] binder: 15405:15410 ioctl 40046207 0 returned -16 [ 1048.804865][T15473] binder_alloc: 15413: binder_alloc_buf, no vma [ 1048.829080][T15475] FAULT_INJECTION: forcing a failure. [ 1048.829080][T15475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1048.855395][ T6208] binder: release 15508:15529 transaction 7555 out, still active [ 1048.867144][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1048.879214][T15475] CPU: 0 PID: 15475 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1048.888319][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.898400][T15475] Call Trace: [ 1048.901695][T15475] dump_stack+0x172/0x1f0 [ 1048.906047][T15475] should_fail.cold+0xa/0x15 [ 1048.910649][T15475] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1048.916468][T15475] ? ___might_sleep+0x163/0x280 [ 1048.921343][T15475] should_fail_alloc_page+0x50/0x60 [ 1048.926544][T15475] __alloc_pages_nodemask+0x1a1/0x7e0 01:12:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f00, 0x0}) 01:12:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1048.931933][T15475] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1048.937661][T15475] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1048.943906][T15475] ? find_next_bit+0x107/0x130 [ 1048.948679][T15475] probe_event_enable+0x598/0xc40 [ 1048.953704][T15475] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 1048.959168][T15475] ? traceprobe_set_print_fmt+0x3a/0xa0 [ 1048.964712][T15475] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 1048.970695][T15475] trace_uprobe_register+0x4ba/0x960 [ 1048.975985][T15475] perf_trace_event_init+0x500/0x990 01:12:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r1) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r1}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1048.981275][T15475] perf_uprobe_init+0x1db/0x290 [ 1048.981294][T15475] perf_uprobe_event_init+0x106/0x1a0 [ 1048.981312][T15475] perf_try_init_event+0x137/0x3f0 [ 1048.981331][T15475] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1048.981353][T15475] ? __perf_event_read+0xe10/0xe10 [ 1048.981371][T15475] ? kasan_check_read+0x11/0x20 [ 1048.981378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.981392][T15475] ? do_raw_spin_unlock+0x57/0x270 [ 1048.981416][T15475] __do_sys_perf_event_open+0x830/0x24d0 01:12:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000080)={0x2, 0x8, [0x3, 0x66]}) [ 1048.981428][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.981445][T15475] ? perf_event_set_output+0x4e0/0x4e0 [ 1048.981461][T15475] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1048.981488][T15475] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1048.981504][T15475] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1048.981519][T15475] ? do_syscall_64+0x26/0x610 [ 1048.981534][T15475] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1048.981549][T15475] ? do_syscall_64+0x26/0x610 [ 1048.981560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.981587][T15475] __x64_sys_perf_event_open+0xbe/0x150 [ 1048.981607][T15475] do_syscall_64+0x103/0x610 [ 1048.981626][T15475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1048.981631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.981641][T15475] RIP: 0033:0x457e29 [ 1048.981657][T15475] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1048.981666][T15475] RSP: 002b:00007f560e693c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1048.981698][T15475] RAX: ffffffffffffffda RBX: 00007f560e693c90 RCX: 0000000000457e29 [ 1048.981707][T15475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1048.981716][T15475] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1048.981725][T15475] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6946d4 [ 1048.981735][T15475] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1048.997315][ T6208] binder: send failed reply for transaction 7555, target dead 01:12:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1d774f6c, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xc4, "1f847578732d7f07e3beba54e37220ef667973d7c2b11589d0a034dd6a389513ca60a41c82b9b0335b0a58b74b0ff372932965e6667d634f539a8d7f0f650bf4c68d5754ada969df57c884ac403a2bfd711a15e3623eb94cdb86f08b39c6f483f9f1e5aee2b7a34326ab297b16c941dae0b018ecc75a1850f2fa6c127b8ad6ac13430961a800cd80950bfb02e5b4621aac769887eeeae69b40799d9ce39af40f78c86f470778bab41a0258c952bb0e448bbf1833c523b22109675c9efb8edab8bde10eb1"}, &(0x7f0000000140)=0xcc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x27, 0x3, 0x1800000000000, 0x6, 0x9}, &(0x7f00000001c0)=0x14) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af00, 0x0) 01:12:05 executing program 5 (fault-call:6 fault-nth:11): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1049.048429][T15628] binder_alloc: 15593: binder_alloc_buf, no vma [ 1049.103232][T15632] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.201288][T15632] binder: 15627:15632 ioctl 40046207 0 returned -16 [ 1049.216506][T15631] binder_alloc: 15593: binder_alloc_buf, no vma [ 1049.254308][T15628] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.267896][T15628] binder: 15593:15628 ioctl 40046207 0 returned -16 [ 1049.288381][T15715] binder_alloc: 15593: binder_alloc_buf, no vma [ 1049.308588][T15743] FAULT_INJECTION: forcing a failure. [ 1049.308588][T15743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1049.326417][ T7769] binder_release_work: 30 callbacks suppressed [ 1049.326424][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1049.349312][T15743] CPU: 0 PID: 15743 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1049.358426][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1049.368474][T15743] Call Trace: [ 1049.371772][T15743] dump_stack+0x172/0x1f0 [ 1049.376118][T15743] should_fail.cold+0xa/0x15 [ 1049.380720][T15743] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1049.386531][T15743] ? ___might_sleep+0x163/0x280 [ 1049.388971][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1049.391408][T15743] should_fail_alloc_page+0x50/0x60 [ 1049.391425][T15743] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1049.391448][T15743] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1049.407845][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1049.408145][T15743] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1049.419992][T15743] ? find_next_bit+0x107/0x130 [ 1049.420014][T15743] probe_event_enable+0x598/0xc40 [ 1049.420030][T15743] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 1049.420044][T15743] ? traceprobe_set_print_fmt+0x3a/0xa0 [ 1049.420059][T15743] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 1049.420080][T15743] trace_uprobe_register+0x4ba/0x960 [ 1049.420102][T15743] perf_trace_event_init+0x500/0x990 [ 1049.431094][T15743] perf_uprobe_init+0x1db/0x290 [ 1049.431112][T15743] perf_uprobe_event_init+0x106/0x1a0 [ 1049.431134][T15743] perf_try_init_event+0x137/0x3f0 [ 1049.478238][T15848] binder_alloc: 15847: binder_alloc_buf, no vma [ 1049.478948][T15743] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1049.478973][T15743] ? __perf_event_read+0xe10/0xe10 [ 1049.478990][T15743] ? kasan_check_read+0x11/0x20 [ 1049.479008][T15743] ? do_raw_spin_unlock+0x57/0x270 01:12:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4800, 0x0}) [ 1049.479038][T15743] __do_sys_perf_event_open+0x830/0x24d0 [ 1049.511536][T15743] ? perf_event_set_output+0x4e0/0x4e0 [ 1049.513365][T15848] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.517017][T15743] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1049.517044][T15743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1049.517067][T15743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1049.529256][T15743] ? do_syscall_64+0x26/0x610 [ 1049.529286][T15743] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1049.529299][T15743] ? do_syscall_64+0x26/0x610 01:12:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000001c0)=0x1, 0x4) splice(r1, &(0x7f0000000200), r0, &(0x7f0000000240), 0xe8, 0x8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2, 0x119102) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000180)={0xae, &(0x7f0000000000)="f927abee156db297469489917429e3c38e5c5d4c8d887949162fd3661aa69c636d5742d6c56913641ef0b36a48405a085a569eb7243b1aebd7f5cdcced298a5ef7e9fbee830d6213e49b0f00fe31ef21a0b16b5d7a6850d00b6fa4a62753711e58ea11f2669f0f2da6de378e4bc547b20cfe3cf7a27528235afca869d155b7d28bfe21f19bd2949b18b77d707dca9c4789537c5d83329c2165e74a1ddf702b605cb21ef831e7b1305488cf7e77b5"}) 01:12:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r1) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r1}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1049.529316][T15743] __x64_sys_perf_event_open+0xbe/0x150 [ 1049.529332][T15743] do_syscall_64+0x103/0x610 [ 1049.529363][T15743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1049.529374][T15743] RIP: 0033:0x457e29 [ 1049.529388][T15743] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1049.529402][T15743] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 01:12:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x40000, 0x0) acct(&(0x7f0000000080)='./file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) r4 = getpgid(0xffffffffffffffff) r5 = geteuid() r6 = getegid() r7 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002c80)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000002d80)=0xe8) r9 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002dc0)={0x0}, &(0x7f0000002e00)=0xc) stat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002f00)='./file0/file0\x00', &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002fc0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003000)={0x0, 0x0}, &(0x7f0000003040)=0xc) stat(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = fcntl$getown(r2, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003140)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000003240)=0xe8) getgroups(0x9, &(0x7f0000003280)=[0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0xee01]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000032c0)={0x0}, &(0x7f0000003300)=0xc) r20 = getuid() stat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f00000036c0)={0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003700)={0x0, 0x0}, &(0x7f0000003740)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003780)={0x0, 0x0, 0x0}, &(0x7f00000037c0)=0xc) r25 = getpgrp(0x0) lstat(&(0x7f0000004bc0)='./file0/../file0\x00', &(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r27 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004c80)=0x0) lstat(&(0x7f0000004cc0)='./file0\x00', &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004d80)='./file0\x00', &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000004f40)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="335ee7966ddf116c0df99518bf665c6fad9cea7ff437ff0352c5e45f97bfd1", 0x1f}], 0x2, 0x0, 0x0, 0x8800}, {&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)="d7bc222cbb4df991284f78f9598f63a66b80ffaa737683199bba191c9cd2143782a2bd168dddc0c9c6cb9ad087af77413f9aab8bd3b7ac7772cee30ab1415b29d81522155d01e95cb857cc0ad1af4b913c503dec53822fb2354990a4eaee58fcabc7b58768a41159e0ca3ecb1d87dd35a6e7d84ebf8dafffcb185ecc55085f84fb4208a2e8495c0246e862ee83edb23e1d5b66d288b94286c480fed3dca030ad7dca127a1f63a37f7d620dc8fd5e78007e49e3dfa5790c8d486a5a7da6060ab06bdfcb6c021a766203174e", 0xcb}, {&(0x7f00000003c0)="332a9e9fb466b2acabf582ed408245d8d77a6f377af1a42dce63069cadb05e525112a4b7d1ddee61df2e3dea9c5297415224630a36d31544074133e89bc158638ed5b34396310c4531c48e6b1cecee9c65f6de01a1476f7cde9f9e4e6cad6514a6a31c026573073e53cf47f15eacdc3da9f4c8018bd29193e34affa60dbd9b15510a7bc61b46b19f355fb39600613ce62393ba52cb24fc65022b8c0e8733cd8f220c1c8d8dfd84b1016ff6809beb44b0", 0xb0}, {&(0x7f0000000480)="a731cf1ea408d2cef5b600ed9326257f1483a9b8eed07d947d85d4709a1c02eb2a25c08313ee4634df34c764584fb33ca4f6e53d9449e823685f5424657a7400960c4d06a6e98af98ef13c3ab352dc91f70ae69bb372016bb533c7c0771eabb6af4ebcb719c3fe732d075f609489ef25a03294a2889af461116135e06c24961298c87263f8f313e5cbeeb69cb4e5cf11e189cee6104f96a5edbc09056d6d847cf4b4c5bfb8a5ca39ad9e7ad4850945084b0e9add873c45fb0efb0898e509dea31f552b5767d513a1d0bec01fcde0fce044215753988d636c74b2bbbc6be029c79ef2d793aa305eae2c8f", 0xea}, {&(0x7f0000000580)="8c8e14b9fc3f9a7f7f9ee5a52b2406e1c6a5afdaa31ada447bc73a9151229abbf1f11d96330586ca1b7aa0b2ff674249bdfe3ba229e0aba24a88d560875684bc2b585229177843b2c5238fc4841fb6bc55fa7af12b5f894eee2ab361347ddb019b215cd8e4cbdbb6a5b5a3575b464499374e1e999af32ff7b5b9e9cea3b6b573b53b071c82d676fa9f877f7101e3ff914206b9381a52f7450717576fd95f93", 0x9f}], 0x4, 0x0, 0x0, 0x4000000}, {&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)="53aef41329ba38970c24315b66726aae27b77930e352ac00787c833cb3c8abea42e1a9bf5a5be9f8ad9674fd448c379612fe3e22560272f143071617369c5adac14c07350a1e4b41946d5ed0fe1dc56fbfc9cb197ef657966a90b6006cbb791f1dec51539139ac85e2a7154dab592e14c2b8", 0x72}, {&(0x7f0000000780)="6043b0baf2a868c5986a151b21ae6f9b7d945339c556e8da80e102fe1ed5c2c33ca74fe5ab1e4d13de45de5232", 0x2d}, {&(0x7f00000007c0)="aed8c9728707efb0118abee4aa4e4c782d8e8486c98da7036fe38874aa5a5848da6bbfb762a14352e2ff744a366ea21451d175a0662cdd06e96440d367b438653c4f447faab01d57e6412e2a7fb7c4fdc5", 0x51}, {&(0x7f0000000840)="39ec437e13d5fa80c96f7c82470f82f648bac2e83f5b5edd09e1bbd4a1d8e44ebc72ee138035682155bfd99178db9b2619ae18df3b62a04c5343dea0c780800a455ee7603c7f4a7bdeecf5bf0be742032490e5fe46ecf17faf08113a788bd0bd8821238fb6c28fa86d6845ee04", 0x6d}, {&(0x7f00000008c0)="b59e50def3f7be1a2ce75aeb76428a2802fc40a4132e42b69377595dfb404090fe1300bc5e26ce818fd4692c075ebe1bd8b72d7c85b140b12aae2fb363c835649fa75de8935de3c4f85e3afe33757d784c2b22c9f58c52f876fb71e7331f80a11cfc922ece8b5e2926aac29b91976afb598c82eef52d884aabbec526d07c2ac8ca7da520b8af88cf98ecd3ee229149bf71d610a7a5d46be18bb334a0fe602f", 0x9f}], 0x5, &(0x7f0000000a00)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x20, 0x5}, {&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000000ac0)="33000f24437af7bc2da271f9332460ffbdcbd3d0c3bac8bb2681b1657038f1df721bcd5ab93f9f73c232cb731098f4eee48896f965ea47229d4c989a04781922f2521989de39a0c4eb42b6d46eef219d0040ccdba94140f5b6ce5bcfed83", 0x5e}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="401a9111401ff5c5341ebfc28909f6f14ea7542ce605db44432ecd61b06396662c720e6e0083209d28d1971641235b18e316c2e8ecc68c25eaeef46cfc2810efd26bcd6e8b6bc630bc9b311c0792546e0a99d153af04dfa88c4f57d01a64f68a2e5a87b060f7c0d8bda5bb0239831e28056e2f7e16cf4d", 0x77}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="dc5774f04f9e74ecdb1a6c15bb7a33cf0bae25bacb839ac1fa0e44d453a66ac7c26620ab59b6e41c6c4f1f25fcdb0883380ca2784327a5c595c8681843f1", 0x3e}], 0x5, &(0x7f0000003400)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x18, 0x1, 0x1, [r0, r2]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r1, r2, r2, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @rights={0x38, 0x1, 0x1, [r2, r0, r0, r1, r0, r1, r2, r0, r0]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x150, 0x4040010}, {&(0x7f0000003580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003600)="2cfb06094200bce600e2cbc24e6927ca7f9436baecf176444ec74da0395ebf87d7383abec50918d502532ca85e6374bf1a26bea7cb38e33e1e5e8db60f5e0c009aae56f6b4c9be2d", 0x48}], 0x1, &(0x7f0000003800)=[@cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r2]}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r2, r0, r2]}], 0xa0, 0x840}, {&(0x7f00000038c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000003940)="54728867b0a1f9af4a646938b111171928bdbbb01bbfb580fe472dd05b719f3a567c3618287cc30810e821e78b733892d32a999a165e75fd88ce24c7f60d7492c12bf568b754b1b4dab1909c172399bcec83fb43a62de05351aca50cc4fe6e28d70e8c7b0c5f5e43097187e43190e3c385d6", 0x72}, {&(0x7f00000039c0)="5689c41f08c3de0e66cc3303e638a5ff0829d75d787149775403fa77436a9f98b13d5eea558ef2a11c95be9c91e68b6e842273ee20bd45bd9b215d0e6ab3fbe32fbd90733d61119d4304c7c96b8b73ad1578c709646c5937acdf1898e30053255100ddbd19120f23cbab5d43575fcfc211ab10946106a6213e90aa171ac2aad2467bc9cd1950d9", 0x87}, {&(0x7f0000003a80)="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", 0x1000}, {&(0x7f0000004a80)="40292557b900f316755faf3a37650d8eddab0967efa5e3dec8cee98a7d01afb67c4bd5f2e7319810ea935300687c40f0474491c7a00955820be59ef50074a5f5e32dc8d26515bf9a2c90a15b25bbf5828a8a446e6d714661eb7811a40313e30bb94a0879dbd7f6eab84c83f082cb2f6c6b390859dc797342cdec4e032b38a5a5deea99b7d323b81d53b526917c75fccdbd8b515d771a7cb6ba7c600b3d31198925d7236c3524170a0850007122158ea17342ac7a905d421105b2e1c431dc5f970098e94fbbdc550ac3edc24132bdf72ee52be5df8188518e2c4f895bc57a", 0xde}], 0x4, &(0x7f0000004e40)=[@cred={0x20, 0x1, 0x2, r25, r26, r27}, @rights={0x28, 0x1, 0x1, [r2, r2, r0, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r2, r0]}, @rights={0x28, 0x1, 0x1, [r2, r2, r1, r2, r0, r2]}, @rights={0x38, 0x1, 0x1, [r0, r1, r1, r0, r0, r0, r1, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r28, r29, r30}], 0xe8, 0x40}], 0x6, 0x4) r31 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r31, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r31, 0x40046207, 0x0) [ 1049.540304][T15743] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1049.557703][T15850] binder_alloc: 15847: binder_alloc_buf, no vma [ 1049.561206][T15743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1049.561216][T15743] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1049.561225][T15743] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1049.561234][T15743] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1049.601079][T15848] binder: 15847:15848 ioctl 40046207 0 returned -16 [ 1049.721193][T15859] binder: BINDER_SET_CONTEXT_MGR already set 01:12:05 executing program 5 (fault-call:6 fault-nth:12): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f00000000c0)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'bcsf0\x00', @broadcast}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000200)={'veth0\x00', {0x2, 0x4e24, @empty}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000080)={0x4, 0x5, 0xffffffff, 0x1, 'syz1\x00', 0x7fffffff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00', 0x100}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0x17, &(0x7f0000000180)=0x4) [ 1049.774010][T15859] binder: 15858:15859 ioctl 40046207 0 returned -16 01:12:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c00, 0x0}) [ 1049.861239][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1049.868963][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 01:12:05 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0) socketpair(0x1b, 0x80005, 0xfd, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x4004, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap='mmap'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0xfffffffffffffff8}}, {@cache_fscache='cache=fscache'}, {@cache_fscache='cache=fscache'}, {@version_u='version=9p2000.u'}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@permit_directio='permit_directio'}, {@audit='audit'}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af00, 0x0) [ 1049.954684][T16148] FAULT_INJECTION: forcing a failure. [ 1049.954684][T16148] name failslab, interval 1, probability 0, space 0, times 0 01:12:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = msgget(0x1, 0x10) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x200) msgctl$IPC_RMID(r3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000068c383816b5892960cefd300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000fa9a259b0c82ceea00000000000036fb56062bb91999b942d40000000000000000000000000000000000000000000000000000000000000000b656c6ca582e2f4c5c977cb5e5c0e4512e8bfc023b0288b07db1b81541f64bbc02fa42e9d07a8f6740c97b02aca52b28d9379de83b52d8ff645c0a84d78fdc5ac80e4f0e8c7675b00a6d5a0acfc8602bc9d5962ee908d8f492e1b4c705c9bf658463fa9e914c19b53c163bde0592c53db05517147251a9e0451702"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x5, 0x8000, 0x3, 0x4, 0x5, 0x7375d3e7, 0x10000, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000100)=r5, 0x4) [ 1050.002220][T16160] binder_transaction: 24 callbacks suppressed [ 1050.002238][T16160] binder: 16139:16160 transaction failed 29189/-3, size 0-0 line 3147 [ 1050.018452][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.024224][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.051314][T16148] CPU: 0 PID: 16148 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1050.060439][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.070492][T16148] Call Trace: [ 1050.073792][T16148] dump_stack+0x172/0x1f0 [ 1050.078142][T16148] should_fail.cold+0xa/0x15 [ 1050.082749][T16148] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1050.088580][T16148] ? ___might_sleep+0x163/0x280 [ 1050.093444][T16148] __should_failslab+0x121/0x190 [ 1050.098388][T16148] should_failslab+0x9/0x14 [ 1050.102894][T16148] kmem_cache_alloc_trace+0x2d1/0x760 [ 1050.108275][T16148] ? rcu_read_lock_sched_held+0x110/0x130 [ 1050.113999][T16148] ? __alloc_pages_nodemask+0x599/0x7e0 [ 1050.119552][T16148] __uprobe_register+0x17a/0x7c0 [ 1050.124510][T16148] uprobe_register+0x28/0x30 [ 1050.129108][T16148] probe_event_enable+0x474/0xc40 [ 1050.134137][T16148] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 1050.139611][T16148] ? traceprobe_set_print_fmt+0x3a/0xa0 [ 1050.145166][T16148] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 1050.151157][T16148] trace_uprobe_register+0x4ba/0x960 [ 1050.156452][T16148] perf_trace_event_init+0x500/0x990 [ 1050.161746][T16148] perf_uprobe_init+0x1db/0x290 [ 1050.166614][T16148] perf_uprobe_event_init+0x106/0x1a0 [ 1050.171988][T16148] perf_try_init_event+0x137/0x3f0 [ 1050.177107][T16148] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1050.182757][T16148] ? __perf_event_read+0xe10/0xe10 [ 1050.187878][T16148] ? kasan_check_read+0x11/0x20 [ 1050.192737][T16148] ? do_raw_spin_unlock+0x57/0x270 [ 1050.197864][T16148] __do_sys_perf_event_open+0x830/0x24d0 [ 1050.203515][T16148] ? perf_event_set_output+0x4e0/0x4e0 [ 1050.208976][T16148] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1050.215228][T16148] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1050.220693][T16148] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1050.226152][T16148] ? do_syscall_64+0x26/0x610 [ 1050.230872][T16148] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1050.236940][T16148] ? do_syscall_64+0x26/0x610 [ 1050.241628][T16148] __x64_sys_perf_event_open+0xbe/0x150 [ 1050.247183][T16148] do_syscall_64+0x103/0x610 [ 1050.251777][T16148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1050.257674][T16148] RIP: 0033:0x457e29 [ 1050.261580][T16148] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1050.281190][T16148] RSP: 002b:00007f560e693c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1050.289608][T16148] RAX: ffffffffffffffda RBX: 00007f560e693c90 RCX: 0000000000457e29 [ 1050.297588][T16148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1050.305564][T16148] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.313545][T16148] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6946d4 [ 1050.321528][T16148] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1050.331662][T16160] binder: BINDER_SET_CONTEXT_MGR already set [ 1050.345789][T16160] binder: 16139:16160 ioctl 40046207 0 returned -16 01:12:06 executing program 5 (fault-call:6 fault-nth:13): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r1) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r2 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r1}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1050.378561][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1050.385271][T16173] binder: 16139:16173 transaction failed 29189/-3, size 0-0 line 3147 [ 1050.410328][T16180] binder: 16178:16180 got transaction with invalid data ptr [ 1050.418700][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1050.478489][T16180] binder: 16178:16180 transaction failed 29201/-14, size 211-0 line 3179 01:12:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000, 0x0}) 01:12:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x70, 0x2, 0x7fffffff, 0x5, 0x4, 0x0, 0x1b, 0x4, 0x1, 0x33a8fe85, 0x5, 0x10001, 0x2, 0x9, 0x80, 0xff, 0x6, 0x9, 0x4, 0x9, 0x52a0, 0x7, 0x80000000, 0x1000, 0x40, 0x1, 0xc5b7, 0x1, 0x8001, 0x8, 0x81, 0x7, 0x17c, 0xda5c, 0xfff, 0x3, 0xec2, 0x0, 0x7fff, 0x6, @perf_config_ext={0x3ff, 0x400}, 0xc000, 0xffff, 0x2, 0x4, 0x8000, 0xae, 0xf21}, 0xffffffffffffff9c, 0x8, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x44) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x42400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2910, r1, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="0610e00dc4e058d01854058ef54e09705d824750413b46a4dbd9e017b81a29cb") [ 1050.578873][T16258] FAULT_INJECTION: forcing a failure. [ 1050.578873][T16258] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.636009][T16258] CPU: 1 PID: 16258 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1050.639945][T16399] binder: BINDER_SET_CONTEXT_MGR already set [ 1050.645135][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.661196][T16258] Call Trace: [ 1050.664540][T16258] dump_stack+0x172/0x1f0 [ 1050.668904][T16258] should_fail.cold+0xa/0x15 [ 1050.673498][T16258] ? lock_acquire+0x16f/0x3f0 [ 1050.678181][T16258] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1050.680434][T16399] binder: 16329:16399 ioctl 40046207 0 returned -16 [ 1050.683985][T16258] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1050.684013][T16258] __should_failslab+0x121/0x190 [ 1050.684031][T16258] should_failslab+0x9/0x14 [ 1050.684049][T16258] kmem_cache_alloc_trace+0x4b/0x760 [ 1050.684071][T16258] ? vma_interval_tree_subtree_search+0x179/0x1f0 [ 1050.694223][T16461] binder_transaction: 1 callbacks suppressed [ 1050.694239][T16461] binder: 16329:16461 got new transaction with bad transaction stack, transaction 7568 has target 16178:0 [ 1050.696352][T16258] register_for_each_vma+0x493/0xde0 [ 1050.696396][T16258] ? set_orig_insn+0x60/0x60 [ 1050.696419][T16258] uprobe_apply+0xeb/0x140 [ 1050.696441][T16258] trace_uprobe_register+0x765/0x960 [ 1050.727952][T16461] binder: 16329:16461 transaction failed 29201/-71, size 0-0 line 3044 [ 1050.734741][T16258] perf_trace_event_init+0x1a5/0x990 [ 1050.734763][T16258] perf_uprobe_init+0x1db/0x290 [ 1050.734782][T16258] perf_uprobe_event_init+0x106/0x1a0 [ 1050.734805][T16258] perf_try_init_event+0x137/0x3f0 [ 1050.783080][T16258] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1050.788722][T16258] ? __perf_event_read+0xe10/0xe10 [ 1050.793840][T16258] ? kasan_check_read+0x11/0x20 [ 1050.798697][T16258] ? do_raw_spin_unlock+0x57/0x270 [ 1050.803821][T16258] __do_sys_perf_event_open+0x830/0x24d0 [ 1050.809463][T16258] ? perf_event_set_output+0x4e0/0x4e0 [ 1050.814940][T16258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1050.821192][T16258] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1050.826656][T16258] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1050.832115][T16258] ? do_syscall_64+0x26/0x610 [ 1050.836881][T16258] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1050.842951][T16258] ? do_syscall_64+0x26/0x610 [ 1050.847665][T16258] __x64_sys_perf_event_open+0xbe/0x150 [ 1050.853238][T16258] do_syscall_64+0x103/0x610 [ 1050.857835][T16258] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1050.863900][T16258] RIP: 0033:0x457e29 [ 1050.865747][T16399] binder: BINDER_SET_CONTEXT_MGR already set [ 1050.867792][T16258] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1050.867801][T16258] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1050.867816][T16258] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1050.867825][T16258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1050.867833][T16258] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1050.867856][T16258] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 01:12:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1050.897156][T16461] binder: 16329:16461 got new transaction with bad transaction stack, transaction 7570 has target 16178:0 [ 1050.901809][T16258] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1050.959161][ T6208] binder: release 16329:16461 transaction 7568 out, still active [ 1050.967361][T16399] binder: 16329:16399 ioctl 40046207 0 returned -16 01:12:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300, 0x0}) [ 1050.986934][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1051.015648][T16461] binder: 16329:16461 transaction failed 29201/-71, size 0-0 line 3044 [ 1051.024176][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1051.052373][ T6208] binder: send failed reply for transaction 7568, target dead 01:12:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1051.060677][T16505] binder: 16503:16505 transaction failed 29189/-3, size 0-0 line 3147 01:12:06 executing program 5 (fault-call:6 fault-nth:14): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1051.089721][ T6208] binder: send failed reply for transaction 7570 to 16329:16461 [ 1051.104720][T16525] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.119390][T16525] binder: 16504:16525 ioctl 40046207 0 returned -16 01:12:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6800, 0x0}) [ 1051.134538][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1051.158934][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1051.177822][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1051.186060][T16627] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.198419][T16627] binder: 16624:16627 ioctl 40046207 0 returned -16 [ 1051.208632][T16627] binder: 16624:16627 transaction failed 29189/-22, size 0-0 line 2994 [ 1051.223742][T16678] binder: 16624:16678 transaction failed 29189/-3, size 0-0 line 3147 01:12:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000, 0x0}) 01:12:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x300, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c00, 0x0}) 01:12:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x4880) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x7, @local, 0x10001}, {0xa, 0x4e21, 0x4, @local, 0x5}, 0x1, [0x4, 0xca, 0x3, 0x5, 0x7, 0x1, 0x1, 0x5]}, 0x5c) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1051.328849][T16723] FAULT_INJECTION: forcing a failure. [ 1051.328849][T16723] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.351531][T16730] binder: 16729:16730 transaction failed 29189/-3, size 0-0 line 3147 [ 1051.364497][T16723] CPU: 1 PID: 16723 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1051.373613][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1051.383666][T16723] Call Trace: [ 1051.383739][T16723] dump_stack+0x172/0x1f0 [ 1051.383764][T16723] should_fail.cold+0xa/0x15 [ 1051.395929][T16723] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1051.401741][T16723] ? ___might_sleep+0x163/0x280 [ 1051.401763][T16723] __should_failslab+0x121/0x190 [ 1051.401781][T16723] should_failslab+0x9/0x14 [ 1051.401803][T16723] kmem_cache_alloc+0x2b2/0x6f0 [ 1051.411604][T16723] ? __sanitizer_cov_trace_cmp8+0x18/0x20 01:12:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x90, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 01:12:07 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x2000) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af00, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0x3, 0x4) [ 1051.426661][T16723] ? anon_vma_compatible+0x70/0x2d0 [ 1051.431864][T16723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1051.438113][T16723] __anon_vma_prepare+0x1b1/0x3c0 [ 1051.438127][T16723] ? copy_from_page+0xf0/0x130 [ 1051.438146][T16723] uprobe_write_opcode+0x810/0x8d0 [ 1051.447923][T16723] ? is_trap_insn+0x20/0x20 [ 1051.447944][T16723] ? lock_downgrade+0x880/0x880 [ 1051.447965][T16723] set_swbp+0x2b/0x40 [ 1051.466378][T16723] install_breakpoint.isra.0+0xdc/0x6a0 [ 1051.471940][T16723] register_for_each_vma+0x9e2/0xde0 [ 1051.477233][T16723] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 1051.483212][T16723] ? set_orig_insn+0x60/0x60 [ 1051.487814][T16723] uprobe_apply+0xeb/0x140 [ 1051.492210][T16723] trace_uprobe_register+0x765/0x960 [ 1051.497495][T16723] perf_trace_event_init+0x1a5/0x990 [ 1051.502760][T16723] perf_uprobe_init+0x1db/0x290 [ 1051.507590][T16723] perf_uprobe_event_init+0x106/0x1a0 [ 1051.512971][T16723] perf_try_init_event+0x137/0x3f0 [ 1051.518060][T16723] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1051.523674][T16723] ? __perf_event_read+0xe10/0xe10 [ 1051.528765][T16723] ? kasan_check_read+0x11/0x20 [ 1051.533594][T16723] ? do_raw_spin_unlock+0x57/0x270 [ 1051.538683][T16723] __do_sys_perf_event_open+0x830/0x24d0 [ 1051.544295][T16723] ? perf_event_set_output+0x4e0/0x4e0 [ 1051.549730][T16723] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1051.555975][T16723] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1051.561409][T16723] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1051.566844][T16723] ? do_syscall_64+0x26/0x610 [ 1051.571499][T16723] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1051.577555][T16723] ? do_syscall_64+0x26/0x610 [ 1051.582215][T16723] __x64_sys_perf_event_open+0xbe/0x150 [ 1051.587741][T16723] do_syscall_64+0x103/0x610 [ 1051.592309][T16723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1051.598175][T16723] RIP: 0033:0x457e29 [ 1051.602047][T16723] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1051.621729][T16723] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1051.630116][T16723] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1051.638064][T16723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1051.646010][T16723] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1051.653960][T16723] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1051.661909][T16723] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1051.696799][T16734] binder: 16731:16734 got new transaction with bad transaction stack, transaction 7580 has target 16731:0 [ 1051.719603][T16741] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.764120][T16741] binder: 16735:16741 ioctl 40046207 0 returned -16 [ 1051.764125][T16743] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.764144][T16743] binder: 16740:16743 ioctl 40046207 0 returned -16 [ 1051.796536][T16748] binder: 16740:16748 got new transaction with bad transaction stack, transaction 7582 has target 16731:0 01:12:07 executing program 5 (fault-call:6 fault-nth:15): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1051.831210][T16734] binder: 16731:16734 transaction failed 29201/-71, size 0-0 line 3044 01:12:07 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='@:eth0ppp0cpuset\x00'}, 0x10) r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x80) fallocate(r0, 0x8, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/7, 0x7}], 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af00, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000000)={0x0, @loopback, 0x4e20, 0x2, 'nq\x00', 0x20, 0x6, 0x20}, 0x2c) write$input_event(r2, &(0x7f0000000280)={{0x77359400}, 0x17, 0x8, 0x1}, 0x18) [ 1051.873194][T16748] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.899434][T16821] binder: 16740:16821 got new transaction with bad transaction stack, transaction 7584 has target 16731:0 01:12:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/177) r2 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163fc339702afc45481000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000063404000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 01:12:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x440002, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'veth1\x00', 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x8, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1051.958597][ T6208] binder: release 16740:16748 transaction 7582 out, still active [ 1051.967239][T16748] binder: 16740:16748 ioctl 40046207 0 returned -16 [ 1051.981221][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1052.000113][ T6208] binder: release 16740:16821 transaction 7584 out, still active 01:12:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x90, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 01:12:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7400, 0x0}) [ 1052.054226][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1052.074038][T16911] FAULT_INJECTION: forcing a failure. [ 1052.074038][T16911] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.093058][ T6208] binder: send failed reply for transaction 7580 to 16731:16734 01:12:08 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1052.131034][T16966] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.132149][ T6208] binder: send failed reply for transaction 7582, target dead [ 1052.139583][T16965] binder: 16959:16965 unknown command 872178449 [ 1052.156656][T16911] CPU: 1 PID: 16911 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1052.165789][T16911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.175863][T16911] Call Trace: [ 1052.179166][T16911] dump_stack+0x172/0x1f0 [ 1052.183510][T16911] should_fail.cold+0xa/0x15 [ 1052.183538][T16911] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1052.193907][T16911] ? ___might_sleep+0x163/0x280 [ 1052.193927][T16911] __should_failslab+0x121/0x190 [ 1052.193946][T16911] should_failslab+0x9/0x14 [ 1052.193962][T16911] kmem_cache_alloc+0x2b2/0x6f0 [ 1052.193984][T16911] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1052.203223][ T6208] binder: send failed reply for transaction 7584, target dead [ 1052.203744][T16911] ? anon_vma_compatible+0x70/0x2d0 [ 1052.203762][T16911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1052.203781][T16911] __anon_vma_prepare+0x1b1/0x3c0 [ 1052.203795][T16911] ? copy_from_page+0xf0/0x130 [ 1052.203835][T16911] uprobe_write_opcode+0x810/0x8d0 [ 1052.253335][T16911] ? is_trap_insn+0x20/0x20 [ 1052.257855][T16911] ? lock_downgrade+0x880/0x880 [ 1052.262711][T16911] set_swbp+0x2b/0x40 [ 1052.266687][T16911] install_breakpoint.isra.0+0xdc/0x6a0 [ 1052.272234][T16911] register_for_each_vma+0x9e2/0xde0 [ 1052.277518][T16911] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 1052.283505][T16911] ? set_orig_insn+0x60/0x60 [ 1052.288099][T16911] uprobe_apply+0xeb/0x140 [ 1052.292515][T16911] trace_uprobe_register+0x765/0x960 [ 1052.297809][T16911] perf_trace_event_init+0x1a5/0x990 [ 1052.303093][T16911] perf_uprobe_init+0x1db/0x290 [ 1052.307943][T16911] perf_uprobe_event_init+0x106/0x1a0 [ 1052.313329][T16911] perf_try_init_event+0x137/0x3f0 [ 1052.318444][T16911] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1052.324077][T16911] ? __perf_event_read+0xe10/0xe10 [ 1052.329182][T16911] ? kasan_check_read+0x11/0x20 [ 1052.334030][T16911] ? do_raw_spin_unlock+0x57/0x270 [ 1052.339146][T16911] __do_sys_perf_event_open+0x830/0x24d0 [ 1052.344783][T16911] ? perf_event_set_output+0x4e0/0x4e0 [ 1052.350233][T16911] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1052.356476][T16911] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1052.361927][T16911] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1052.367385][T16911] ? do_syscall_64+0x26/0x610 [ 1052.372056][T16911] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1052.378115][T16911] ? do_syscall_64+0x26/0x610 [ 1052.382794][T16911] __x64_sys_perf_event_open+0xbe/0x150 [ 1052.388336][T16911] do_syscall_64+0x103/0x610 [ 1052.392931][T16911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1052.398814][T16911] RIP: 0033:0x457e29 [ 1052.402703][T16911] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1052.425088][T16911] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1052.433509][T16911] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1052.441488][T16911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1052.449466][T16911] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1052.457446][T16911] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1052.465427][T16911] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1052.480554][T16966] binder: 16964:16966 ioctl 40046207 0 returned -16 [ 1052.481450][T16965] binder: 16959:16965 ioctl c0306201 20000200 returned -22 [ 1052.489702][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1052.543290][T17092] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.577389][T17092] binder: 17070:17092 ioctl 40046207 0 returned -16 01:12:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x400) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000200)=0x3, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x6, 0x8, 0x1}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x1, 0x800) ioctl$NBD_SET_SOCK(r4, 0xab00, r2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0)={r3, 0xbb, "bc34e6bca13e016631928e352e645376b3a515733bcb62157c015f08eabd412e45f9e7094c71b8c3eb9c7281704a4c9e75458a7dd87b4dfd49d8bf4cc77b05e04cc451f304b473d61c211eeed1d36f1c698fc823e1eafea7a7f7b623f0554b7779eebc5ea07d397edee03e1c6ed5c001f06ec8e1c4d52ca5f133c0b09d7f6649840be0e9daf39b1b386a6bb9014eb1e69a5819533e0baac1dbbfbbe23c662f933068461587ffd42557cb017a7a945c59ee13ee073dce63a12b4f02"}, &(0x7f00000001c0)=0xc3) 01:12:08 executing program 5 (fault-call:6 fault-nth:16): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1052.635153][T17215] binder: 17070:17215 got new transaction with bad transaction stack, transaction 7587 has target 16959:0 [ 1052.671053][T17215] binder: BINDER_SET_CONTEXT_MGR already set 01:12:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x4, 0x422800) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 01:12:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x90, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1052.740202][T17215] binder: 17070:17215 ioctl 40046207 0 returned -16 [ 1052.744660][ T7769] binder: release 17070:17215 transaction 7587 out, still active [ 1052.773640][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1052.786289][ T7769] binder: send failed reply for transaction 7587, target dead [ 1052.824152][T17294] FAULT_INJECTION: forcing a failure. [ 1052.824152][T17294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1052.837195][T17382] binder: 17341:17382 got new transaction with bad transaction stack, transaction 7590 has target 17341:0 [ 1052.859316][T17383] binder: BINDER_SET_CONTEXT_MGR already set 01:12:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a00, 0x0}) [ 1052.872109][T17383] binder: 17349:17383 ioctl 40046207 0 returned -16 [ 1052.886678][T17383] binder: 17349:17383 got new transaction with bad transaction stack, transaction 7592 has target 17341:0 [ 1052.889782][T17294] CPU: 1 PID: 17294 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1052.907089][T17294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.917144][T17294] Call Trace: [ 1052.920448][T17294] dump_stack+0x172/0x1f0 [ 1052.924810][T17294] should_fail.cold+0xa/0x15 [ 1052.929405][T17294] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1052.935220][T17294] ? ___might_sleep+0x163/0x280 [ 1052.940081][T17294] should_fail_alloc_page+0x50/0x60 [ 1052.945291][T17294] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1052.950661][T17294] ? __anon_vma_prepare+0x184/0x3c0 [ 1052.953083][ T6208] binder: send failed reply for transaction 7590 to 17341:17382 [ 1052.955859][T17294] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1052.955900][T17294] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1052.955929][T17294] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1052.955949][T17294] alloc_pages_vma+0xdd/0x540 [ 1052.964094][ T6208] binder: send failed reply for transaction 7592 to 17349:17383 [ 1052.969277][T17294] uprobe_write_opcode+0x258/0x8d0 [ 1052.969299][T17294] ? is_trap_insn+0x20/0x20 [ 1052.969320][T17294] ? lock_downgrade+0x880/0x880 [ 1052.969348][T17294] set_swbp+0x2b/0x40 [ 1052.969368][T17294] install_breakpoint.isra.0+0xdc/0x6a0 [ 1053.003087][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1053.003726][T17294] register_for_each_vma+0x9e2/0xde0 [ 1053.029075][T17294] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 1053.035032][T17294] ? set_orig_insn+0x60/0x60 [ 1053.039607][T17294] uprobe_apply+0xeb/0x140 [ 1053.044005][T17294] trace_uprobe_register+0x765/0x960 [ 1053.049292][T17294] perf_trace_event_init+0x1a5/0x990 [ 1053.054559][T17294] perf_uprobe_init+0x1db/0x290 [ 1053.059400][T17294] perf_uprobe_event_init+0x106/0x1a0 [ 1053.064753][T17294] perf_try_init_event+0x137/0x3f0 [ 1053.069846][T17294] perf_event_alloc.part.0+0x1e1a/0x2f90 [ 1053.075497][T17294] ? __perf_event_read+0xe10/0xe10 [ 1053.080596][T17294] ? kasan_check_read+0x11/0x20 [ 1053.085425][T17294] ? do_raw_spin_unlock+0x57/0x270 [ 1053.090530][T17294] __do_sys_perf_event_open+0x830/0x24d0 [ 1053.096222][T17294] ? perf_event_set_output+0x4e0/0x4e0 [ 1053.101674][T17294] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1053.107901][T17294] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1053.113346][T17294] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1053.118816][T17294] ? do_syscall_64+0x26/0x610 [ 1053.123488][T17294] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1053.129530][T17294] ? do_syscall_64+0x26/0x610 [ 1053.134191][T17294] __x64_sys_perf_event_open+0xbe/0x150 [ 1053.139716][T17294] do_syscall_64+0x103/0x610 [ 1053.144287][T17294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1053.150153][T17294] RIP: 0033:0x457e29 [ 1053.154029][T17294] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:12:09 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) 01:12:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) fcntl$notify(r0, 0x402, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000008f92c3435c5b44c2000000e60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 01:12:09 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1053.173621][T17294] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1053.182030][T17294] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1053.189986][T17294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1053.197950][T17294] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1053.205896][T17294] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1053.213851][T17294] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 01:12:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1053.261944][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1053.313261][T17600] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1053.313268][T17600] binder_alloc: 17598: binder_alloc_buf, no vma [ 1053.324024][T17610] binder: BINDER_SET_CONTEXT_MGR already set 01:12:09 executing program 5 (fault-call:6 fault-nth:17): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1053.366007][T17610] binder: 17603:17610 ioctl 40046207 0 returned -16 [ 1053.387722][T17674] binder_alloc: 17598: binder_alloc_buf, no vma [ 1053.387726][T17669] binder: BINDER_SET_CONTEXT_MGR already set [ 1053.387746][T17669] binder: 17598:17669 ioctl 40046207 0 returned -16 01:12:09 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x100000001, 0x100000001}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x8000000000, 0x0, 0x0, 0x87}) 01:12:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = dup2(r2, r0) write$P9_RWRITE(r3, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x8}, 0xb) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x1f, 0x1ff, 0xb27c, 0x5, 0x0, 0x1, 0x88000, 0x1, 0x7, 0x1, 0x0, 0x9, 0x6f1, 0xfffffffffffffff7, 0x1, 0x7, 0xc00000, 0x40, 0x110a2270, 0x40, 0x2ab, 0xffffffff, 0x256e, 0x5, 0x5, 0x6, 0x6c4f, 0x23, 0x4, 0x137a, 0x7, 0xc805, 0x36bd7351, 0x40, 0x2adf, 0x7, 0x0, 0x741, 0x0, @perf_config_ext={0x80000000}, 0x200, 0x6, 0xfff, 0x2, 0x6, 0x9, 0x100}, r4, 0x2, r5, 0x8) 01:12:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000001880), 0x80800) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000018c0)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a4cd4a571cb9dd84ad1cc278f5ae9a88dfd5508d7f2ea"], 0x0, 0x0, 0x0}) 01:12:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 1053.579749][T17821] FAULT_INJECTION: forcing a failure. [ 1053.579749][T17821] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.672633][T17929] binder_alloc: 17842: binder_alloc_buf, no vma [ 1053.677995][T17821] CPU: 0 PID: 17821 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1053.683249][T17929] binder: BINDER_SET_CONTEXT_MGR already set [ 1053.687986][T17821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.687993][T17821] Call Trace: [ 1053.688033][T17821] dump_stack+0x172/0x1f0 [ 1053.688056][T17821] should_fail.cold+0xa/0x15 [ 1053.688096][T17821] ? fault_create_debugfs_attr+0x1e0/0x1e0 01:12:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000, 0x0}) [ 1053.697037][T17946] binder_alloc: 17842: binder_alloc_buf, no vma [ 1053.704138][T17821] ? ___might_sleep+0x163/0x280 [ 1053.704158][T17821] __should_failslab+0x121/0x190 [ 1053.704176][T17821] should_failslab+0x9/0x14 [ 1053.704192][T17821] kmem_cache_alloc+0x2b2/0x6f0 [ 1053.704206][T17821] ? mutex_trylock+0x1e0/0x1e0 [ 1053.704228][T17821] __d_alloc+0x2e/0x8c0 [ 1053.704246][T17821] d_alloc_pseudo+0x1e/0x30 [ 1053.704280][T17821] alloc_file_pseudo+0xe2/0x280 [ 1053.712923][T17929] binder: 17842:17929 ioctl 40046207 0 returned -16 [ 1053.716442][T17821] ? rcu_read_lock_sched_held+0x110/0x130 [ 1053.716458][T17821] ? alloc_file+0x4d0/0x4d0 [ 1053.716475][T17821] ? find_get_context.isra.0+0x313/0x5c0 [ 1053.716553][T17821] anon_inode_getfile+0xda/0x200 [ 1053.793155][T17821] __do_sys_perf_event_open+0x1021/0x24d0 [ 1053.798894][T17821] ? perf_event_set_output+0x4e0/0x4e0 [ 1053.804407][T17821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1053.810659][T17821] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1053.816140][T17821] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1053.821612][T17821] ? do_syscall_64+0x26/0x610 [ 1053.826296][T17821] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1053.832392][T17821] ? do_syscall_64+0x26/0x610 [ 1053.837075][T17821] __x64_sys_perf_event_open+0xbe/0x150 [ 1053.842636][T17821] do_syscall_64+0x103/0x610 [ 1053.847223][T17821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1053.853109][T17821] RIP: 0033:0x457e29 [ 1053.857018][T17821] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1053.869228][T18065] binder_alloc: 18054: binder_alloc_buf, no vma [ 1053.876613][T17821] RSP: 002b:00007f560e693c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1053.876627][T17821] RAX: ffffffffffffffda RBX: 00007f560e693c90 RCX: 0000000000457e29 [ 1053.876635][T17821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1053.876644][T17821] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.876652][T17821] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6946d4 01:12:09 executing program 3: socket$unix(0x1, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x1008b) r0 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpgid(0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendto$unix(r0, &(0x7f0000000000), 0x0, 0x1, 0x0, 0x0) 01:12:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0xd0400) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1053.876660][T17821] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1053.916837][T18065] binder: BINDER_SET_CONTEXT_MGR already set [ 1053.945932][T18106] binder_alloc: 18054: binder_alloc_buf, no vma [ 1053.957373][T18065] binder: 18054:18065 ioctl 40046207 0 returned -16 01:12:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002dc0)={0x0}, &(0x7f0000002e00)=0xc) r4 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002e40)={0x0, 0x0, 0x0}, &(0x7f0000002e80)=0xc) r6 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004680)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000004780)=0xe8) r8 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000047c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004800)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000004900)=0xe8) r11 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000004940)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004980)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000004a80)=0xe8) getgroups(0x3, &(0x7f0000004ac0)=[0xee01, 0xee01, 0xee00]) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000004b00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004b40)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000004c40)=0xe8) getgroups(0x3, &(0x7f0000004c80)=[0xffffffffffffffff, 0xee01, 0x0]) r18 = gettid() r19 = geteuid() fstat(r1, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005040)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000005140)=0xe8) r23 = getegid() r24 = getpgrp(0x0) r25 = geteuid() stat(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005280)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000005240)='/dev/binder#\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000052c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f00000053c0)=0xe8) getresgid(&(0x7f0000005400), &(0x7f0000005440), &(0x7f0000005480)=0x0) sendmmsg$unix(r2, &(0x7f0000005580)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000100)="5b068aabf8c67e84e009ff62e7e6bea2557c82f7569bb99056d0e460dccaf3ec2305e49ce9aec53f174fe88a908343cc37e8e20067411cafe42ae3308789dd8ef0c1b79ac9898503f5caaa08eaa1f88826729c299250d7c83b1a59c8aeecda75acf91becd8a87ed77aa5a0404efa3d4e530fcddc95a0863c23c28957a6706b3f18a999ba74a893ef177ffda1f3e26b429d6e3330c8774301ece0ca57f0cdee2bd5ecca7a4d2afaba75c79c9cd43097c0573b858c2bcf41b0a0ed4be683238ff42f3a485a4e863353be70f0a0b6eea5a5fb211d734b76b818f7a86df80bbdff01604df0c70f807a8e25da92273bbd0bb69ab9149e855047", 0xf7}, {&(0x7f0000000240)="094fe74ef2da3e6ad018cf4e897c08", 0xf}, {&(0x7f0000000280)="2b42648806db75f429c52f35b53f093b8f714150784f5fdde51f95322a93508deaf1b42b1310d6977804cd54c50bc8c8a94730d4ef47ce97db21872e949e59346ff1093b7de8961d7b840a9219af122153ff1e41ce14c982f73f30e811a42ae4c1d90f59738e27399e63adb63bb37e0e8752fa9943cd45fa2a5e0acb9dc304a69674287e2dcd243d8e3ea0432fbd47ce4e489b89fb7ab92a76a28642da551d8a57494113097eee4f542fbef0af0fc1ab48c6521f9a32", 0xb6}, {&(0x7f0000000340)="60910401343e1ed24c749d60b906e9bc0dd757572e03b000157d6dbeae24735275da3c35d4effb759d765743452d1b65db7fcd16c644ce8df34349135910bb07e5a19dd83bac02e1907ddef97de8b8f0534f3f19208a6abf200a8c9e10788b8d2f37ca8131db810610dd174ff11464e4a2e4ceabe14c25500264c4610cc4c46aa61c197f6fef96417c4d486b9f5d1671d48c", 0x92}, {&(0x7f0000000400)="9da0b626e9654108948ee4f909ea9b1811f90712a274bd500b201eb1cf86b8f60506aeb4c5335e572a10e763a3c506233e0f91cb1f328226cead3c470deff581f48b2f7402", 0x45}, {&(0x7f0000000480)="68eec61441960ddac5317047d0c1fb98a44c7b4e6ac15c341dcb7632bfee0d246bc7f8d206399650500fa58614a62e680f65bf189db5c68a8be48f3d8b8d46fa747b924ffceed754cff7936c581adcf1dfedea9676c61c002cdfc864c84c430dbf7b456096f495b26218fe25b49a8599e53c8b4996428a232130257084ad1942d7373f23a70eb009c0415865c505adbc84c30146472f72ef29e73f05123d653fb823e45f3109a93e0888e25bb9ff7e75ab4914b130842989bfd6e533578bb23bb82c65fb5094e379fbc9e31baeef41b7fcbd53142fbf29a454a16b48621bc31d2ef03fb4e3", 0xe5}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000580)="2b4d879daa1c0410683cd9b804240aee51b42450d523e50983aa0e1282043c9a46bd7fa2fc1c07660b9d11033ec3e8aa74f65754f480a7eb73076cb61443f84c7b0bc748e45fd958b932187a", 0x4c}, {&(0x7f0000000600)="0d5d054d32110fc3e559c8f655353bd4c8c0fce67a6e7b1db529489be5dab7", 0x1f}], 0xa, &(0x7f00000027c0), 0x0, 0x890}, {&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002880)="7803744dce19a085f5538e4780aa5a17ac0798a6523d5c3f8a2c31c53ea8a7bf1f8f449ba37cedfaa66ef5c6c884872cac581407d04b8b3fdeb2eebba26dd0819f2331d18b62eb78600e7360977a5e54b9253cf7953e5c7bd9bb7055cfb67fcbea0402930a4f095424371612f964a5a4f914aeb60af00dd7e7e1fb41ce2b3a12c0c0c2078217dadf467643f8b50258a60255eb41ca09fada00c7ef80dda5d8f2", 0xa0}, {&(0x7f0000002940)="30a5a0bf794c678353a2afd0e87f914296a7412716044c3d36bd85b32604f7454f59f1b69fff4d4bb82aaf", 0x2b}, {&(0x7f0000002980)="5feede8b9836c11c2172d6caefbf00a7853344aa2a761e8395add26371d34f9ab7619e21d53fa739da8eae4df0bd0faa8ed59aa4f4757a", 0x37}, {&(0x7f00000029c0)="c561d8934c891d832ed9c0f659eaf4f843b2c7d9e55b280953fcb5b280c1f9193ca2972283ac5837dca084ccfef66525aa3042499c9e2c9f230a2039aad15dcec871cb4064f5ea4e0fbf809b0bd966e37d1b0bdaeb1c534cbe", 0x59}, {&(0x7f0000002a40)="159f83d93421e9023c6b82e881b97e0039b2430fe1b96106e78aa112afda341332a83c04b60636f2be48ed67d4cbe8e9a70179d99ce9977403737a9c6746cfe297921aa95ed70adef638562b041dcba97001b6b671a365563b3f036c9b47921404bb9cf4ca19d05598be6243709de18e61bb035db3f403673c4d424e4092b0e90be4022af580d9024105e41f790229cd733b8afcb86f747411128262d69578293427e0c502b5b9a7d252a3da50a56b3c5ad90b3112f77a524c74a92be03427f20868aed9510ca91d0e212ff1ca4fe33021fbdeaf43843d7dfc3a01b4352bda0c391cd8d72f7e0bd997d679fd6b0fd20de6e2db", 0xf3}, {&(0x7f0000002b40)="736bb9676a381d285f06905f68ae6328762287f3b4fa9ffcf1f47d41d04818ddc9a921ccaf1e8bfda679a7a8a70ad866408db33f9ea8e2fa6574f2e596f8a623d6b891e279bef237b6604ab675da711647eb2d29b07232a6a34bbc520370791556d6c8fa3ae935542720cda718c8afd6480a4f50eeb9768b546afbe6b7ddc2f554e21659816ac68878c0d5d7fffc13b64daa6991398419498c8be9d2d482089b59cb14993015c51ac1a21adabfde9f68405df4a255190a17bd8f2d806416828769e0abca98f334425c0a3ba724c35bc12fa38aac6387b7796ae80e29db85", 0xde}, {&(0x7f0000002c40)="a9c59454749bf5c501b3b6a9b112b5578c17b49ca0d60a6b814513ab8725203c1a8325ab13a160854c3fbf3ba0529a71c0f5d6ea9912dd1fb9f18457ac612b015b7eaffc07f655ae71b6775a0deab0ff4c557a038bbf10c9a5700dcd523b1ab0dd2bdfdfc2b3033310464fb45e6972643aae7c30897e73d2c239b19af2f57cf1330881766e07e89ab9ea3f2c3891631792414be2bca2b35560d211b7f98111dc3094f0629d94aa9f861237ea6ee4f9e8132a03c05635ae711fc24fb19be5ab2a511de42ea0cbe82c241e04", 0xcb}], 0x7, &(0x7f0000002ec0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20, 0x20008054}, {&(0x7f0000002f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000002f80)="f1cdfaa419676376cd1054d1067d430cafa9b3ce76c5c3383d3eb36221872a699e9a1672364e349fa925d9ad3ddfc70e6d2600fcb90d9cdf254bf04d98ccedbd349e02cbcd39cf2822a05ea9b80b48107caea0c756d985d06d95279e91282dfb87572e38b6991c03c148e5fd", 0x6c}, {&(0x7f0000003000)="47b3a5dc4bd185101af22140763dddde1da219b54eb1dd7a6321a25ffe1b6c9f7826bd7b156af8dc17fabb8845155b0c395ff06a6eba492cfd097a1c8f5fc29e907033994597fa1e916ca92f9192bbb279f5a4c2b38deb0ebbd6372a22b22d97587acd5661476f33e8762174f548b0e9424a3e53fa8a59b192d9bc994007cb0e0ecc8bb1847bb40727a803a737258536f45b1f78d49009d6a795c53b198f060993fd2a5213eea6f34c49a1935c6c5f4957a6e0be79e83868dd13fc1c52cb61e41e0bf3b4218af3de621f0e3c5c35a6bf73d8061a353f1517d7874a0f4c0fc87078699725b9443822de51fd2503ea83b50da4d1", 0xf3}, {&(0x7f0000003100)="1cdb388617463a53e8b445af24f80543221b62166ccf0a1d0d62776d5fb87eab57d14fda2dc29311ae9dd3f48db2c72bd1966be8794ec1291dc81e2823c4716b196a938f55c873f515a761b3627c297e84ee9c0ad7cc57a90f9fca6f4ff54d48cb0a64e120089904f6f661f5262d402760ad486c702a1f9fa3609fd9f03c5d49e1281e28a359065860432a8d2cfaf6aedfba84a490b61a51e4fba3ff2f29462f1b3b1a5f93718b300d9861f81c75ad83022999f6476120c4b95727772c", 0xbd}, {&(0x7f00000031c0)="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", 0xfb}, {&(0x7f00000032c0)="029991beffd02069134d5b11d2f4cd8d128c2f034132c6bb1d9d5927fa8b15659f4bbc3f43c947e5356a6598a90dc89f5fc9c6de5e2dd3cb64f2e607037cf9bba0b422b768a351a6b2ceb5cb328b97762ae514f4f79182023a8bc985364476d187d1695e6915938c44c8a69c5d4695e8212232dae0d3c44b4fb2a858f4d6b8a29b87a21fbf42aa188b23d077d66997b09cb824d94bb6314a0d8a8280d216ef05a838262970ef6ef147435069c153b2e8df55ddfe9d1db4faf1aa0015c4b228c9461ea4a8c12a48b5a8f414b607252c", 0xcf}, {&(0x7f00000033c0)="b50dac48398e9863545d44ab21c671c0c0b98978a323de8409c64e0497201a392e78e79bcb17c9257cbae3bacbe5bc8c4ab28ec8cb2829fa3c447cb434fbf66247da2b70fb4009b6aefbeac2302ad7f4b54e2be48ccc137de083b527860c147f0640e3d47f62371a650897d8360ece7a05e03df19e5ffc718a47001ff2a73ea2ddbbaeaf04726b6b26dc425e56b57244af2645bd667072203b1647a25a68dc343b760c0d4332e3cfa528b3782aaaa6d8d8", 0xb1}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="4190a4a196ac2ff807bb8e5ee10c811bde221c0f923bc96a5ea8fc9686fe7bdc7665a596eb0fb50a712e34aaecba6668b9e5e86b2ce63867697ca89e8dd758ca6cdf54d45a2f09d29a7ad0ad35d07fa0e5405ceaa9661779", 0x58}, {&(0x7f0000004500)="6b68f7d1c809e2b84fa23ecc1b8c44fde2b85b0fffd71bc54d4a5662bf8b7788f7455c130f138cbdb9b84e999f2eea04d3ba3565207fcd5e813e12f23e6684b6680ecfb697f9ae50edeb07338c358d610b5dd487674c2ff3fcfa730ce8ad16a65e529f009386d940d4d57836e954bf5667c1da3d2f7263fe8c187ea4666b3f01b4a9c2058ef62c87fc2b52f606646486cf5262bc1f5ed33a2b2eb736acbc10a2ce52f87f8466a524", 0xa8}], 0x9, &(0x7f0000004d40)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r1, r1, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}], 0x118, 0x40000}, {&(0x7f0000004e80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005000)=[{&(0x7f0000004f00)="882d1dcc8eb86d17345fe87349e4167f7ba456928da5ca7663dd43452dae5826f42dba6aefb586c44c6d20499c6d6dce5b52777f4994ac3f6ddc1248d379048823bc28bc944d609db026a0dbfa8e398c0c7d978a10ac69a0edd2ae37e550fca137a45a75d8ef", 0x66}, {&(0x7f0000004f80)="a0a497bcfe09a5bc1894f615573bb4d80554200828b92df2e55c36db7ea7f92225566a30cd5c715c104dd685d49f308e9d1d71ed2f641cbc45e82565c052bd669508aa6d11c8b602913dbb37af29fb9500750608c7", 0x55}], 0x2, &(0x7f00000054c0)=[@cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}], 0xa0, 0x20008001}], 0x4, 0x4000000) 01:12:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {}, @ramp}) 01:12:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3000000, 0x0}) 01:12:10 executing program 5 (fault-call:6 fault-nth:18): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1054.124460][T18362] binder: 18361:18362 got new transaction with bad transaction stack, transaction 7605 has target 18361:0 01:12:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2000, 0x0) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 1054.178370][ C0] net_ratelimit: 22 callbacks suppressed [ 1054.178378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1054.189838][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1054.195677][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1054.201485][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1054.209187][T18371] binder: BINDER_SET_CONTEXT_MGR already set [ 1054.249170][T18371] binder: 18368:18371 ioctl 40046207 0 returned -16 [ 1054.291529][T18433] binder: 18368:18433 got new transaction with bad transaction stack, transaction 7607 has target 18361:0 01:12:10 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) shmget$private(0x0, 0x1000, 0xa00, &(0x7f0000fff000/0x1000)=nil) [ 1054.335911][T18371] binder: BINDER_SET_CONTEXT_MGR already set [ 1054.355008][T18371] binder: 18368:18371 ioctl 40046207 0 returned -16 [ 1054.367047][ T7769] binder: release 18368:18433 transaction 7607 out, still active [ 1054.379106][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1054.386727][T18400] FAULT_INJECTION: forcing a failure. [ 1054.386727][T18400] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.413642][T18400] CPU: 0 PID: 18400 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1054.422077][ T7769] binder_release_work: 21 callbacks suppressed [ 1054.422083][ T7769] binder: undelivered TRANSACTION_ERROR: 29201 [ 1054.422761][T18400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1054.422768][T18400] Call Trace: [ 1054.422793][T18400] dump_stack+0x172/0x1f0 [ 1054.422818][T18400] should_fail.cold+0xa/0x15 [ 1054.457282][T18400] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1054.463091][T18400] ? ___might_sleep+0x163/0x280 [ 1054.467958][T18400] __should_failslab+0x121/0x190 [ 1054.472891][T18400] should_failslab+0x9/0x14 [ 1054.477389][T18400] kmem_cache_alloc+0x2b2/0x6f0 [ 1054.482233][T18400] ? mutex_trylock+0x1e0/0x1e0 [ 1054.487000][T18400] __d_alloc+0x2e/0x8c0 [ 1054.491153][T18400] d_alloc_pseudo+0x1e/0x30 [ 1054.495648][T18400] alloc_file_pseudo+0xe2/0x280 [ 1054.500497][T18400] ? rcu_read_lock_sched_held+0x110/0x130 [ 1054.506260][T18400] ? alloc_file+0x4d0/0x4d0 [ 1054.510758][T18400] ? find_get_context.isra.0+0x313/0x5c0 [ 1054.516407][T18400] anon_inode_getfile+0xda/0x200 [ 1054.521358][T18400] __do_sys_perf_event_open+0x1021/0x24d0 [ 1054.527083][T18400] ? perf_event_set_output+0x4e0/0x4e0 [ 1054.532550][T18400] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1054.538800][T18400] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1054.544256][T18400] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1054.549724][T18400] ? do_syscall_64+0x26/0x610 [ 1054.554426][T18400] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1054.560514][T18400] ? do_syscall_64+0x26/0x610 [ 1054.565208][T18400] __x64_sys_perf_event_open+0xbe/0x150 [ 1054.570753][T18400] do_syscall_64+0x103/0x610 [ 1054.575338][T18400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1054.581220][T18400] RIP: 0033:0x457e29 [ 1054.585107][T18400] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1054.604701][T18400] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1054.613108][T18400] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1054.621084][T18400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1054.629074][T18400] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 01:12:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000000, 0x0}) 01:12:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x10002) openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) [ 1054.637078][T18400] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1054.645039][T18400] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 [ 1054.654972][ T7769] binder: release 18368:18433 transaction 7609 out, still active [ 1054.707352][T18652] binder: BINDER_SET_CONTEXT_MGR already set [ 1054.724464][ T7769] binder: undelivered TRANSACTION_COMPLETE 01:12:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x201, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) 01:12:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1054.750209][ T7769] binder: undelivered TRANSACTION_ERROR: 29201 [ 1054.761024][T18652] binder: 18634:18652 ioctl 40046207 0 returned -16 [ 1054.774220][T18695] binder: BINDER_SET_CONTEXT_MGR already set [ 1054.793236][T18695] binder: 18693:18695 ioctl 40046207 0 returned -16 [ 1054.807266][T18692] binder_alloc: 18361: binder_alloc_buf, no vma [ 1054.813770][ T7769] binder: send failed reply for transaction 7605 to 18361:18362 [ 1054.821784][ T7769] binder: send failed reply for transaction 7607, target dead [ 1054.833918][ T7769] binder: send failed reply for transaction 7609, target dead [ 1054.848723][ T7769] binder: undelivered TRANSACTION_COMPLETE 01:12:10 executing program 5 (fault-call:6 fault-nth:19): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1054.872845][ T7769] binder: undelivered TRANSACTION_ERROR: 29201 [ 1054.903801][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 01:12:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840a439cbdcd1f1b600000000f20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000634040000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp(r2, r3, 0x7, r1, r1) 01:12:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5000000, 0x0}) 01:12:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1054.955515][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1054.984119][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1055.032319][T18983] binder_alloc: 18981: binder_alloc_buf, no vma [ 1055.040397][T18983] binder_transaction: 17 callbacks suppressed [ 1055.040414][T18983] binder: 18981:18983 transaction failed 29189/-3, size 0-0 line 3147 01:12:10 executing program 3: timer_create(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f00000002c0)}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000fc3000)=0x1) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001c4, 0x0) [ 1055.089253][T19008] binder: BINDER_SET_CONTEXT_MGR already set [ 1055.115605][T19008] binder: 18980:19008 ioctl 40046207 0 returned -16 [ 1055.123367][T18983] binder: BINDER_SET_CONTEXT_MGR already set 01:12:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1055.134930][T18983] binder: 18981:18983 ioctl 40046207 0 returned -16 [ 1055.138676][T18955] FAULT_INJECTION: forcing a failure. [ 1055.138676][T18955] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.143665][T19016] binder_alloc: 18981: binder_alloc_buf, no vma [ 1055.155065][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1055.166708][T19016] binder: 18981:19016 transaction failed 29189/-3, size 0-0 line 3147 [ 1055.203946][T18955] CPU: 1 PID: 18955 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1055.213098][T18955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1055.223163][T18955] Call Trace: [ 1055.226469][T18955] dump_stack+0x172/0x1f0 [ 1055.230814][T18955] should_fail.cold+0xa/0x15 [ 1055.235416][T18955] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1055.241231][T18955] ? ___might_sleep+0x163/0x280 [ 1055.246095][T18955] __should_failslab+0x121/0x190 [ 1055.251045][T18955] should_failslab+0x9/0x14 [ 1055.255556][T18955] kmem_cache_alloc+0x2b2/0x6f0 [ 1055.260426][T18955] ? rcu_read_lock_sched_held+0x110/0x130 [ 1055.266149][T18955] ? kmem_cache_alloc+0x32e/0x6f0 [ 1055.271187][T18955] security_file_alloc+0x39/0x170 [ 1055.276219][T18955] __alloc_file+0xac/0x300 [ 1055.280645][T18955] alloc_empty_file+0x72/0x170 [ 1055.285418][T18955] alloc_file+0x5e/0x4d0 [ 1055.289671][T18955] alloc_file_pseudo+0x189/0x280 [ 1055.289689][T18955] ? alloc_file+0x4d0/0x4d0 [ 1055.289706][T18955] ? find_get_context.isra.0+0x313/0x5c0 [ 1055.289731][T18955] anon_inode_getfile+0xda/0x200 [ 1055.289753][T18955] __do_sys_perf_event_open+0x1021/0x24d0 [ 1055.299183][T18955] ? perf_event_set_output+0x4e0/0x4e0 [ 1055.299198][T18955] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1055.299225][T18955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1055.299245][T18955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1055.338071][T18955] ? do_syscall_64+0x26/0x610 [ 1055.342749][T18955] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1055.348824][T18955] ? do_syscall_64+0x26/0x610 01:12:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x40000000400) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1055.353540][T18955] __x64_sys_perf_event_open+0xbe/0x150 [ 1055.356425][T19292] binder: 19238:19292 transaction failed 29201/-71, size 0-0 line 3044 [ 1055.359107][T18955] do_syscall_64+0x103/0x610 [ 1055.359127][T18955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1055.359139][T18955] RIP: 0033:0x457e29 [ 1055.359153][T18955] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1055.359176][T18955] RSP: 002b:00007f560e6b4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1055.409835][T18955] RAX: ffffffffffffffda RBX: 00007f560e6b4c90 RCX: 0000000000457e29 [ 1055.417808][T18955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1055.425779][T18955] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1055.433749][T18955] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f560e6b56d4 [ 1055.441721][T18955] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 0000000000000006 01:12:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000, 0x0}) [ 1055.449999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.455764][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.459542][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.461638][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.467967][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.473014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.492710][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 01:12:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) accept$inet6(r1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000080)=0x8572, &(0x7f00000000c0)=0x4) [ 1055.517736][T19397] binder: BINDER_SET_CONTEXT_MGR already set [ 1055.532474][T19397] binder: 19385:19397 ioctl 40046207 0 returned -16 [ 1055.540187][T19397] binder: 19385:19397 transaction failed 29201/-71, size 0-0 line 3044 [ 1055.550191][T19397] binder: BINDER_SET_CONTEXT_MGR already set [ 1055.570973][T19408] binder: 19385:19408 transaction failed 29201/-71, size 0-0 line 3044 [ 1055.593091][T19397] binder: 19385:19397 ioctl 40046207 0 returned -16 [ 1055.616704][ T6208] binder: release 19385:19397 transaction 7620 out, still active 01:12:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7000000, 0x0}) [ 1055.646306][T19460] Unknown ioctl 1074310912 [ 1055.651051][ T6208] binder: undelivered TRANSACTION_COMPLETE 01:12:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x4000000) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/180, 0xb4}, {&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000140)=""/102, 0x66}, {&(0x7f0000000380)=""/65, 0x41}], 0x4, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010010, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1055.711034][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1055.775871][ T6208] binder: send failed reply for transaction 7618 to 19238:19292 [ 1055.782446][T19589] binder: BINDER_SET_CONTEXT_MGR already set [ 1055.813667][T19606] binder: BINDER_SET_CONTEXT_MGR already set [ 1055.823859][T19589] binder: 19576:19589 ioctl 40046207 0 returned -16 [ 1055.832552][T19606] binder: 19542:19606 ioctl 40046207 0 returned -16 [ 1055.833424][ T6208] binder: send failed reply for transaction 7620, target dead [ 1055.846714][T19606] binder_alloc: 19576: binder_alloc_buf, no vma [ 1055.855383][T19606] binder: 19542:19606 transaction failed 29189/-3, size 0-0 line 3147 [ 1055.860971][ T6208] binder: send failed reply for transaction 7622 to 19385:19408 01:12:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) r2 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @window={0x3, 0x6795, 0x3}, @window={0x3, 0xffffffffffffffff, 0x9}, @window={0x3, 0x1}, @sack_perm, @mss={0x2, 0x4}], 0x6) [ 1055.873045][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1055.879027][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1055.879103][ T6208] binder: undelivered TRANSACTION_COMPLETE 01:12:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:11 executing program 3: clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000140)=0x2, 0x8b, 0x2, 0x0, &(0x7f0000000280), 0x0) [ 1055.933802][T19731] binder: BINDER_SET_CONTEXT_MGR already set [ 1055.952796][T19731] binder: 19542:19731 ioctl 40046207 0 returned -16 01:12:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x80) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000180)={{0x4, 0x7f}, 0x39}, 0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0xc, @win={{0x28cd, 0x7, 0xf2, 0x3}, 0x0, 0x7, &(0x7f0000000280)={{0x7, 0x80000001, 0x5, 0xdb}}, 0x1, &(0x7f0000000700)="1c0214cf2efe65e6eac2b61477c7e304ce7032070dd0dd9a6c23ad46a51c3201573e50c24600d20bcd032ca967c171b405d5518db375a08f8fca52ecee8fd283fd0133020ec70e2bead68e5f62d403b2713c25bf1da7a42abac2b885469facc3afbb76e8cc118796176431cb8a5219206889e733720bd9743e2b6118e4b77559d47de033bf91976af444f022041e58363d26505946452192c2de66652fa5c0b0ef6005c82f1cf5c67209527f4d58b73b98b95b3f7fcdc7167ac67da344f3fbe0fec484bd2f8b547f5e5b27f3d5c94d006e2fe730933be83d2384832eab4ce2c9894ef5eeeb344365c9c959f6e7edce01b4c6d74144588748541a5f7a6d57806ce1c31752e93ab1f47e377cc28f9b8af10db425f0f529b38517eaf8d6540d2f8770d844818ec497085bfb867aa4e1164f096aa173155ff26c7559fbbe3c3648ab1e03cb862d4292fd5fa41ab1d06d09e076102431cd87fe07e40754590bc9f4f20d71dcc21d35f3401eebff549fc807441adb7dd1810d03b9d20bf7fb3c606678d5e0beece1d37125158080c8d916daf8e981ec5f28f7b591d13efba340014b0c539441039e31a7ad034da9c633c91aa02774c8a5c58464eb8438ee5e972ca41d6bf451d56b84593c2e436641f92bd8502a62b1b3adf09b76c40ed12a60a6b2e9db3fc27af0b008fbb9c2227a2066068032caad42a06f24d9bb5e07a137d28fe936c090f3b9de16396f498a076c6c80abd0310349782d2d62c2b4c207375be4f81d10d3fc61c7e8f3a44420f0d635a7c772e76cdeab93510a5c015e33994da632339e30b7ecac0a5fb9739d7e5530ceaf82d22e9c26920d8b7a0654facf8ea026e38adf522f326de9c99b1ccb20eecec2624079ea93fbcf5f63cc31a470d2ca5f836a9ec3d15319d0bdfeb55fbdad156b4e266e7162826200ef676c6f57ac99d8f91c83fa273623a0685f9d5e7843b3bc4978535eab425b626fbbd2ef65df8dca5c9d5d95b74c1b7c50b50479b0b14d0da75327c4e045f89868905c4af96f84adce0a957044445b90bab431d548b8ddf0102b9909c01243cbd92028511fe116f6e03792dd5f953597e20edd55f9ee0e27a291ff0fc081f590ffedeccefb674d7e6f54ee33d4ccac8cbeeaa797d0855c52270440663749050b772773cc3cb8fe311567d55713eef91bd4b6f84520684e5bf80bdf740f73f55f7918ed0ad5d59db073992517d6d7878cc2f7c9e4955a80aeda087bd57be2b885d4c27171d950763e9ba6c107ae2a032b5aea46d6868721d4ca24deb423c4c08e2ab8bdf1950559346f19ac9bb3f57fc1a50a183ddd618d10e91e4e5181263e07a8bcb9a9286c35c12e253b71939e837a4d6e0f72b86d23a7a5d96fdea2ba06ed8747b140da162922ee653f0897526a0d18e9583661d4676e2eba6abd68fad62cceb65871d793c53084512f373b67bf461983e65b1b3a813d6ba9dc5761c481bacfd16d74819e0c791cf4666b9319bd23d4652fe6f9d3b877e121079c247043719a8f14083e836f3792ea7f31173f44bfce99a29432433931fbc3aa75c738c7b579db572f18af51851b88fe995326ac65a80320597756816de277e29d45033a494085fe003f7a529dbead05dc9d64d65dc9f5b248a68117e82507856c9bff35602db81de0242db95572fadbcb612d237901c736122164b5db069eb5d22ec180fac8fa04e7cc7e87709bc8717d84ee0f08a3c488da98f72f9701a70fcf6c62fde7467e12804483cca612449d4131bb8ac3ec3ca66eeeef8278485cd7a28bf9535a758558b0e2fbad618ab2b591f48c9a3e8c6c15d0b48a4f0ea9d8afda7a97ca2e02ec724b3aa804dddbc83e93a47c40d16fd44a1d25ceabb4cc44b847b08cb126b431b028557e80868276924ce07f00fe26cb655cc11b737f632bf43f445b0b1edff6ebc175493a1a698ea00a0bfdcfaac35731511e26d7f4171b98be1a48b6ac5395d21bc1c5d5f1c2d1abb76af290f834e81dcf859bcc79a2fe143c25a36f4d843cc1ef01a5b22d50fb5f995b941b091625fe3d487388b261526eeb3e568c9d92eed20ce8bf1529742bb68baab54d43f191de9a414c2c6179169eed603c74e4ca1535612a0e35ca3ec3afbdfa6f8e58d18d559907665797cbf1f8c005f24ab57ca92d3c744724f191f4f88a970abbf8648dc236116f0b967fd80437b7329442fb45153d3dea4b7e34e4494378fe11179d115e2bb95e50aab74aa6e14eaa6ac719201525344ff0991a0c4d50991b9aca0f0c6711fdbdecaf41ed34fa47b7accfb57e3d3cf0864bf8d092632fa703a224a1c55206fbf787a6c346e602ce8db79f7b30ccb2ef2b9ff4e87e862bd8d86b8b12827cccef793db612ca6dcf27ad642a8848f15b52f5d35e6421302b7c6a623de727d0f4333ad6aef0fb7126d1234995e56e5516ed9af8a33a5febc111ebbc35a1b24849626a2df7a057c8fb8fe4ff8ec8f0921e1494eaea0f7ef23b5136993dd97d5ddbe342f65bd1c4304abd2fcfbb11ef6d79c6c1bbca91a7bc59ed296b4b7cb2bc4fa02a232a9047c6264c170484f369758eb499e0a65ff1568826c73a3707831fad346d824d2543b3b5a676e55796b091a2ae850563ee548bd89dd86e5603c08f0314b6c739f6f1afd84aec750f4f68bd4a0daa1e7761f67f2887e1f5383bca4ff2c64095f4d0806cddc77132a41013118daf00d5626e02da8a7f0f5e2774c64ef2819be06c38a1c537b88afe20bdc3abd14b70ffc02da4174e4e28ac8af6eda5b277c674368a5860748787884234d2e8463d6d543f3c90057c24a1cd0cec16bf743cc48e0fbed31e0509c8980fcb74ce090f375befc84b0e32ee1fdd3377e5bf17b9e10d8ce923bb18dfc0841e7a9b6c5e81956f4757315d8bded839e6e00f2db6ec4f731c1cff92fab07ac7fd3a4ebea50eb553975646d371dc9a5bf615d104b7dbe1fb5abcfedeb6c59aac054c3ce44abc6a38c010d401ad2534ceb7e4ec499908061cd054e61491cae78debff31fc044b39a8592dee7b46e206e5da9d129eceb918419e50662e375b1b24f07e51088ddc12bec9d919c3e4dbd889d0b56e3fcaebffaa8cad15e32835e9d6784889eb82417234fa7985f25f5252550e2c24d4a88e371f41ad619f5e05fbf76109342a9539c2be45c8ee88077829ac290886d9e43dc51417852292d409dc41493db9c9af9fdcb8778e45fff7de7554aa914740bd824cee6eb9351a35e0524a657b6840120d8d4072ad194f378241fe6b454b90a09857436042c8572fae276d1f5436251a50e4f3ae7c07c0a4e66cb068b08298210f3badf3ee1f426256db2823e7a7ef184bc5cb0ad9af3a2fec5fd88682aa18c78db3c60a85401fbfddf5efe0a65265105ac3d0ae78103f02bb36320a9dbc819d2e6e6339a0f415c85ee78ad84312a053689abfa18fa7ee54fe96522b749eff3dfb5e5fe40d8dcf6a5bc13020804710ee50f16298e139ee8001a43fda38d78c003909ab2beb285e3c4bc861a476e96ee153adaf81382c8a263ffb33332c5826f1d5ceb78ec635cb4f78aacdbd3d191388e41227831a60ad12e36803b5108bab4b4a8048f118537db782dd95116d3d198b2d820c1b12d183695e8ddd4153211bb7d881c3cacb0e8dd7bf0b84323e2e92ce0eed977ff048457cd07c345a3514aa62dfdef4b1819b0dca6d7e7c7bdd7e8ba8586a2b753ffc523082330fa008a6bfa9f95952b52e94c819ef717d5222ef08995dfdfa1e3be2cbfd9817dccfefd408515fcde0edad0b0bf07d82346c595c618f538106ba7f7366f162b9dd9faa47ca7b3463f47c9f6d5db3eeab9b9f6859e9bba8331f6fb80f3bf59e2978140ccae019f46dc2b77ef5cbb9688f8f3f0c35dbd739e262d919676f404230a2feb615b828fa944c00e76663e64164ecb28435e60203949891a88a1aa728027b822b7ce4ff888e9fd598fe88e3fbbae14b3efc0eedbe7f7ac2760ab2d009d7ebc23642e5a8c34dc3ba7db22f896556eee6757db6547a96c78cb8541506006b358cb91713cf9322051da2831c4f5811c67213ffc34a3e985582f78092eb3fc2290dc21d3c0df447d8e5ab5a323383cd998b0949b9cc3639cc00ce7ecc4b5aeedcc39eb28fa1f1a05d3ce693127a250636310515ef5836527b5cf46eaff15c2debe4eef27e70cb0075f5d9c1d6bccd8adcc5479a601641006ecd2cd99c4a13c6311d498121766e6f3ea4afd8ce18eb8d0a1f6771da3adcc51b3ac7bef886f09a992dfb8dd209469d1b02ce2f2fcd28cc09e611576821c2ba35dca7d6ba627c949060508473e1616278a51e78f475695822fbc93c6b35f1eb27800f877f89873a951923cbfc48f66aaa65ead547fe986b7b62aca524385573cffbe608d96e8498891b3f9c6f8c2332258dc184a48eb0cd2872a5cca0f7e2bba51f7d509500b85cc7d6febe4a0dca87896ed6753814c9d5d4974adba96a8f0162ebb62ec491c0610fedac2400914efa04970e5c558b56df201bf230809d8e88204d842c10e2f75a606b45b077ce372a04fdf702391d70d8a8c8627a9ad6dbf775b5f12cf259f0dc2be56b07435a7093b59c62f4f28cbb9119530c521b7e73698d79877bd5662fc75df9f36fc33a07bdb2c945d2ae75082407f38a5c1d258b4c589b7634209187066cb32edcd39d84b736d549048aa90d1733f8b9393f1c1580d231b5596e929fe16d2ec5aa5560a3b3a2a676da41e718177aa14effa3362b5843c3cc5a15892f3b6a327765cd1fcda273b7614aee1ad3704b0e51259e7221bbc3ce17db2ccc902c5054ef8acb288682903e1d053491ba99a805d20cac088c44490079894542ebb5970ad930836cb753bbe09ee5b729e7af47856b63797b271686bdeb246256f78b6bd933050013bf94a5c3d1a17b68f4bdcc746b09fab6678cadfc7e8aee78e099e66be69e878f1eb4dc200f245f76278a67342e25d37a943c93841b2e3f4d7b9855b7069cf30c1fd0a5740d99f6fb6d66f8630ee2c8f98d8319a738f5c40ba3f408f6e508cde8250141315d4cf0ed1c64cbb34d8ef3149df28462aee64f9d6f3f357d7adaafae8b5325820983725920a901d4a09fe43226beee6a646e603181b244752e2109e9d4475b11f2fc283d5639217c8ae08690d9037e1a8e1cad6aaf63d19b92c406ffd59961e2470b509525b3271a915abfbc13ad02a0c59c8fbccb4fb2cbd0cf55a27236aa34d5c087deae671743affe69d9df874fa2e877543cc270ca8621daf09cae4da3484290b3132420fe11a6d3fde3ce65b3231467a233c5bb94ca33b517c53df0fb8371b69fb74db43031469009179080a0934fd4b51fd7367713582fb6227598d4a2e071ba962c9bb347e886398295401e2aa01d7ced56cdd13e1486b1ff24928111a9711334e44bbd6b707fdfa8e09bb6335d50a6e1c9474a37ba91e863a8538fe756a1730a2e889341cf9559231719cdacfddfeaa2217ea2f54464daecefd988333d13e4695588a5ced24b4694352ce2d146138daf44c2ec4f595d7e0a470fd8c81f18c5ba81e35c8ad5d2e01c80a7cb163cb59eef7792e2ecc4e7bb6370b653797a0783a7d346f101ca730580fab6fa778feb4ab719189a8fa87d1d367b533eb0ecd69227ad0d7f1cacc04d1158721bbb236f5c433f7475ed9b72fb84655fa3d12848f85ccd6dc066d7dfbea40987f1740cb7f88a6ce5be0a61cafdc06b4b603e7907fd9dce1fbbe376d1abdd38fc56c0c643c7b1229775e64de99af9163b03f0cc1c8670aa23413d480e3c188cd18eff", 0x2fa00000000000}}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0xff, 0x8000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) [ 1055.996731][T19733] binder: 19542:19733 transaction failed 29189/-3, size 0-0 line 3147 01:12:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa000000, 0x0}) 01:12:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x402) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3b350ebb) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1056.092264][T19861] binder_transaction: 4 callbacks suppressed [ 1056.092277][T19861] binder: 19858:19861 got new transaction with bad transaction stack, transaction 7628 has target 19858:0 [ 1056.113192][T19861] binder: 19858:19861 transaction failed 29201/-71, size 0-0 line 3044 [ 1056.177886][T19924] binder: BINDER_SET_CONTEXT_MGR already set [ 1056.199348][T19924] binder: 19894:19924 ioctl 40046207 0 returned -16 [ 1056.211758][T19924] binder: 19894:19924 got new transaction with bad transaction stack, transaction 7630 has target 19858:0 [ 1056.231131][T19924] binder: 19894:19924 transaction failed 29201/-71, size 0-0 line 3044 [ 1056.235250][ T7769] binder: send failed reply for transaction 7628 to 19858:19861 [ 1056.242244][T19973] binder: 19894:19973 transaction failed 29189/-3, size 0-0 line 3147 01:12:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}], 0xdd, 0x0, &(0x7f0000000080)="c2a278f3bd8dda46f3da57081ae1b1d80d5d67700980c029011f875e5e7f8ad7a0346c95775e401e3701a9140f763add4c721cfccc7287ae6eb635fab760d66585816c6fa529d49aae0fbf997967838ca919e1225e20b8e8db38055918bb1f22d35cdac855c8ed73b729a0f03a95246f2e0df73af96dcccd9940428b7ea912e0b3c022abb95462c7740581f7678f06485b2f0f3168ff696eb804c4ac803991352c8130dbb3bcc6359495a6f284286e09cba4dd48baed49b6cd43c00e99a5ddbd666e592adc4499507956ebd220a91cba4bcc685eca5e17576e504b2c3e"}) [ 1056.271905][ T7769] binder: send failed reply for transaction 7630 to 19894:19924 [ 1056.296160][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1056.313251][ T7769] binder: undelivered TRANSACTION_COMPLETE 01:12:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x14, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x20000000, 0x0}) [ 1056.320958][T20024] binder: 20023:20024 got new transaction with bad transaction stack, transaction 7635 has target 20023:0 [ 1056.422847][T20134] binder: BINDER_SET_CONTEXT_MGR already set [ 1056.434896][T20134] binder: 20067:20134 ioctl 40046207 0 returned -16 [ 1056.448751][T20134] binder: 20067:20134 got new transaction with bad transaction stack, transaction 7637 has target 20023:0 [ 1056.463044][ T7769] binder: send failed reply for transaction 7635 to 20023:20024 01:12:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0xc0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x10, 0x7, 0x200}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f000000, 0x0}) [ 1056.472129][ T7769] binder: send failed reply for transaction 7637 to 20067:20134 01:12:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) r2 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) [ 1056.515476][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1056.530645][T20193] binder: BINDER_SET_CONTEXT_MGR already set [ 1056.563679][T20193] binder: 20191:20193 ioctl 40046207 0 returned -16 [ 1056.563850][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1056.597771][T20197] binder: BINDER_SET_CONTEXT_MGR already set [ 1056.624473][T20197] binder: 20194:20197 ioctl 40046207 0 returned -16 01:12:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) lgetxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00', 0x0, 0x0) 01:12:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x22, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48000000, 0x0}) 01:12:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 01:12:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x70, 0x64, 0xe2, 0x18, 0xfffffffffffffff8, 0x0, 0x10001, 0x10080, 0x8, 0x5, 0xad46, 0x4, 0xd073, 0x7, 0x100000001, 0xfc00000000000000, 0x3, 0x3, 0x400, 0x7, 0x7, 0x3, 0x3, 0x7, 0xde6e, 0x80, 0x20, 0x11, 0x937, 0x40, 0x101, 0x4, 0xd3, 0x8, 0x0, 0x1, 0x100, 0x0, 0x2, 0x4, @perf_config_ext={0x42, 0x2}, 0x0, 0x4, 0x6, 0x5, 0x0, 0x9, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:12:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1056.963942][T20515] binder: 20507:20515 got new transaction with bad transaction stack, transaction 7646 has target 20507:0 [ 1056.964369][T20518] binder: BINDER_SET_CONTEXT_MGR already set [ 1056.988777][T20518] binder: 20509:20518 ioctl 40046207 0 returned -16 [ 1057.000829][T20518] binder: 20509:20518 got new transaction with bad transaction stack, transaction 7648 has target 20507:0 01:12:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0xfe0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1057.057689][T20696] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.084936][T20698] binder: 20509:20698 got new transaction with bad transaction stack, transaction 7650 has target 20507:0 01:12:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0, 0x11}, {r1}, {r1, 0x200}, {r1}, {r0, 0x110}, {r0, 0x10}, {r0, 0x10}], 0x7, 0x7a8d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1057.103398][ T6208] binder: release 20509:20518 transaction 7648 out, still active 01:12:13 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102003ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000140), 0x800) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='{wlan<\xe3\xf3\xe3%B!3\x00L\x93\xea\xe6\xbd\xc3\xda\x95\xb7\xc2{w\xfe\xaeS\f\x18X\xa1Kg\xe0\xbda\xbb5=\x88}6U&\v\xc10\xce\x8d\x01\xc3,\xefZ\xf0\xfbQ\x00\xc6j\xcf\xf1\xce\x9a\xcf\xc06\x8c\x04=\xf9\x8ai=\xd4\xf0%\x98\x01\x89\xa9\t\xd9\xbf\xe8\x9f\xed\x1a') [ 1057.161276][T20696] binder: 20509:20696 ioctl 40046207 0 returned -16 [ 1057.185337][ T7769] binder: release 20509:20698 transaction 7650 out, still active 01:12:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x0, 0x8, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x6f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1057.223131][ T7769] binder: send failed reply for transaction 7646 to 20507:20515 [ 1057.256093][ T7769] binder: send failed reply for transaction 7648, target dead 01:12:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c000000, 0x0}) [ 1057.307156][ T7769] binder: send failed reply for transaction 7650, target dead [ 1057.326752][T20930] binder: 20885:20930 got new transaction with bad transaction stack, transaction 7653 has target 20885:0 01:12:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3591d) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x20800) [ 1057.391320][T20996] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.398012][T20996] binder: 20949:20996 ioctl 40046207 0 returned -16 [ 1057.419078][T20996] binder: 20949:20996 got new transaction with bad transaction stack, transaction 7655 has target 20885:0 01:12:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1057.451890][T21088] binder: 20949:21088 got new transaction with bad transaction stack, transaction 7657 has target 20885:0 [ 1057.453666][T21079] binder: BINDER_SET_CONTEXT_MGR already set 01:12:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xee07) [ 1057.499497][ T6208] binder: release 20949:20996 transaction 7655 out, still active [ 1057.507606][T21079] binder: 20949:21079 ioctl 40046207 0 returned -16 [ 1057.522870][ T6208] binder: release 20949:21088 transaction 7657 out, still active 01:12:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4400, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000100)='/dev/vfio/vfio\x00', 0xf, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000240)="120279569184fb6dd7a2c0d8424f574736c85f16101c68fe27d6f30e389c571316981b8edd594c1fed47b845ce05133a6bbb5eeb54a3ec0d8abe2ea0d5fe0964eb454502aa7b7cda17673bf5093521799a70fb9bc74e7986be6e03662d3ee6f44a6a402725fdf57b5ce0fd07e5e0fee53dca55a8f7b9f0c6bda4d8621575d1afc39e02db203be955b283fff91e3c199d543873608a816f779f96055d2d237f20a85fdc0d2eb5fdef4e57a0bec5019bc76b093f6514779df27edbf2d5e1de91bec132f54d", &(0x7f0000000140)="45d513296c0e1c35d927f2975758b944639c842215ad1bc6c205841f52ce536f5c1cf764de226f26d1d45a229bc95fca42dc0901d8eeab21a889a7f31054d7"}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000009cd9c30be32dea1079c1d442c292740000000000000000000000000000000000000000040000000000000000000000000000000000000000000000f5ffffff62404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6fd94"], 0x0, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={r2, r2, 0x6, 0x2}, 0x10) 01:12:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1057.581106][ T6208] binder: send failed reply for transaction 7653 to 20885:20930 [ 1057.603732][ T6208] binder: send failed reply for transaction 7655, target dead 01:12:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) socketpair(0x2, 0xf, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, [0x9, 0x1, 0x4, 0x7fff, 0x48c8, 0xffff, 0x9, 0x8, 0x58, 0x7, 0xa52c2be, 0x5, 0xfffffffffffffffb, 0x80, 0x3ff]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e20, 0x9, @ipv4={[], [], @empty}, 0x9}}, 0xfffffffffffffffd, 0x7}, &(0x7f0000000240)=0x90) 01:12:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x60000000, 0x0}) [ 1057.643082][ T6208] binder: send failed reply for transaction 7657, target dead [ 1057.667462][T21214] binder_alloc: 21189: binder_alloc_buf size 8399989847292475664 failed, no address space 01:12:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x200001f0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x1, 0x3, &(0x7f0000000200)}) [ 1057.745652][T21214] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 1057.756358][T21272] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.767389][T21272] binder: 21271:21272 ioctl 40046207 0 returned -16 [ 1057.810755][T21369] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.838206][ T7769] binder: release 21271:21272 transaction 7661 out, still active [ 1057.847286][T21369] binder: 21271:21369 ioctl 40046207 0 returned -16 01:12:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x4002) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r1, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x17e}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44040}, 0x40014) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1057.859703][ T7769] binder: release 21271:21371 transaction 7663 out, still active 01:12:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 01:12:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) select(0x40, &(0x7f0000000000)={0xff, 0x8, 0x1, 0x8, 0x1, 0xb2dd, 0x9, 0x3}, &(0x7f0000000080)={0x51, 0x8925, 0x40, 0x7, 0x6e8dccb800000000, 0x1000, 0xc9ba, 0x7f}, &(0x7f00000000c0)={0x5, 0xc4ab, 0x80, 0x7, 0x9, 0x663, 0x7f, 0x2}, &(0x7f0000000100)={0x0, 0x2710}) 01:12:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x68000000, 0x0}) [ 1057.963888][ T7769] binder: send failed reply for transaction 7661, target dead [ 1057.980110][ T7769] binder: send failed reply for transaction 7663, target dead 01:12:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1058.110881][T21623] binder: 21560:21623 got transaction to context manager from process owning it [ 1058.120806][T21625] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.127107][T21625] binder: 21561:21625 ioctl 40046207 0 returned -16 01:12:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1058.163169][T21716] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.187508][T21716] binder: 21561:21716 ioctl 40046207 0 returned -16 01:12:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 01:12:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c000000, 0x0}) 01:12:14 executing program 3: 01:12:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) fchmod(r1, 0x0) 01:12:14 executing program 3: [ 1058.409837][T21975] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.441953][T21975] binder: 21947:21975 ioctl 40046207 0 returned -16 01:12:14 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200040, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1058.490689][ T7769] binder: release 21947:22030 transaction 7672 out, still active [ 1058.512288][ T7769] binder: release 21947:22030 transaction 7674 out, still active 01:12:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x74000000, 0x0}) 01:12:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) writev(r0, &(0x7f0000002bc0)=[{&(0x7f0000002b00)}], 0x1) [ 1058.557694][ T7769] binder: send failed reply for transaction 7670 to 21829:21893 [ 1058.624914][T22092] binder_alloc: 22072: binder_alloc_buf size 1077961472 failed, no address space [ 1058.628194][ T7769] binder: send failed reply for transaction 7672, target dead [ 1058.667221][T22092] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 1058.684877][ T7769] binder: send failed reply for transaction 7674, target dead [ 1058.704621][T22143] binder: BINDER_SET_CONTEXT_MGR already set 01:12:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:14 executing program 2: r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000240)=""/66, 0x42}], 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1058.711774][T22143] binder: 22130:22143 ioctl 40046207 0 returned -16 [ 1058.728440][T22166] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.742880][T22166] binder: 22130:22166 ioctl 40046207 0 returned -16 [ 1058.797549][ T6208] binder: release 22130:22143 transaction 7678 out, still active [ 1058.810170][ T6208] binder: release 22130:22167 transaction 7680 out, still active 01:12:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840000000000000000000000000003f0000000000000000000000000000008000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000004000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 01:12:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a000000, 0x0}) [ 1058.866664][ T6208] binder: send failed reply for transaction 7678, target dead [ 1058.875826][ T6208] binder: send failed reply for transaction 7680, target dead [ 1058.960486][T22473] binder_alloc: 22412: binder_alloc_buf size 65504 failed, no address space 01:12:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000040)=""/197, &(0x7f0000000140)=0xc5) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:12:14 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@initdev}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000019c0)={0x4, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x633, 0x0, 0xf, 0x0, 0x0, 0x7fffffff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff80000000, 0xbba3, 0xc000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x100000000, 0x0, 0x7fffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)={{0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x1}, "", [[], [], []]}, 0x320) mlockall(0x1) [ 1059.006515][T22473] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 1059.017791][T22510] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.024181][T22510] binder: 22492:22510 ioctl 40046207 0 returned -16 [ 1059.073615][T22596] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.145438][T22596] binder: 22492:22596 ioctl 40046207 0 returned -16 [ 1059.145452][ T6208] binder: release 22492:22510 transaction 7684 out, still active 01:12:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1059.193821][ T6208] binder: release 22492:22599 transaction 7686 out, still active 01:12:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0}) 01:12:15 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x0, 0x100000000}, 'port0\x00', 0x14, 0x40012, 0x3, 0x5, 0x5, 0x7, 0x7, 0x0, 0x5, 0x2e8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x404801, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af00, 0x0) 01:12:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup3(r1, r0, 0x80000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000100), 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x8, 0x200}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000000)={r3, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x3f}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000008000000000000000"], 0x0, 0x0, 0x0}) [ 1059.318096][ T6208] binder: send failed reply for transaction 7684, target dead [ 1059.343806][ T6208] binder: send failed reply for transaction 7686, target dead [ 1059.386313][T22779] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 1059.386321][T22779] binder_alloc: 22778: binder_alloc_buf, no vma [ 1059.439704][T22779] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.447004][T22812] binder_alloc: 22778: binder_alloc_buf, no vma [ 1059.457815][T22824] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.476984][T22779] binder: 22778:22779 ioctl 40046207 0 returned -16 01:12:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1059.497902][T22824] binder: 22781:22824 ioctl 40046207 0 returned -16 [ 1059.532362][ T6208] binder_release_work: 42 callbacks suppressed [ 1059.532375][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 01:12:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1059.554434][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1059.618492][ C0] net_ratelimit: 18 callbacks suppressed [ 1059.618527][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.619163][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.624292][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.624391][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.630737][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.635876][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.643057][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:12:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) 01:12:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x8000000000000803) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1}) [ 1059.665558][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:12:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x100) accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000100)='net/ip6_tables_matches\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) [ 1059.774224][T23044] binder_alloc: 23010: binder_alloc_buf, no vma [ 1059.784851][T23046] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.797747][T23044] binder: 23010:23044 ioctl c028aa03 20000000 returned -22 [ 1059.808415][T23046] binder: 22998:23046 ioctl 40046207 0 returned -16 [ 1059.815181][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1059.830450][T23046] binder_alloc: 23010: binder_alloc_buf, no vma [ 1059.854210][T23046] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.868816][T23208] binder_alloc: 23010: binder_alloc_buf, no vma 01:12:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1059.875609][T23046] binder: 22998:23046 ioctl 40046207 0 returned -16 [ 1059.884201][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1059.899747][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 01:12:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) [ 1060.044031][T23414] binder_alloc: 23413: binder_alloc_buf, no vma [ 1060.052798][T23414] binder_transaction: 32 callbacks suppressed [ 1060.052814][T23414] binder: 23413:23414 transaction failed 29189/-3, size 0-0 line 3147 [ 1060.079425][T23414] binder: BINDER_SET_CONTEXT_MGR already set 01:12:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) writev(r0, &(0x7f0000002bc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 01:12:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x100000000000000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245c5efe3fca1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d207f64d514b62c8dc34889c1ed6a3f1a6934957cce0fd46e8dc96c384282eab1312fdc48c8820c46cabf4845897bf12880614b46bdcb61901d4602cf6e99f3298e37fd704d4762f5fcb787b065ef3a309b65fcb2a5cbe02d0abcb8fa8f196f71f72b5cb57f8c6b6bf37735c38643bd4433"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:16 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7ff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0xf, 0x1000, 0x5, 0x4800, r0}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req={0xffffffffffffff01, 0x3, 0x8, 0x9}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) pipe(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000080)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x8, 0x9, 0x7fff, 0x0, 0x3, 0x1, 0x9, 0x4, 0x2, 0x5, 0x0, 0x4}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7c7, 0x400800) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000040)) [ 1060.094881][T23415] binder_alloc: 23413: binder_alloc_buf, no vma [ 1060.102904][T23414] binder: 23413:23414 ioctl 40046207 0 returned -16 [ 1060.110629][T23415] binder: 23413:23415 transaction failed 29189/-3, size 0-0 line 3147 [ 1060.119449][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1060.128036][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 01:12:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x200000000000000, 0x0}) 01:12:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1060.184626][T23421] binder: 23420:23421 transaction failed 29201/-71, size 0-0 line 3044 01:12:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1060.315619][T23484] binder_alloc: 23428: binder_alloc_buf, no vma [ 1060.338749][T23484] binder: 23428:23484 transaction failed 29189/-3, size 0-0 line 3147 [ 1060.377379][T23484] binder: BINDER_SET_CONTEXT_MGR already set [ 1060.405164][T23699] binder_alloc: 23428: binder_alloc_buf, no vma [ 1060.413152][ T6208] binder: send failed reply for transaction 7699 to 23420:23421 [ 1060.420971][ C0] protocol 88fb is buggy, dev hsr_slave_0 01:12:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) sysfs$3(0x3) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1060.421022][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.449114][T23484] binder: 23428:23484 ioctl 40046207 0 returned -16 [ 1060.464912][T23699] binder: 23428:23699 transaction failed 29189/-3, size 0-0 line 3147 [ 1060.473597][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1060.494918][T23745] binder: 23744:23745 transaction failed 29201/-71, size 0-0 line 3044 [ 1060.506553][ T6208] binder_release_work: 15 callbacks suppressed [ 1060.506558][ T6208] binder: undelivered TRANSACTION_COMPLETE 01:12:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300000000000000, 0x0}) [ 1060.558445][ T6208] binder: undelivered TRANSACTION_ERROR: 29201 [ 1060.603090][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 01:12:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1060.685862][ T6208] binder: send failed reply for transaction 7705 to 23744:23745 [ 1060.694047][ T6208] binder: undelivered TRANSACTION_COMPLETE 01:12:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:16 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x241, 0x0) 01:12:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1060.739125][T23950] binder_alloc: 23933: binder_alloc_buf, no vma [ 1060.745412][T23950] binder: 23933:23950 transaction failed 29189/-3, size 0-0 line 3147 01:12:16 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x738f, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000080)={0x2, "38be"}, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af00, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@reserved}) [ 1060.862787][T23950] binder: BINDER_SET_CONTEXT_MGR already set 01:12:16 executing program 3: r0 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) seccomp(0x0, 0x0, 0x0) getgid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000004c0)) 01:12:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000280)="b5a1bf83a60db781bed9a26c10852e0b06129e5d6d722902e9d855ec8bdbb3d5f33229211290673da10a73e440a241747017b38fc22f5b4942917908d1e4d608c1b970bc488b3264e80c6c0a6efecafd58808ea8df69b9a02da7b84877da8b6acaa19d99281ce720d93e9891b6eabbfd4babc65c51f9769bef2b313fa53079a61e10bdf5bb", 0x85) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10040, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)=0x3, 0x4) [ 1060.957351][T23950] binder: 23933:23950 ioctl 40046207 0 returned -16 [ 1060.957420][T23998] binder: 23933:23998 transaction failed 29189/-3, size 0-0 line 3147 01:12:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000000000000, 0x0}) 01:12:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x25f, 0x4, 0x200, 0x7, 0x4, 0x3, 0x0, 0x9, 0x356, 0x38, 0xbe, 0xfffffffffffffffd, 0xff, 0x20, 0x2, 0x6, 0x3, 0x17}, [{0x2, 0xffffffffffff98b1, 0x9, 0x1f, 0x0, 0xfffffffffffff800, 0x81, 0x1000}, {0x60000006, 0x3f, 0x94, 0x200, 0x2, 0x5, 0x0, 0x7}], "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", [[], [], [], [], [], [], [], []]}, 0x1878) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000001cc0)=""/4096) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f0000000040), &(0x7f0000d8cffc)=0x4) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000200)={0x2004, 0xfffffffc, 0xc, 0x3}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000300)=""/185) [ 1061.001473][ T26] audit: type=1326 audit(1551143536.858:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 01:12:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1061.077533][T24078] binder_alloc: 24076: binder_alloc_buf size -4158792780899942384 failed, no address space [ 1061.144093][T24078] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 1061.156168][T24089] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.181629][T24078] binder: 24076:24078 transaction failed 29201/-28, size -4158792780899942400-9 line 3147 01:12:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setsig(r0, 0xa, 0x27) r2 = dup3(0xffffffffffffff9c, r0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x77, 0xb989, 0x6f9, 0x6, 0x3, 0x40}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x400000000000005, 0x18bac, 0x6, 0x1000000000004, 0x4, 0x7}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ff070000020000000000000008000000000000000cc700000000000001000000000000000000000000000000000000000000000000000000000000000900000008000000070000000000000000f8ffffff070001000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af00, 0x0) write(r0, &(0x7f0000004440)="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", 0x1000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4403, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000001440)=""/4096, &(0x7f0000000240)=0x1000) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000440)=""/4096, &(0x7f0000000300)=""/168, &(0x7f0000000040)=""/12, 0x1000}) [ 1061.191862][T24089] binder: 24082:24089 ioctl 40046207 0 returned -16 [ 1061.201756][T24089] binder_transaction: 11 callbacks suppressed [ 1061.201770][T24089] binder: 24082:24089 got new transaction with bad transaction stack, transaction 7712 has target 24076:0 [ 1061.219947][T24089] binder: 24082:24089 transaction failed 29201/-71, size 0-0 line 3044 [ 1061.253560][T24089] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.281263][T24138] binder: 24082:24138 got new transaction with bad transaction stack, transaction 7714 has target 24076:0 [ 1061.300377][ T7769] binder: release 24082:24089 transaction 7712 out, still active [ 1061.309665][T24089] binder: 24082:24089 ioctl 40046207 0 returned -16 [ 1061.316534][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1061.338567][ T7769] binder: release 24082:24138 transaction 7714 out, still active 01:12:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500000000000000, 0x0}) 01:12:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1061.357801][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1061.368005][ T7769] binder: send failed reply for transaction 7712, target dead 01:12:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1061.423857][ T7769] binder: send failed reply for transaction 7714, target dead 01:12:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000002c0)={r3}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4200, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f00000001c0)={r6, 0x3}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) [ 1061.467772][T24305] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.481827][T24308] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.489018][T24305] binder: 24304:24305 ioctl 40046207 0 returned -16 [ 1061.497018][T24308] binder: 24301:24308 ioctl 40046207 0 returned -16 [ 1061.780284][ T26] audit: type=1326 audit(1551143537.638:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 01:12:17 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r1 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) 01:12:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600000000000000, 0x0}) 01:12:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xd4, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x9}, @acquire={0x40046305, 0x3}, @exit_looper, @dead_binder_done, @register_looper, @clear_death={0x400c630f, 0x4, 0x1}, @increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000080)=[@fda={0x66646185, 0x8, 0x0, 0x2}, @fda={0x66646185, 0x1, 0x1, 0x34}, @flat={0x77682a85, 0x10a, r2}], &(0x7f0000000000)=[0x40, 0x78]}, 0x2}}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x40, 0x38, &(0x7f00000001c0)=[@fda={0x66646185, 0x9, 0x2, 0x33}, @fda={0x66646185, 0x1, 0x1, 0x6}], &(0x7f0000000240)=[0x48, 0x0, 0x0, 0x18, 0x20, 0x18, 0x48]}}], 0x0, 0x0, 0x0}) 01:12:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xbc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x200440) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) r2 = fcntl$getown(r1, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r2) [ 1061.880856][T24625] binder: 24620:24625 DecRefs 0 refcount change on invalid ref 9 ret -22 [ 1061.899294][T24622] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.924461][T24622] binder: 24621:24622 ioctl 40046207 0 returned -16 [ 1061.935413][T24625] binder: 24620:24625 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1061.956823][T24632] binder: 24621:24632 got new transaction with bad transaction stack, transaction 7720 has target 24620:0 01:12:17 executing program 2: r0 = socket$inet(0x2, 0xe, 0x4d) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x92, "23a76a9ef5b9c66ba6fc2c8fd98dd4cad2605715c4fa8f835eb46eef0c9dbd3d96f3f4e66ba6864530ab3da8a340e320ad3b6eae6a6c748b6bd1eac6f2f60fd844e675e49997b0d8de3face8c5c6d60ac5039216e781402b9ee6d8212c0483acecc6f8e41063acd397654fb1453f467137eddc793e343b7c8c378d262c6fbfa96e020f32b8b81619787d5323ea920521997e"}, &(0x7f0000000040)=0x9a) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r1}, &(0x7f00000003c0)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af00, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="8344da9548771938751eb804a906fd3db7b5ef033888cb9aaf448b557ad3e9f16305fb54eb551096986ff428c4b0959fe1b59d633495d76bd8ca46e99a8409c7d3bd41fcdaca93b44255aab36bca673b02b7d73bdb5f18d10cb206c51bee1098560622396efa5fdfb2d6859d5e6796aa2c62c53dc92686763e61e377d685dfcfa7a3d431e9c884250db22fddec19244436003b3be3103690829375e3aaebb4c7ccd66d2ebaf27f66ae6943c0fee388d52416dff1d03cfb6586931bdbe4bd838df8944829e4279b40b3b0e2148ce74fe13a970ff36759c48c", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x100000001, 0x0, 0xc0, 0x2}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000140)={0x7}, 0x1) [ 1061.969778][T24625] binder: 24620:24625 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1061.979872][T24622] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.987433][T24625] binder: 24620:24625 ERROR: BC_REGISTER_LOOPER called without request [ 1061.996038][T24622] binder: 24621:24622 ioctl 40046207 0 returned -16 [ 1062.003000][T24632] binder: 24621:24632 got new transaction with bad transaction stack, transaction 7722 has target 24620:0 [ 1062.027364][T24625] binder: 24620:24625 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 1062.060050][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1062.066717][T24625] binder: 24620:24625 IncRefs 0 refcount change on invalid ref 3 ret -22 01:12:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000500)) getegid() dup2(r0, r1) 01:12:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) [ 1062.084107][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1062.108554][T24625] binder: 24620:24625 got transaction to invalid handle [ 1062.176840][T24949] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.187110][T24949] binder: 24917:24949 ioctl 40046207 0 returned -16 [ 1062.245581][T25011] binder: 24917:25011 got new transaction with bad transaction stack, transaction 7725 has target 24620:0 01:12:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xde}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) dup2(r0, r0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1062.300891][T24949] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.328267][T24949] binder: 24917:24949 ioctl 40046207 0 returned -16 [ 1062.331752][T25011] binder: 24917:25011 got new transaction with bad transaction stack, transaction 7727 has target 24620:0 01:12:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 1062.417932][ T6208] binder: undelivered TRANSACTION_COMPLETE [ 1062.447042][ T6208] binder: undelivered TRANSACTION_COMPLETE 01:12:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa00000000000000, 0x0}) 01:12:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x42, 0x0, &(0x7f00000000c0)) [ 1062.609264][T25252] binder: 25221:25252 ioctl 80287010 20000000 returned -22 [ 1062.640486][T25269] binder: BINDER_SET_CONTEXT_MGR already set 01:12:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1062.651160][T25252] binder: 25221:25252 got transaction to context manager from process owning it [ 1062.667350][T25269] binder: 25267:25269 ioctl 40046207 0 returned -16 01:12:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x0, 'memory'}]}, 0x8) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x44000) 01:12:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x13a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000000000000, 0x0}) 01:12:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116307000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f85e544534b419bf00000000"], 0x0, 0x0, 0x0}) 01:12:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:12:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1062.912463][T25587] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.930875][T25587] binder: 25414:25587 ioctl 40046207 0 returned -16 [ 1062.943596][T25593] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.950057][T25593] binder: 25592:25593 ioctl 40046207 0 returned -16 01:12:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x20c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f00000000000000, 0x0}) 01:12:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x40, 0x0, &(0x7f0000000080)=[@acquire={0x40046305, 0x3}, @request_death={0x400c630e, 0x0, 0x2}, @release={0x40046306, 0x2}, @enter_looper, @release={0x40046306, 0x4}, @increfs_done={0x40106308, r2}], 0x1000, 0x0, &(0x7f00000006c0)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @dead_binder_done], 0xfffffffffffffe31, 0x0, 0x0}) 01:12:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x46, 0x0, &(0x7f00000000c0)) 01:12:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, 0x0, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1063.153595][T25810] binder: BINDER_SET_CONTEXT_MGR already set [ 1063.185780][T25810] binder: 25803:25810 ioctl 40046207 0 returned -16 [ 1063.192684][T25849] binder: BINDER_SET_CONTEXT_MGR already set 01:12:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4800000000000000, 0x0}) [ 1063.214553][T25849] binder: 25828:25849 ioctl 40046207 0 returned -16 01:12:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0xc400) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x68, 0x9, "05f7f2b0801d1555f6a29a4929935084a395146503e941b32805a3de3652f82245179386136344caffb675c6c069e0b48d67fe318f5e745c88c00a2d10b1e84efdf8b191ccc414c17af2954f704d328ea3e12d0d821419455bba20a9c0f94bb5"}, &(0x7f0000000100), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) 01:12:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000240)={0xfffffffffffffff5, 0x0, @ioapic}) 01:12:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x2a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1063.354557][T26022] binder: BINDER_SET_CONTEXT_MGR already set 01:12:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11633133f2582984df5874fd13484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = accept(0xffffffffffffff9c, &(0x7f0000000240)=@ipx, &(0x7f00000001c0)=0x80) sendmsg$inet_sctp(r2, &(0x7f0000001400)={&(0x7f00000002c0)=@in6={0xa, 0x4e21, 0x7f, @remote}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000300)="d3bc83f99ae11c154d7d5543a172acad273ea1d0496a496a4d1ff9e926", 0x1d}, {&(0x7f0000000340)="9e699dd10e3333e95b74b1ec6094aab1a3fd2a121c5bdcc849f22b5799e8a6b7bd214881b64ec2fb5d7ca63750987257e308a9725ae075c8035fb4ee8d4914d89941ec7ba289a4dde7d5fa00d09a33df5583d57dd0b9e3513636dea0730200fc1be1457dc3475a55f8524924801172038b37277f63e1ce0bf6ed7d04185286180fcb32276c23c49dced58df2499e7debb9a8dc2192295b1215d5c77e48df2f9cb0da6a324fb1da6705ad46a775514749ddc0bb2f509195cc2ed1afcc446dd1432f0dfe29c437701d4aab066c6ff4b8561a22406a0a3a5b2d6e39b8688695648135d048269823a3d6e47c8c75681c0654dd112336e80a7f82cc689d5ecce2f465bea191d6a8fa1835ec60e17091579295d9ca1e76d3faad0868c96bc3bfbe13dc12223e9dbc65dc3788f5e5a9cb4c20526aa6370d4afce222f99c4709cbf83b56923ec3c3278e36670d15fe0e353833319974e038f3bcbcc8eeba9987341a747bc1f055a0c87e69151cb4f9d7cb09f21fd19e4808824df4cd0c86a1eda52139f0931460c2442cb17db176e88f2c7cb46d9b0a08556816593ed0175eb0bab582e4c5103263a948a052ce9a010cc585856d528c72f2a07be23fc40949da7c94eeb76ef7a2bc4c026530dfd92856ee27afb05b897b5127df01b760e035bcdbb76ff18ae642586d67072699895746a19d421add6f7a9d205ca5b4eabe7fbda85b7430d9b2699734fb740c9eb71883a7fbf66f489e1f6c6b23fd0430853f24da34b9e95273abf6f5d0e278caf0280d71a2c9f9f10cfc15f39779b2e441df7d22cb6af40feea0d1ef6612309f4fe0e87b77a66394330e0c2e70f9848606fe258b0381d19a3745ee6b27a6173da0a7fa1cdecc1778ec0371fca447b207480b93c072c1b0401920fe5644495149b2bdf28618781cf93d86baa2baf4b4dd656475d940544dae8886aade0cf34014cb182e4aee94d7679a8e021d8c9ad789ad3b750ec581a04e980a3539fad0da920d2ecaecef987aef9577069e1b0d5b1d5ddd40a87440be7b8eb1e774ec7ccf8deed37f5b59a328996707d481c97a1dfc61079f25d139f3f447a2ca4efbc3aa613066f40ef0a551f194e1ba29c9c7a2dd4d835df0783e257c46c7e3a3db4047b037f1af19938ad40b93ddb53051fe51b28259afa2d623ffca39339538976d5d2f70b64899281f4705322589dc6ee9de983caeadcb70dd64042509b60646a6e6e468778f7c1e985a9cb8ad18e9182f0ee0a96467b830bbde3ab789bfd7d8dccfa8ecf1d6dfe1c52c5777276bfb396643ee90bc89eac26e0b5abc00ad49d92102c9db749aae0d71eec28ec179679bd5e2fbae534c49bf6956c8bd3b568186a2b68b8385067f01e4533f97a08d832ec7dd6033fad3ec25df2b8e4f57bb324f99bfd106ed0abd5de2dbc883e319fecd2a4de7eb9e8e34dd3d6839cbcab01c221c49b7fe6ecd25ab3e8b8066394345313b87b4ab0be288fda7134993502ebc8efaa77c06a471859f2899aef797efc2a493a128e5f4cd66888415ba4eeb4b1d387798da09c9fb4ce5f0006f44d753f2de4b581cae2e5fa30d59f8fa6fca5985507b8796b1bf55a8c1df2503249174d9044bd76b248c52c43607eace47afa3e9cc91faff09b6d6098229aceb37cd7d57508bc010876913a249d5d41af74916d20d690693cf7938019125023e69c82e1e435da809c800ff9d2fdf0c25077d2da00db21283a3a86f2b15d7e143cb2e38fbc839a9ff9716457940b1256c6096f6d2cd7f118f1e2581eb6441d968140afa7526047625367cc64a12aa91644f2ec126f10e3f19001ae97cc9b4a502c7cee83db7f9a5f6f2737d92a74b8d248a9c733d160bcd94e276f7d1207897a8c099ef49caea18045a474ce6c65da3275fde0bdb3f74208ffc654f2709b01e7cc2226d15975574fae2a9eecc85d8e548110f254fb588ac8982a33d4f485e4a8ddb29f4234df359d5190fafcee6e75c6bcb0735501a4cfb0e5dd3a5e54f0a137eacfce0f4e71d437c58b959ac2c82f3e51fcd0514c5aebb31c7cf033cc191db073f812585bbec0242427d44a8def62a27471fcf75c429421080587d1d358a7bc5d2206746cf1c93bbe70a61a0e6f41198cc8b0511d797e196f16ef5263e6c089d94cc913039116ea24ba8104359709c9569c254d49729ce5199d12ad4bc006c2025c8965dfbd409ed6c4d63a8e5207c623e1d4f6edf6d85297bf9f37e77fa8b24c4181fa105f36c018fb6621cb14c06e7007ccb3fe289bc1ef16405a9c8a126270b79ddd9068c5c0b2e8a9a2d6572eaea47733f8f31e00c7268afcf990a11584b815454568a3d3d5794652b3bf75ca8ddde09e5831df46f60798b954ef680955302bbcadae3bc75e1022a392d6964c46169f719186c7ff84d4553053e9d2df138bd73bfe45f1eca6a5f26731095ba8b4bd2990676004382b3029725068803f94eb9bcf9d4c09b95669cd21cb3252059c374760a33d7ca1b9d72bd13e4c992df486549e3569c97a8680004103ffc138700e6aa9e9f993fa43e1b83a9a2695cae055e98e098313f329652996e5ab4c825749d5369a40f0e57ac95dc78787fc7634891761817a8896d1d3fc172342f9c67ecbabbeaed2117838b2710a1c75e8bb51af2faf2f24358aef29ab8ae17545a067556cd9fcfe745a65c26180764e10a75b1b830b0f689d7d7ffe6e54276e59735e3e7f5926b6257d21fcd8c374cb38e056876cd53b06d35f8c9a7c5725bac9aa8f5320e96094f034c7146525143de88e18784d60db16ee079dbf734208b1782750347e2c2756c0ba74d0d9d76bc6fdf486674c7bc53695a189cc3b2650cede46fc456ef0c1420bcaaf23942b86bbd389f05bf556af1511a467356cb6a4066bd78ff156b5ea80558c96f380341d2d0d71bc7810c305a8b9b82e6bb602c88989384f6252e0ea5c17450b3eecfb7a4e5308ef895059939c0a3ca3fb7f67c5f6c916030d39787f0af891f5e8b35e7b1a03839fbb84beb23fe90b9ce333854fb37fb211fdc46ce891b11aa48c4c58c6b18c17a2c3eec2a9ba3f03212a989c0ed845e6db3cf089f90640f0153f8d964b97171bbfafb0796985ecf5862d530a9e999b97605e5420c36392954e92dac6f3bfdd2c2b36f0fe79d96ab0f7afce17fb7b6c87229fac4663f927b53e28bc6ce2a9d6fcef7579c394cb2a9633cb339d86d1817bd26705a4ada48d8ba912859015c8d8338718021c9f0d1959dad1c737022d0829908fdd86ed6714a678cc75c09076d58f63572d44fbdc7cfc22996ab14d78d5b22ed608882309d0e4f847ee166b48b91e23db21f02ce4157daed860a82dcc53ef3036e9f397003db403cfccada46f14cdac67ab7ee248757f21f639b74e3c4283820a656eb8463a2ced552dcdabe57e5017fb8bdde00c94ea7fce2321f41343e36187fa89039a9fb9dc7ef220140b4e8a6ff29e8204719d12c40146b0d9456d85d76b5e6f4b8afe15a807377f707744fd46800d734508ee81cefa2dcc4c495044818800fdecee33c083592044561c12b7a2b59abbbf016697a39c8cd3db4c2d252b6ece9079ca485c931c8ea858cfc1e8033f3c40ab81040a262579bb4adf735796b7f162b18f31d06e4006eb74eaab1091edf0a8adcb7eb255fc1e8e7218ae35b3e183449bcc96e1dd0c60c6784b7d5c297b51ddbec8bb5ab1336e4ed5498fa56392cbf34228aeb49142f3e753f156443b358d9918b8b4a4f9707660a40036a4bef31d85ff37c51c72a23a46e45bbe0f0ba2dd6b17720e58989367e647251dbdc27adc663a075190296cc99d70571c236cb1d19e150dd743a54be6b816ed214197a96b1d8cfd03930b776fb1caecc90d415c1a00af34868b08db8c7732e03956eb1afcf6150623931e0b42f47dc860f308704aaaa82bf154fb1bf53f1cabf2fdf4933f83c1fff17bd72132c87ae257ecc4ebe8382666cfde79f6271d41f457324667500fa44e1642acf0fc7d6b280b9e9e87b67b4c2c4039803c580256e171ddb04e245491c570aceb0259013849058dab2da5280fc662daad0099f7a809b74fb33f2fff823c54547d46c37417ad7d06cd65af6af05b7289966889f6046c2af6c418cc7b003d5f3d617f3116e7898faa0bdc4819627c33f7a5dd6377cfba0dece5142af074e85706a086a9c33f00334198e46b095a4f84f0688a04f769c4365c5a56a5689e42c1eb0371f98b173bbacda933184d56027c2599353eadfe1d705b07a6cad256d96173e036a9285cb140415276f8ed02a9f09361313d4707c1abc27b02f95e4547e5ddd3ed4c194a5b3662f0931543f56f12b58d1de21c1dd8782f48134b23c3148c67d5a165979496e1adb243daa50892dfe54ccabd38b6cb6c8d169f75a3597fecc392b070be1e799924834b09d356085d244967e6244d557e30fc79ce2ef24812f5f72bb8e2b769e1ca7eff7fdb8096467a79e6f21e538b0503ceced860fa322be0c99d540ee0bf7cbcd4c4b16a467effb5298ffdb32f85bf438b8f20e3e5f95e00f40693ebb33d06376836e1e9c92043183a1ec58f1cbeb5a6e464e7bd21f90416436c6168e8b0187181e7ffce2152e7bb5b89e2ad9b5dd079c0c6c917852b1eeed7c38c12f9bc1c7c0dd511d2446531fa17482cf04d7a7f02cc3edd22f4544a19f02adead9e23f518845c910e6c2c9b9b29ba9552f66bacce0c5ba0a23109021e3cecdfad08e6d5b98b6223fa5849af854352289887cdfddcb8bf49ffbb3c25edf08fbf3b0127be650d614a2dcf5ad4e7ef87ff8d5a11779dc7c2decbc3578424458c305116a542432cd4a1e485b2169cec1e390ae70e9c2821deff142996e8e36b76646d365f29a39b753a148d3a6bbc2d219fbae0628d3cfaf919532fc72bdac78281260c35136a6120b730ba48d40b118dfe3be57a7cc966883674261d84b05f0d92dd3c89c5731c93cfd808a4829a8ecd5275c503b6ec8a4e52fffb7080593a9c90ca272af7ec5608e02b83b912b4bc4b4b4bcd0798f18028d586caab6be270b11b5bf080cc07f7273827627954b29405124871c4704f7f39c53f512e079f0d1345bc8eb13955f114a8f6a4bd3e9b536b9acdca8941ed6046347ac3b9cd8fcbfc7a7549c81f4043b19c5ca9abcf872f3dc6c70cbcea3977f6cf9f75b528b8c52b9139e880746820dd06d42ae60d114227984e298ec48a66780865090219fc3e51a5dd91c8bc5e7c0c8407a6f98c25be28af2b2892ec4033111893947a0e0e6cadefbe3479871077f4cc7f6b8ceb6542ada6ce8b8a661fd43f4fa978cd4ecb26da70a5a5d744fbb8e663b70a6c880ea7511be658419d8431e4f4ba1a34955c37d2cc333541c08ba14ba8997efb35b9d9285fc05fe66e736b76fcd614d1ca16bb5026fe88d33f01287212aeb71db3a5f13640280aa627a06ceed46a20669fa81f056e0b089a4602376ef7e68248e96318efb0d10a6f2afa2cba2c3e21b39c066edf8e8489d6f54fc2722878e005b3d4c7e8ecc7ffb8dadb8f20d480b0e3b5cfb1fdeb64eaf1c56e8609052bbc014042736a8e97a5855e80c3c18f47dd2d0439fe11d4a1350f485ffc8a6250bea8976d4e56ea3d9b8fa5750dc5fc3f33dcd78ca57d53b042e707e9a18d4ee7ee6951fd865c2b49cfac174ed356c09fc6efb130f182fecd63cdcd82e48623d55b9f6a3ad96fd557b4420f76dab7fa8d5de35ff3750bbe424581e528f97c0971f485e0b27dd79dbca5b27ecb74caaec8509ac5fd3c5a5e6bf57350dfa422a7a71ef8ecdb94b99c1c79059ca59", 0x1000}, {&(0x7f0000001340)="8bc3bde12a394137ca1d02944443cc6ed0ea3011e75718b331ebf76d0409a6ef3671292140fb9b9e80c024b71031cd5bfe734785851aa2b5b9c12d88578a7f8f3144be83485d334ed58bbc0d202b748370a15a649d4d4365d396b4144984b385659b3a", 0x63}], 0x3, 0x0, 0x0, 0x810}, 0x0) 01:12:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, 0x0, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1063.425672][T26022] binder: 26013:26022 ioctl 40046207 0 returned -16 01:12:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='erspan0\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = getuid() fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dsp\x00', 0x10000, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000640)={0x3, r5}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x2, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3f}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(/wlan1^'}}, {@subj_type={'subj_type', 0x3d, 'cgroupkeyring'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_user={'subj_user', 0x3d, '/dev/dsp#\x00'}}, {@audit='audit'}, {@subj_user={'subj_user', 0x3d, 'GPLvmnet1'}}]}}) r6 = request_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0xfffffffffffffffe) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() keyctl$chown(0x4, r6, r7, r8) syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x2, 0x8000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x81, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r9, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{r10, r11/1000+30000}, {r12, r13/1000+30000}}, 0x100) 01:12:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c00000000000000, 0x0}) [ 1063.476066][T26033] binder: 26032:26033 unknown command 858874641 [ 1063.498539][T26033] binder: 26032:26033 ioctl c0306201 20000200 returned -22 01:12:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8030, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x50, 0x0, &(0x7f0000000180)=[@exit_looper, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x38, 0x18, &(0x7f0000000100)=[@fda={0x66646185, 0x5, 0x0, 0x13}, @flat={0x77622a85, 0x1, r2, 0x4}], &(0x7f0000000140)=[0x30, 0x40, 0x40]}, 0x4}}], 0xfffffffffffffd71, 0x0, 0x0}) [ 1063.662015][T26247] binder: BINDER_SET_CONTEXT_MGR already set 01:12:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x0) syz_open_pts(r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) 01:12:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) truncate(0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(0x0, 0x0) [ 1063.713175][T26247] binder: 26231:26247 ioctl 40046207 0 returned -16 [ 1063.757784][T26315] binder: 26301:26315 got reply transaction with no transaction stack 01:12:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000000000000, 0x0}) 01:12:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x2e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1063.806272][T26315] binder: 26301:26315 ioctl c0306201 20000080 returned -14 01:12:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1063.961562][T26479] binder: BINDER_SET_CONTEXT_MGR already set [ 1064.028638][T26479] binder: 26381:26479 ioctl 40046207 0 returned -16 01:12:19 executing program 3: socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x2) pipe(&(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'vcan0\x00', 0x1}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000340)={0x38}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xffffff35) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 01:12:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, 0x0, 0x0) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6800000000000000, 0x0}) 01:12:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x20) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "4b3ccba6e219ce4da6f2526f2d77003c0bfba151"}, 0x15, 0x3) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:12:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7ffed) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x204) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000280)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b19eeb299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000017700000000000000000e0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffff62404000000000000000000000000000000000000000000000000000000000000000000000000000000000e90000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) [ 1064.340190][T26881] binder: BINDER_SET_CONTEXT_MGR already set [ 1064.365247][T26881] binder: 26763:26881 ioctl 40046207 0 returned -16 01:12:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x3e, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) poll(&(0x7f0000000000)=[{r0, 0x2200}, {r0, 0x100}, {r0, 0x80}, {r0, 0x100}, {r0}], 0x5, 0x457) [ 1064.407793][T27005] binder: 27004:27005 ioctl 40087602 20000000 returned -22 01:12:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c00000000000000, 0x0}) 01:12:20 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x6000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000000000000000000000d1f28173d2cf585f000000000000000000000000000000"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) 01:12:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1064.556129][T27071] binder_alloc_new_buf_locked: 13 callbacks suppressed [ 1064.556137][T27071] binder_alloc: 27037: binder_alloc_buf, no vma 01:12:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x32e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@host}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:12:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000080)={0x7, 0x3fc, 0xdb1f, 0x4f15}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:20 executing program 3: socket(0x1f, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001640)='TIPCv2\x00') creat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'vcan0\x00', 0x1}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000340)={0x38}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xffffff35) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 1064.743821][T27071] binder: BINDER_SET_CONTEXT_MGR already set [ 1064.743847][T27250] binder_alloc: 27037: binder_alloc_buf, no vma [ 1064.812195][T27071] binder: 27037:27071 ioctl 40046207 0 returned -16 [ 1064.819030][ T7769] binder_release_work: 31 callbacks suppressed [ 1064.819037][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1064.819156][T27248] binder: BINDER_SET_CONTEXT_MGR already set 01:12:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7400000000000000, 0x0}) 01:12:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)) [ 1064.855947][T27248] binder: 27233:27248 ioctl 40046207 0 returned -16 [ 1064.862968][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 01:12:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x370}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x3, 0x87f}) [ 1064.975691][T27517] binder_alloc: 27475: binder_alloc_buf, no vma [ 1065.024918][T27564] binder: BINDER_SET_CONTEXT_MGR already set 01:12:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) lseek(r0, 0x0, 0x7) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x8ef) r2 = shmget$private(0x0, 0x3000, 0x7800100c, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/185) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1065.083471][T27565] binder_alloc: 27475: binder_alloc_buf, no vma [ 1065.083628][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1065.096448][T27565] binder_transaction: 27 callbacks suppressed [ 1065.096466][T27565] binder: 27475:27565 transaction failed 29189/-3, size 0-0 line 3147 01:12:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = accept4(r0, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80, 0x80800) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000000c0)=0x9d, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1065.155637][T27681] binder: BINDER_SET_CONTEXT_MGR already set [ 1065.161750][T27564] binder: 27475:27564 ioctl 40046207 0 returned -16 [ 1065.178130][T27681] binder: 27672:27681 ioctl 40046207 0 returned -16 [ 1065.185611][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1065.195144][T27681] binder: 27672:27681 transaction failed 29189/-22, size 0-0 line 2994 01:12:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a00000000000000, 0x0}) 01:12:21 executing program 3: geteuid() geteuid() lstat(0x0, &(0x7f0000000980)) socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000004b80)='TIPC\x00') lstat(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x20000000000001fd, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) sched_getscheduler(0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 01:12:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3, 0x2, 0x3, 0x86}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="114348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 1065.383965][T27936] binder_alloc: 27935: binder_alloc_buf, no vma [ 1065.423207][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 01:12:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) [ 1065.454227][T27936] binder: 27935:27936 transaction failed 29189/-3, size 0-0 line 3147 01:12:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1065.495173][T27936] binder: BINDER_SET_CONTEXT_MGR already set [ 1065.550790][T27936] binder: 27935:27936 ioctl 40046207 0 returned -16 [ 1065.557487][T27977] binder: BINDER_SET_CONTEXT_MGR already set [ 1065.578739][T27976] binder_alloc: 27935: binder_alloc_buf, no vma [ 1065.578776][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1065.585473][T27977] binder: 27973:27977 ioctl 40046207 0 returned -16 [ 1065.611626][T27976] binder: 27935:27976 transaction failed 29189/-3, size 0-0 line 3147 [ 1065.624710][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 01:12:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0}) 01:12:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x101}, {r1, 0x98}, {r0, 0x40}], 0x3, &(0x7f00000000c0)={r2, r3+10000000}, &(0x7f0000000100)={0x5}, 0x8) 01:12:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:12:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1065.833774][T28292] binder_alloc: 28290: binder_alloc_buf, no vma [ 1065.858354][ C0] net_ratelimit: 26 callbacks suppressed [ 1065.858362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1065.858392][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1065.864069][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:12:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1065.869899][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1065.875601][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1065.881296][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1065.886982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1065.915382][T28296] binder: BINDER_SET_CONTEXT_MGR already set [ 1065.956151][T28292] binder: 28290:28292 transaction failed 29189/-3, size 0-0 line 3147 [ 1065.980533][T28296] binder: 28295:28296 ioctl 40046207 0 returned -16 01:12:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x02\xd8\x02') getdents(r0, &(0x7f0000000000)=""/239, 0x23) getdents(r0, 0x0, 0x0) [ 1066.016721][T28292] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.038800][T28292] binder: 28290:28292 ioctl 40046207 0 returned -16 [ 1066.067098][T28326] binder_alloc: 28290: binder_alloc_buf, no vma [ 1066.072559][ T7769] binder: undelivered TRANSACTION_ERROR: 29189 [ 1066.092431][T28326] binder: 28290:28326 transaction failed 29189/-3, size 0-0 line 3147 01:12:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x10f640) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x64b, 0x0, 0x4}, {0x294, 0x0, 0xbd9a}]}) 01:12:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) exit(0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x7, 0x100000}) [ 1066.125904][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 01:12:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3000000, 0x30, r1, 0x17) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:22 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) read(r1, &(0x7f0000000780)=""/166, 0xa6) [ 1066.239978][T28609] binder_alloc: 28570: binder_alloc_buf, no vma [ 1066.256378][T28609] binder: 28570:28609 transaction failed 29189/-3, size 0-0 line 3147 [ 1066.285761][T28609] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.298031][T28609] binder: 28570:28609 ioctl 40046207 0 returned -16 [ 1066.305446][T28692] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.339427][T28692] binder: 28690:28692 ioctl 40046207 0 returned -16 [ 1066.346174][T28683] binder_alloc: 28570: binder_alloc_buf, no vma [ 1066.356179][ T6208] binder: undelivered TRANSACTION_ERROR: 29189 [ 1066.364710][T28683] binder: 28570:28683 transaction failed 29189/-3, size 0-0 line 3147 [ 1066.390093][T28731] [ 1066.392430][T28731] ====================================================== [ 1066.399437][T28731] WARNING: possible circular locking dependency detected [ 1066.406463][T28731] 5.0.0-rc7-next-20190225 #42 Not tainted [ 1066.412168][T28731] ------------------------------------------------------ [ 1066.419178][T28731] syz-executor.3/28731 is trying to acquire lock: [ 1066.425589][T28731] 000000004a6b065b (&pipe->mutex/1){+.+.}, at: fifo_open+0x159/0xb00 [ 1066.433676][T28731] 01:12:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840000000000000000000e26135a1b38498e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000534ab91ba9dd23ffe2dda23b88bca18038f09bca4c9cbc0de6778227e2138de6b3adff7005786fb832d7bead54fcf8b7"], 0x0, 0x0, 0x0}) [ 1066.433676][T28731] but task is already holding lock: [ 1066.440049][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1066.441036][T28731] 0000000012d36a74 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0 [ 1066.448140][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1066.458153][T28731] [ 1066.458153][T28731] which lock already depends on the new lock. [ 1066.458153][T28731] [ 1066.458157][T28731] [ 1066.458157][T28731] the existing dependency chain (in reverse order) is: [ 1066.458161][T28731] [ 1066.458161][T28731] -> #2 (&sig->cred_guard_mutex){+.+.}: [ 1066.458199][T28731] __mutex_lock+0xf7/0x1310 [ 1066.458212][T28731] mutex_lock_killable_nested+0x16/0x20 [ 1066.458243][T28731] lock_trace+0x4a/0xe0 [ 1066.458269][T28731] proc_pid_stack+0x13e/0x2c0 [ 1066.482142][T28836] binder: 28835:28836 transaction failed 29189/-3, size 0-0 line 3147 [ 1066.487764][T28731] proc_single_show+0xf6/0x170 [ 1066.487777][T28731] seq_read+0x4db/0x1130 [ 1066.487796][T28731] do_iter_read+0x4a9/0x660 01:12:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) epoll_create1(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1066.500564][T28836] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.506601][T28731] vfs_readv+0xf0/0x160 [ 1066.506614][T28731] do_preadv+0x1c4/0x280 [ 1066.506635][T28731] __x64_sys_preadv+0x9a/0xf0 [ 1066.513609][T28838] binder: 28835:28838 transaction failed 29189/-3, size 0-0 line 3147 [ 1066.516480][T28731] do_syscall_64+0x103/0x610 [ 1066.516506][T28731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.516519][T28731] [ 1066.516519][T28731] -> #1 (&p->lock){+.+.}: 01:12:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000080)=""/191) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1066.525009][T28836] binder: 28835:28836 ioctl 40046207 0 returned -16 [ 1066.529946][T28731] __mutex_lock+0xf7/0x1310 [ 1066.529959][T28731] mutex_lock_nested+0x16/0x20 [ 1066.529984][T28731] seq_read+0x71/0x1130 [ 1066.529995][T28731] proc_reg_read+0x1fe/0x2c0 [ 1066.530007][T28731] do_iter_read+0x4a9/0x660 [ 1066.530019][T28731] vfs_readv+0xf0/0x160 [ 1066.530092][T28731] default_file_splice_read+0x475/0x890 [ 1066.574851][T28841] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.580016][T28731] do_splice_to+0x12a/0x190 [ 1066.580028][T28731] do_splice+0xf85/0x1260 [ 1066.580039][T28731] __x64_sys_splice+0x2c6/0x330 [ 1066.580052][T28731] do_syscall_64+0x103/0x610 [ 1066.580064][T28731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.580075][T28731] [ 1066.580075][T28731] -> #0 (&pipe->mutex/1){+.+.}: [ 1066.586624][T28841] binder: 28839:28841 ioctl 40046207 0 returned -16 [ 1066.593135][T28731] lock_acquire+0x16f/0x3f0 [ 1066.593147][T28731] __mutex_lock+0xf7/0x1310 [ 1066.593159][T28731] mutex_lock_nested+0x16/0x20 [ 1066.593171][T28731] fifo_open+0x159/0xb00 [ 1066.593182][T28731] do_dentry_open+0x488/0x1160 [ 1066.593192][T28731] vfs_open+0xa0/0xd0 [ 1066.593209][T28731] path_openat+0x10e9/0x46e0 [ 1066.615343][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1066.618257][T28731] do_filp_open+0x1a1/0x280 [ 1066.618271][T28731] do_open_execat+0x137/0x690 [ 1066.618284][T28731] __do_execve_file.isra.0+0x178d/0x23f0 [ 1066.618297][T28731] __x64_sys_execve+0x8f/0xc0 01:12:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000010000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 1066.618310][T28731] do_syscall_64+0x103/0x610 [ 1066.618322][T28731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.618334][T28731] [ 1066.618334][T28731] other info that might help us debug this: [ 1066.618334][T28731] [ 1066.625407][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1066.629034][T28731] Chain exists of: [ 1066.629034][T28731] &pipe->mutex/1 --> &p->lock --> &sig->cred_guard_mutex [ 1066.629034][T28731] [ 1066.629053][T28731] Possible unsafe locking scenario: [ 1066.629053][T28731] 01:12:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80000, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0xbd9, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@v1={0x2, "13d7f31847cb488372c1"}, 0xb, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x300, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'vxcan1\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 1066.629057][T28731] CPU0 CPU1 [ 1066.629060][T28731] ---- ---- [ 1066.629062][T28731] lock(&sig->cred_guard_mutex); [ 1066.629084][T28731] lock(&p->lock); [ 1066.658330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.661737][T28731] lock(&sig->cred_guard_mutex); [ 1066.668790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.675297][T28731] lock(&pipe->mutex/1); [ 1066.680384][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.685301][T28731] [ 1066.685301][T28731] *** DEADLOCK *** [ 1066.685301][T28731] [ 1066.685316][T28731] 1 lock held by syz-executor.3/28731: [ 1066.706883][T28844] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.710173][T28731] #0: 0000000012d36a74 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0 [ 1066.710203][T28731] [ 1066.710203][T28731] stack backtrace: [ 1066.710218][T28731] CPU: 1 PID: 28731 Comm: syz-executor.3 Not tainted 5.0.0-rc7-next-20190225 #42 [ 1066.710241][T28731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.710245][T28731] Call Trace: [ 1066.710277][T28731] dump_stack+0x172/0x1f0 [ 1066.710313][T28731] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 1066.710333][T28731] __lock_acquire+0x2fca/0x4710 [ 1066.720329][T28844] binder: 28843:28844 ioctl 40046207 0 returned -16 [ 1066.722464][T28731] ? kasan_check_read+0x11/0x20 [ 1066.722483][T28731] ? mark_held_locks+0xf0/0xf0 [ 1066.722505][T28731] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1066.769388][T28847] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.770849][T28731] ? kasan_kmalloc+0x9/0x10 [ 1066.770863][T28731] ? __kmalloc+0x15c/0x740 [ 1066.770878][T28731] ? vfs_open+0xa0/0xd0 [ 1066.770898][T28731] ? path_openat+0x10e9/0x46e0 [ 1066.786504][T28847] binder: 28846:28847 ioctl 40046207 0 returned -16 [ 1066.791378][T28731] ? do_filp_open+0x1a1/0x280 [ 1066.791392][T28731] ? do_open_execat+0x137/0x690 [ 1066.791406][T28731] ? __do_execve_file.isra.0+0x178d/0x23f0 [ 1066.791419][T28731] ? __x64_sys_execve+0x8f/0xc0 [ 1066.791432][T28731] ? do_syscall_64+0x103/0x610 [ 1066.791452][T28731] lock_acquire+0x16f/0x3f0 [ 1066.813853][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1066.819185][T28731] ? fifo_open+0x159/0xb00 [ 1066.819201][T28731] ? fifo_open+0x159/0xb00 [ 1066.819214][T28731] __mutex_lock+0xf7/0x1310 [ 1066.819228][T28731] ? fifo_open+0x159/0xb00 [ 1066.819240][T28731] ? lock_downgrade+0x880/0x880 [ 1066.819255][T28731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.819274][T28731] ? fifo_open+0x159/0xb00 [ 1066.830551][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1066.832505][T28731] ? fifo_open+0x2b5/0xb00 [ 1066.873324][T28852] binder: BINDER_SET_CONTEXT_MGR already set [ 1066.878628][T28731] ? mutex_trylock+0x1e0/0x1e0 [ 1066.878644][T28731] ? fifo_open+0x2b5/0xb00 [ 1066.878661][T28731] ? kasan_check_write+0x14/0x20 [ 1066.878676][T28731] ? lock_downgrade+0x880/0x880 [ 1066.878697][T28731] mutex_lock_nested+0x16/0x20 [ 1066.887865][T28852] binder: 28850:28852 ioctl 40046207 0 returned -16 [ 1066.897835][T28731] ? mutex_lock_nested+0x16/0x20 [ 1066.897852][T28731] fifo_open+0x159/0xb00 [ 1066.897866][T28731] do_dentry_open+0x488/0x1160 [ 1066.897879][T28731] ? pipe_release+0x280/0x280 [ 1066.897893][T28731] ? chown_common+0x5c0/0x5c0 [ 1066.897904][T28731] ? inode_permission+0xb4/0x570 [ 1066.897917][T28731] vfs_open+0xa0/0xd0 [ 1066.897929][T28731] path_openat+0x10e9/0x46e0 [ 1066.897953][T28731] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1066.923964][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1066.927835][T28731] ? __kmalloc+0x15c/0x740 [ 1066.927865][T28731] ? prepare_creds+0x2f5/0x3f0 [ 1066.934125][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1066.938400][T28731] ? prepare_exec_creds+0x12/0xf0 [ 1066.938417][T28731] ? __do_execve_file.isra.0+0x393/0x23f0 [ 1066.938431][T28731] ? do_syscall_64+0x103/0x610 [ 1066.938459][T28731] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.938476][T28731] do_filp_open+0x1a1/0x280 [ 1066.938496][T28731] ? mark_held_locks+0xf0/0xf0 [ 1067.187916][T28731] ? may_open_dev+0x100/0x100 [ 1067.192586][T28731] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1067.198383][T28731] do_open_execat+0x137/0x690 [ 1067.203056][T28731] ? unregister_binfmt+0x170/0x170 [ 1067.208156][T28731] ? lock_downgrade+0x880/0x880 [ 1067.212983][T28731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.219211][T28731] ? kasan_check_read+0x11/0x20 [ 1067.224056][T28731] ? do_raw_spin_unlock+0x57/0x270 [ 1067.229147][T28731] __do_execve_file.isra.0+0x178d/0x23f0 [ 1067.234770][T28731] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1067.240496][T28731] ? copy_strings_kernel+0x110/0x110 [ 1067.245778][T28731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.251992][T28731] ? getname_flags+0x277/0x5b0 [ 1067.256752][T28731] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.262794][T28731] __x64_sys_execve+0x8f/0xc0 [ 1067.267450][T28731] do_syscall_64+0x103/0x610 [ 1067.272018][T28731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.277896][T28731] RIP: 0033:0x457e29 [ 1067.281764][T28731] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1067.301363][T28731] RSP: 002b:00007f0194f6fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1067.309747][T28731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1067.317692][T28731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 1067.325652][T28731] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1067.333599][T28731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0194f706d4 01:12:23 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0x3, 0x1f, 0xc18e, 0x6, [], [], [], 0x2, 0x0, 0x3f, 0xfffffffffffffffd, "0223521f3cdfa9d8819203b0af204fa0"}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fsetxattr(r1, &(0x7f0000000240)=@random={'user.', '/dev/dlm-control\x00'}, &(0x7f0000000280)=')userem1\x00', 0x9, 0x3) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x48200, 0x0) 01:12:23 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x10001, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1067.341545][T28731] R13: 00000000004be413 R14: 00000000004ced00 R15: 00000000ffffffff [ 1067.351490][ T3875] kobject: 'loop4' (00000000ceee0f28): kobject_uevent_env [ 1067.359586][ T3875] kobject: 'loop4' (00000000ceee0f28): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1067.392254][T28958] binder: 28957:28958 got new transaction with bad transaction stack, transaction 7788 has target 28957:0 [ 1067.398626][ T3875] kobject: 'loop1' (000000006bb95454): kobject_uevent_env [ 1067.423944][ T3875] kobject: 'loop1' (000000006bb95454): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1067.434217][T28960] binder: BINDER_SET_CONTEXT_MGR already set 01:12:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:12:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000004c0)=r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/11, 0xb) r3 = dup2(r2, r0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) dup2(r4, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) [ 1067.440554][T28960] binder: 28959:28960 ioctl 40046207 0 returned -16 [ 1067.454758][ T3875] kobject: 'loop2' (0000000079fbce2f): kobject_uevent_env [ 1067.469179][T28960] binder: 28959:28960 got new transaction with bad transaction stack, transaction 7790 has target 28957:0 [ 1067.483561][ T3875] kobject: 'loop2' (0000000079fbce2f): fill_kobj_path: path = '/devices/virtual/block/loop2' 01:12:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1067.503732][ T3875] kobject: 'loop5' (0000000053d3a765): kobject_uevent_env [ 1067.517746][T28960] binder: BINDER_SET_CONTEXT_MGR already set [ 1067.525303][ T3875] kobject: 'loop5' (0000000053d3a765): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1067.539155][T29018] binder: 28959:29018 got new transaction with bad transaction stack, transaction 7792 has target 28957:0 01:12:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634879ef9da0859a70bdf2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010100000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 1067.563411][ T3875] kobject: 'loop3' (00000000658e1cbe): kobject_uevent_env [ 1067.572386][T28960] binder: 28959:28960 ioctl 40046207 0 returned -16 [ 1067.581794][ T3875] kobject: 'loop3' (00000000658e1cbe): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1067.591250][ T7769] binder: send failed reply for transaction 7788 to 28957:28958 01:12:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000000c0)={0x1, {0x0, 0x1c9c380}, 0x3, 0xfffffffffffff408}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) 01:12:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000)="c66738a9516c921033088527ab8357e548ef721ac8427a02daae54815f211805b1d1b088be771966e0f115be2d127a8ca68a398835c71c09e8e2f7f1fb150896", 0x40, r1}, 0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:23 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/11, 0xfc2c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) creat(&(0x7f0000000100)='./file1\x00', 0x1) r2 = dup2(r0, r1) execve(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, 0x0) [ 1067.608864][ T7769] binder: send failed reply for transaction 7790 to 28959:28960 [ 1067.611877][ T3875] kobject: 'loop1' (000000006bb95454): kobject_uevent_env [ 1067.635010][ T7769] binder: send failed reply for transaction 7792 to 28959:29018 [ 1067.644923][T29280] binder: 29278:29280 unknown command 2034787089 01:12:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1067.685955][ T3875] kobject: 'loop1' (000000006bb95454): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1067.702492][T29280] binder: 29278:29280 ioctl c0306201 20000200 returned -22 [ 1067.705129][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1067.710727][T29298] binder: BINDER_SET_CONTEXT_MGR already set 01:12:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xc02}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1067.735650][ T3875] kobject: 'loop4' (00000000ceee0f28): kobject_uevent_env [ 1067.760966][ T3875] kobject: 'loop4' (00000000ceee0f28): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1067.769306][T29298] binder: 29284:29298 ioctl 40046207 0 returned -16 [ 1067.771326][ T7769] binder: undelivered TRANSACTION_COMPLETE 01:12:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x1ff, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) [ 1067.816444][ T7769] binder: undelivered TRANSACTION_COMPLETE [ 1067.830622][T29395] binder: 29284:29395 got new transaction with bad transaction stack, transaction 7795 has target 29278:0 [ 1067.834743][ T3875] kobject: 'loop2' (0000000079fbce2f): kobject_uevent_env 01:12:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x32000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) 01:12:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x9813}) write(r1, 0x0, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1) dup2(r0, r2) r3 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x15) [ 1067.889785][ T3875] kobject: 'loop2' (0000000079fbce2f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1067.918408][ T6208] binder: send failed reply for transaction 7795 to 29284:29395 [ 1067.933953][ T6208] binder: undelivered TRANSACTION_COMPLETE 01:12:23 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x40000800000002, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, &(0x7f0000000180)=""/116, 0x74, 0x61}, 0x62}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000500)=""/242, 0xf2}], 0x4, &(0x7f0000000640)=""/33, 0x21, 0x2}, 0x7ff}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/174, 0xae}], 0x1, &(0x7f0000000800)=""/4096, 0x1000, 0x2}, 0x2}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/124, 0x7c}, {&(0x7f0000001980)=""/7, 0x7}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/13, 0xd}], 0x6, 0x0, 0x0, 0x3f}, 0xd8d}], 0x4, 0x2003, &(0x7f0000001c80)={r1, r2+10000000}) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) socketpair(0x4, 0x800, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x10000008912, &(0x7f0000001d80)="0a5cc804000000e8ffffff") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x26cccdd171dc4ff0, r3, 0x0) dup(r3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001f80)=@req={0x10000, 0x401, 0x8cba, 0x5}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001ec0)=@req3={0x7, 0x7fff, 0x7ff, 0x3, 0x80000000, 0x88, 0x8001}, 0x170) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x5, 0xbe4feb735e76d526) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r7, 0x94d) fcntl$addseals(r7, 0x409, 0x4) r8 = getpid() ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000001cc0)=r8) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r3, 0x1) [ 1067.938823][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1067.960449][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1067.976243][T29600] kobject: 'vlan0' (000000000376e240): kobject_add_internal: parent: 'net', set: 'devices' 01:12:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1068.005002][ T3875] kobject: 'loop1' (000000006bb95454): kobject_uevent_env [ 1068.027390][ T3875] kobject: 'loop1' (000000006bb95454): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1068.037883][T29600] kobject: 'vlan0' (000000000376e240): kobject_uevent_env [ 1068.047142][T29627] binder: BINDER_SET_CONTEXT_MGR already set 01:12:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1068.061462][T29627] binder: 29614:29627 ioctl 40046207 0 returned -16 [ 1068.064379][T29600] kobject: 'vlan0' (000000000376e240): fill_kobj_path: path = '/devices/virtual/net/vlan0' [ 1068.070650][ T3875] kobject: 'loop5' (0000000053d3a765): kobject_uevent_env [ 1068.116403][ T3875] kobject: 'loop5' (0000000053d3a765): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1068.120547][T29600] kobject: 'queues' (000000004e7ae862): kobject_add_internal: parent: 'vlan0', set: '' 01:12:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000700)=""/4096) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x3, @sdr={0xa0363159, 0x4f3}}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 1068.156649][ T3875] kobject: 'loop2' (0000000079fbce2f): kobject_uevent_env [ 1068.171666][T29600] kobject: 'queues' (000000004e7ae862): kobject_uevent_env [ 1068.189237][T29600] kobject: 'queues' (000000004e7ae862): kobject_uevent_env: filter function caused the event to drop! [ 1068.190996][ T3875] kobject: 'loop2' (0000000079fbce2f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1068.216225][T29600] kobject: 'rx-0' (00000000dadffbb4): kobject_add_internal: parent: 'queues', set: 'queues' [ 1068.245585][T29600] kobject: 'rx-0' (00000000dadffbb4): kobject_uevent_env 01:12:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="090048400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 1068.256583][ T3875] kobject: 'loop2' (0000000079fbce2f): kobject_uevent_env [ 1068.268473][T29600] kobject: 'rx-0' (00000000dadffbb4): fill_kobj_path: path = '/devices/virtual/net/vlan0/queues/rx-0' [ 1068.271656][ T3875] kobject: 'loop2' (0000000079fbce2f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1068.308501][T29600] kobject: 'tx-0' (000000002d1da615): kobject_add_internal: parent: 'queues', set: 'queues' [ 1068.321440][ T3875] kobject: 'loop4' (00000000ceee0f28): kobject_uevent_env [ 1068.332188][T29600] kobject: 'tx-0' (000000002d1da615): kobject_uevent_env [ 1068.332922][T29918] binder: 29917:29918 unknown command 1078460425 [ 1068.347176][T29600] kobject: 'tx-0' (000000002d1da615): fill_kobj_path: path = '/devices/virtual/net/vlan0/queues/tx-0' [ 1068.352987][ T3875] kobject: 'loop4' (00000000ceee0f28): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1068.374672][T29918] binder: 29917:29918 ioctl c0306201 20000200 returned -22 01:12:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1068.399951][T29918] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.411248][ T3875] kobject: 'loop3' (00000000658e1cbe): kobject_uevent_env [ 1068.439975][T29919] binder: 29917:29919 unknown command 1078460425 01:12:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1068.457307][ T3875] kobject: 'loop3' (00000000658e1cbe): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1068.471216][T29600] kobject: 'rx-0' (00000000dadffbb4): kobject_cleanup, parent 000000004e7ae862 [ 1068.484431][T29918] binder: 29917:29918 ioctl 40046207 0 returned -16 [ 1068.513922][T29919] binder: 29917:29919 ioctl c0306201 20000200 returned -22 [ 1068.518924][T29600] kobject: 'rx-0' (00000000dadffbb4): auto cleanup 'remove' event [ 1068.527077][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1068.548327][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:12:24 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x40000800000002, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, &(0x7f0000000180)=""/116, 0x74, 0x61}, 0x62}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000500)=""/242, 0xf2}], 0x4, &(0x7f0000000640)=""/33, 0x21, 0x2}, 0x7ff}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/174, 0xae}], 0x1, &(0x7f0000000800)=""/4096, 0x1000, 0x2}, 0x2}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/124, 0x7c}, {&(0x7f0000001980)=""/7, 0x7}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/13, 0xd}], 0x6, 0x0, 0x0, 0x3f}, 0xd8d}], 0x4, 0x2003, &(0x7f0000001c80)={r1, r2+10000000}) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) socketpair(0x4, 0x800, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x10000008912, &(0x7f0000001d80)="0a5cc804000000e8ffffff") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x26cccdd171dc4ff0, r3, 0x0) dup(r3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001f80)=@req={0x10000, 0x401, 0x8cba, 0x5}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001ec0)=@req3={0x7, 0x7fff, 0x7ff, 0x3, 0x80000000, 0x88, 0x8001}, 0x170) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x5, 0xbe4feb735e76d526) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r7, 0x94d) fcntl$addseals(r7, 0x409, 0x4) r8 = getpid() ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000001cc0)=r8) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r3, 0x1) 01:12:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x2200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x0, 0x5, 0x8}}, 0x28) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000180)={{0x5, @addr=0x6}, 0x8, 0x10000, 0x81}) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x323200) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000100)={0x2, 0x4}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="faffffffffffffff000000000000200000000000000000000000000000000000"]) [ 1068.576531][T29600] kobject: 'rx-0' (00000000dadffbb4): kobject_uevent_env [ 1068.586502][T29600] kobject: 'rx-0' (00000000dadffbb4): fill_kobj_path: path = '/devices/virtual/net/vlan0/queues/rx-0' [ 1068.601411][ T3875] kobject: 'loop5' (0000000053d3a765): kobject_uevent_env [ 1068.614906][T29600] kobject: 'rx-0' (00000000dadffbb4): auto cleanup kobject_del [ 1068.631161][ T3875] kobject: 'loop5' (0000000053d3a765): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1068.637059][T29600] kobject: 'rx-0' (00000000dadffbb4): calling ktype release [ 1068.668151][T29600] kobject: 'rx-0': free name [ 1068.679478][T29600] kobject: 'tx-0' (000000002d1da615): kobject_cleanup, parent 000000004e7ae862 [ 1068.680916][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1068.698694][T29600] kobject: 'tx-0' (000000002d1da615): auto cleanup 'remove' event [ 1068.715594][T29600] kobject: 'tx-0' (000000002d1da615): kobject_uevent_env [ 1068.731750][T29600] kobject: 'tx-0' (000000002d1da615): fill_kobj_path: path = '/devices/virtual/net/vlan0/queues/tx-0' [ 1068.734522][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1068.757639][T29600] kobject: 'tx-0' (000000002d1da615): auto cleanup kobject_del [ 1068.774373][T29600] kobject: 'tx-0' (000000002d1da615): calling ktype release [ 1068.785249][ T3875] kobject: 'loop2' (0000000079fbce2f): kobject_uevent_env [ 1068.789610][T29600] kobject: 'tx-0': free name [ 1068.800428][T29600] kobject: 'queues' (000000004e7ae862): kobject_cleanup, parent (null) [ 1068.803559][ T3875] kobject: 'loop2' (0000000079fbce2f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1068.819645][T29600] kobject: 'queues' (000000004e7ae862): calling ktype release [ 1068.835118][T29600] kobject: 'queues' (000000004e7ae862): kset_release [ 1068.843261][ T3875] kobject: 'loop1' (000000006bb95454): kobject_uevent_env [ 1068.850066][T29600] kobject: 'queues': free name [ 1068.859176][T29600] kobject: 'vlan0' (000000000376e240): kobject_uevent_env [ 1068.865730][ T3875] kobject: 'loop1' (000000006bb95454): fill_kobj_path: path = '/devices/virtual/block/loop1' 01:12:24 executing program 0: eventfd(0x5) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x2}]}}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1068.866647][T29600] kobject: 'vlan0' (000000000376e240): fill_kobj_path: path = '/devices/virtual/net/vlan0' [ 1068.892622][ T3875] kobject: 'loop3' (00000000658e1cbe): kobject_uevent_env [ 1068.904958][ T3875] kobject: 'loop3' (00000000658e1cbe): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1068.920308][ T3875] kobject: 'loop5' (0000000053d3a765): kobject_uevent_env [ 1068.927646][ T3875] kobject: 'loop5' (0000000053d3a765): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1068.943775][T30139] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.950071][T30139] binder: 30136:30139 ioctl 40046207 0 returned -16 [ 1068.957912][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1068.969216][T29600] kobject: 'vlan0' (000000000376e240): kobject_cleanup, parent (null) 01:12:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e61b) 01:12:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) 01:12:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x4, [@remote, @empty, @link_local, @random="d404e579b6a4"]}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)={0x80000001}) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='syz0\x00') [ 1068.986907][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1069.001389][T29600] kobject: 'vlan0' (000000000376e240): calling ktype release [ 1069.014586][T29600] kobject: 'vlan0': free name [ 1069.029648][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env 01:12:24 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x40000800000002, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, &(0x7f0000000180)=""/116, 0x74, 0x61}, 0x62}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000500)=""/242, 0xf2}], 0x4, &(0x7f0000000640)=""/33, 0x21, 0x2}, 0x7ff}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/174, 0xae}], 0x1, &(0x7f0000000800)=""/4096, 0x1000, 0x2}, 0x2}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/124, 0x7c}, {&(0x7f0000001980)=""/7, 0x7}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/13, 0xd}], 0x6, 0x0, 0x0, 0x3f}, 0xd8d}], 0x4, 0x2003, &(0x7f0000001c80)={r1, r2+10000000}) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) socketpair(0x4, 0x800, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x10000008912, &(0x7f0000001d80)="0a5cc804000000e8ffffff") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x26cccdd171dc4ff0, r3, 0x0) dup(r3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001f80)=@req={0x10000, 0x401, 0x8cba, 0x5}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001ec0)=@req3={0x7, 0x7fff, 0x7ff, 0x3, 0x80000000, 0x88, 0x8001}, 0x170) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x5, 0xbe4feb735e76d526) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r7, 0x94d) fcntl$addseals(r7, 0x409, 0x4) r8 = getpid() ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000001cc0)=r8) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r3, 0x1) 01:12:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x2e03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1069.057001][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:12:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x3) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1000000010, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x200) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1069.118766][ T3875] kobject: 'loop1' (000000006bb95454): kobject_uevent_env [ 1069.125934][ T3875] kobject: 'loop1' (000000006bb95454): fill_kobj_path: path = '/devices/virtual/block/loop1' 01:12:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x40000800000002, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, &(0x7f0000000180)=""/116, 0x74, 0x61}, 0x62}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000500)=""/242, 0xf2}], 0x4, &(0x7f0000000640)=""/33, 0x21, 0x2}, 0x7ff}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/174, 0xae}], 0x1, &(0x7f0000000800)=""/4096, 0x1000, 0x2}, 0x2}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/124, 0x7c}, {&(0x7f0000001980)=""/7, 0x7}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/13, 0xd}], 0x6, 0x0, 0x0, 0x3f}, 0xd8d}], 0x4, 0x2003, &(0x7f0000001c80)={r1, r2+10000000}) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) socketpair(0x4, 0x800, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x10000008912, &(0x7f0000001d80)="0a5cc804000000e8ffffff") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x26cccdd171dc4ff0, r3, 0x0) dup(r3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001f80)=@req={0x10000, 0x401, 0x8cba, 0x5}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001ec0)=@req3={0x7, 0x7fff, 0x7ff, 0x3, 0x80000000, 0x88, 0x8001}, 0x170) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x5, 0xbe4feb735e76d526) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r7, 0x94d) fcntl$addseals(r7, 0x409, 0x4) r8 = getpid() ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000001cc0)=r8) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r3, 0x1) 01:12:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4400, 0x80) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x11) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1069.184184][T30293] binder: BINDER_SET_CONTEXT_MGR already set [ 1069.190131][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env [ 1069.207027][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1069.222182][T30293] binder: 30275:30293 ioctl 40046207 0 returned -16 01:12:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e61b) [ 1069.224369][ T3875] kobject: 'loop4' (00000000ceee0f28): kobject_uevent_env [ 1069.237642][ T3875] kobject: 'loop4' (00000000ceee0f28): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1069.280959][ T3875] kobject: 'loop3' (00000000658e1cbe): kobject_uevent_env [ 1069.309535][ T3875] kobject: 'loop3' (00000000658e1cbe): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1069.320405][ T3875] kobject: 'loop5' (0000000053d3a765): kobject_uevent_env 01:12:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x6, 0x10000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) r2 = dup2(r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r3, 0x3f}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:12:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x40000800000002, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, &(0x7f0000000180)=""/116, 0x74, 0x61}, 0x62}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000500)=""/242, 0xf2}], 0x4, &(0x7f0000000640)=""/33, 0x21, 0x2}, 0x7ff}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/174, 0xae}], 0x1, &(0x7f0000000800)=""/4096, 0x1000, 0x2}, 0x2}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/124, 0x7c}, {&(0x7f0000001980)=""/7, 0x7}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/13, 0xd}], 0x6, 0x0, 0x0, 0x3f}, 0xd8d}], 0x4, 0x2003, &(0x7f0000001c80)={r1, r2+10000000}) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) socketpair(0x4, 0x800, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001fc0)=ANY=[@ANYBLOB="08000000000000000a004e200700000000000000000000000000007a82913a0000800000000000000000000000000000000000000000000000000100000000000000000001000000000000000000000000000000000000000000000000000000000000000000cf31758cdaca35acdb746c1400000000000000000000000000010000000a004e210900000000000000000000000000000000000000070000000000000000000000006f140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000005e32c81ffa09e8c21a2b39c9c65258f9433162b8025d107f2a2ed8e82aa8d13c53f34853d166086012ab3fe1f584c1efa6af04e01ee233a3702de1cb73b6758038898d72bbebdc38e645cd5d635988f2f1077e4981acbd2d0b866740da7e3406ddd7a68e3e44e632fd476f8a53ed622796a18d5eb8dd87d8715bf8c2d7adb129234880bc88482562ba63cd7c1b294ee5accd9769ca2aabf00b32bc7dd548f3387f86361cff3de3c705002c289500c2ab832c5e50ef2ad1975ef02c5f03f889cf83f0f441c474abf0505c451bf1ff34cf6d5dfc12e5f2e08e115bbd5bb7454b8cccb28ca3f1d99701804e1d1067efd76aff2b9c82c642fb8ec52aff84862bd0054a69cd3710c7b03407519863c70659d044f78fb928bb463a6955b4030fc791b7be2c345973d0f7fb99c1660145a2224ba73d50a0507d14f7d563283d7692c63131b94a1cb900000000c738b443a93563eb55f24dde7684361048ae9926341f9b95ca00fe159b57b1cd3feed7b99fd290ea97533966e4d5b6907029f130ad03923f7a21e01b1ffb6b2c65e1fbffffff15f4636ec2624933e706efdbd1c71621a8229b59221e993a46713c7130948b4f5c6ef106322d5a5a55f40b099793f6a3d70a9e3e617bb6066dc450fe66edc7496c8e91519a1a41d81ad7f24dc4a815a2e5ed991068c937870d898edbb6f52f33409cde078f6337e3a9ebb4ba567f12a8b83b5ae507d089fc90ab1bee722c8eaa11089c12aa1043310eb8b290e20b8833d6b8afccb4a52491659ee4d1e9c729c0bf7aa7edf3a2f807a1d7b0fb33ab1ca7b0ed75aedf483922697ede8d607a48fb6182c668ea50c8227d86b3d64cb409764199739a0e45558579431f76c2ccc10b5d501e86318f91010708759bfcc04e0efeebe2a1d05cea4ee9fc28cae445f8ba7548cdb2959f0853e2f7b76d5d1c3f21394c5861ccd189325db67d054086e7e80ec947198a073a45190991b14b3985b6316c7256d611be6692143c12fe94fc96c30bba33457d84547db8e99bd12a6c5e781c67b69492ca3f7c35f8c1a088f1af8f3ece4688669a9413fc781c3d65f28b308e6981659a350e303f367ae7d0f9bb257c8490a60bde8e3105efcfe80360e74bc791cc36507130c53fdcca"], 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x10000008912, &(0x7f0000001d80)="0a5cc804000000e8ffffff") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x26cccdd171dc4ff0, r3, 0x0) dup(r3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001f80)=@req={0x10000, 0x401, 0x8cba, 0x5}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001ec0)=@req3={0x7, 0x7fff, 0x7ff, 0x3, 0x80000000, 0x88, 0x8001}, 0x170) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x5, 0xbe4feb735e76d526) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r7, 0x94d) fcntl$addseals(r7, 0x409, 0x4) r8 = getpid() ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000001cc0)=r8) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000001}, 0x14) [ 1069.327628][ T3875] kobject: 'loop5' (0000000053d3a765): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1069.365404][ T3875] kobject: 'loop1' (000000006bb95454): kobject_uevent_env 01:12:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0c"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 01:12:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7, 0x10001, 0x2, 0x9, 0x6}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000440)={r4, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, 0x0) [ 1069.373765][ T3875] kobject: 'loop1' (000000006bb95454): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1069.385706][T30473] binder: 30472:30473 got transaction to context manager from process owning it [ 1069.386961][ T3875] kobject: 'loop2' (0000000079fbce2f): kobject_uevent_env [ 1069.402558][ T3875] kobject: 'loop2' (0000000079fbce2f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1069.419821][ T3875] kobject: 'loop3' (00000000658e1cbe): kobject_uevent_env 01:12:25 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, 0x0) 01:12:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3a01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1069.455443][ T3875] kobject: 'loop3' (00000000658e1cbe): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1069.487215][ T3875] kobject: 'loop4' (00000000ceee0f28): kobject_uevent_env 01:12:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e61b) 01:12:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1000000000000000, 0x9, 0x3}) r1 = socket$inet(0x2, 0x5, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @local}], 0x20) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x111000, 0x0) write$smack_current(r2, &(0x7f0000000180)='/dev/binder#\x00', 0xd) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f00000000c0)={0x8, 0xfffffffffffffffa, 0x4, 0x5, 0x10, 0x81}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000040000000000000035aa0000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000634040450000000000000098a7717382edb81ff87a68673b000000000000000000000000000000000000000000000000000000690000f9ffffffffffffff0000000000"], 0x0, 0x0, 0x0}) 01:12:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x40000800000002, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, &(0x7f0000000180)=""/116, 0x74, 0x61}, 0x62}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000500)=""/242, 0xf2}], 0x4, &(0x7f0000000640)=""/33, 0x21, 0x2}, 0x7ff}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/174, 0xae}], 0x1, &(0x7f0000000800)=""/4096, 0x1000, 0x2}, 0x2}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/124, 0x7c}, {&(0x7f0000001980)=""/7, 0x7}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/13, 0xd}], 0x6, 0x0, 0x0, 0x3f}, 0xd8d}], 0x4, 0x2003, &(0x7f0000001c80)={r1, r2+10000000}) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) socketpair(0x4, 0x800, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x10000008912, &(0x7f0000001d80)="0a5cc804000000e8ffffff") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x26cccdd171dc4ff0, r3, 0x0) dup(r3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001f80)=@req={0x10000, 0x401, 0x8cba, 0x5}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001ec0)=@req3={0x7, 0x7fff, 0x7ff, 0x3, 0x80000000, 0x88, 0x8001}, 0x170) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x5, 0xbe4feb735e76d526) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r7, 0x94d) fcntl$addseals(r7, 0x409, 0x4) r8 = getpid() ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000001cc0)=r8) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) [ 1069.503300][ T3875] kobject: 'loop4' (00000000ceee0f28): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1069.538606][ T3875] kobject: 'loop0' (000000007da169dd): kobject_uevent_env 01:12:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd1fd5680672cbc46811a0c"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0x11, r2) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="2a36d47aa70cdb93cc4298000b13818c15bef45e59c50c210f6cd6286fc7ea920d8f779edd997f53b98c7c898b700ca20c821a96ec12677db9629717156ff21d4c974aaf947dc6860951460614be6e896843ca0df1d1890fdeef8441ae936bf601358b72a5a6968c06fa52cac5dbc264da99484508aef343cb611745cf6020503b831be1231c2698816f987974308a50503bb8e9f844d3625b696acff6edcc0daffdea5d7f0476d0874241fb4fbf183999b15a58644e7a9a8bb8601fb644ab392a3bab515f74696db00ff722dcd5e3e288db3cc8279db52fe170c44f600da11cefc53019fc0000000000000000", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16]], 0x8}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'broute\x00'}, &(0x7f0000000000)=0x78) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x7, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000380)='threaded\x00', 0x9) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 1069.548447][ T3875] kobject: 'loop0' (000000007da169dd): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1069.568745][T30692] binder: 30690:30692 ioctl c0185879 20000000 returned -22 [ 1069.576655][ T3875] kobject: 'loop3' (00000000658e1cbe): kobject_uevent_env [ 1069.587116][ T3875] kobject: 'loop3' (00000000658e1cbe): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1069.599822][ T3875] kobject: 'loop2' (0000000079fbce2f): kobject_uevent_env [ 1069.613015][ T3875] kobject: 'loop2' (0000000079fbce2f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1069.631559][T30692] binder_alloc_new_buf_locked: 17 callbacks suppressed [ 1069.631565][T30692] binder_alloc: 30690: binder_alloc_buf, no vma [ 1069.646354][ T3875] kobject: 'loop5' (0000000053d3a765): kobject_uevent_env 01:12:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8e, 0x400000) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x7, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, 0x0) [ 1069.654164][T30692] binder: 30690:30692 ioctl c0185879 20000000 returned -22 [ 1069.664497][ T3875] kobject: 'loop5' (0000000053d3a765): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1069.688020][ T3875] kobject: 'loop4' (00000000ceee0f28): kobject_uevent_env 01:12:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x40000800000002, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1, &(0x7f0000000180)=""/116, 0x74, 0x61}, 0x62}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000500)=""/242, 0xf2}], 0x4, &(0x7f0000000640)=""/33, 0x21, 0x2}, 0x7ff}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/174, 0xae}], 0x1, &(0x7f0000000800)=""/4096, 0x1000, 0x2}, 0x2}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/124, 0x7c}, {&(0x7f0000001980)=""/7, 0x7}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/13, 0xd}], 0x6, 0x0, 0x0, 0x3f}, 0xd8d}], 0x4, 0x2003, &(0x7f0000001c80)={r1, r2+10000000}) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) socketpair(0x4, 0x800, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x10000008912, &(0x7f0000001d80)="0a5cc804000000e8ffffff") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x26cccdd171dc4ff0, r3, 0x0) dup(r3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001f80)=@req={0x10000, 0x401, 0x8cba, 0x5}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001ec0)=@req3={0x7, 0x7fff, 0x7ff, 0x3, 0x80000000, 0x88, 0x8001}, 0x170) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x5, 0xbe4feb735e76d526) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r7, 0x94d) fcntl$addseals(r7, 0x409, 0x4) r8 = getpid() ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000001cc0)=r8) ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 01:12:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:12:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9810abbd511d85443b7fef6ea1e14772b695e006725a270e437d150c36def8976c7d3936b0