02:30:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2615.153899] binder: 24186:24213 transaction failed 29201/-71, size 104-24 line 2922 [ 2615.179052] binder_alloc: 24220: binder_alloc_buf, no vma 02:30:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:09 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2615.179098] binder: 24220:24232 transaction failed 29189/-3, size 0-0 line 3137 [ 2615.272727] binder: 24260:24274 got reply transaction with no transaction stack 02:30:09 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2615.272737] binder: 24260:24274 transaction failed 29201/-71, size 104-24 line 2922 02:30:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2615.296109] binder_alloc: 24282: binder_alloc_buf, no vma [ 2615.296153] binder: 24282:24288 transaction failed 29189/-3, size 0-0 line 3137 [ 2615.425224] binder: 24316:24331 got reply transaction with no transaction stack [ 2615.425233] binder: 24316:24331 transaction failed 29201/-71, size 104-24 line 2922 02:30:09 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:09 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:09 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2615.460775] binder_alloc: 24318: binder_alloc_buf, no vma [ 2615.460822] binder: 24318:24353 transaction failed 29189/-3, size 0-0 line 3137 [ 2615.534630] binder: 24369:24385 got reply transaction with no transaction stack 02:30:09 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2615.534639] binder: 24369:24385 transaction failed 29201/-71, size 104-24 line 2922 [ 2615.600203] binder_alloc: 24420: binder_alloc_buf, no vma [ 2615.600248] binder: 24420:24423 transaction failed 29189/-3, size 0-0 line 3137 [ 2615.701144] binder_alloc: 24440: binder_alloc_buf, no vma 02:30:09 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2615.701188] binder: 24440:24452 transaction failed 29189/-3, size 0-0 line 3137 [ 2615.714738] binder: 24428:24484 got reply transaction with no transaction stack 02:30:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2615.714747] binder: 24428:24484 transaction failed 29201/-71, size 104-24 line 2922 [ 2615.821007] binder_alloc: 24501: binder_alloc_buf, no vma [ 2615.821058] binder: 24501:24516 transaction failed 29189/-3, size 0-0 line 3137 [ 2615.878950] binder: 24547:24550 got reply transaction with no transaction stack [ 2615.878961] binder: 24547:24550 transaction failed 29201/-71, size 104-24 line 2922 02:30:10 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2615.971556] binder: 24582:24604 got reply transaction with no transaction stack [ 2615.971565] binder: 24582:24604 transaction failed 29201/-71, size 104-24 line 2922 [ 2615.985859] binder_alloc: 24602: binder_alloc_buf, no vma 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2615.985904] binder: 24602:24625 transaction failed 29189/-3, size 0-0 line 3137 [ 2616.083953] binder: 24648:24652 got reply transaction with no transaction stack [ 2616.083963] binder: 24648:24652 transaction failed 29201/-71, size 104-24 line 2922 [ 2616.085044] binder_alloc: 24661: binder_alloc_buf, no vma [ 2616.085099] binder: 24661:24672 transaction failed 29189/-3, size 0-0 line 3137 [ 2616.132878] binder: 24687:24689 got reply transaction with no transaction stack 02:30:10 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2616.132887] binder: 24687:24689 transaction failed 29201/-71, size 104-24 line 2922 [ 2616.228371] binder: 24709:24735 got reply transaction with no transaction stack [ 2616.228380] binder: 24709:24735 transaction failed 29201/-71, size 104-24 line 2922 [ 2616.238701] binder_alloc: 24716: binder_alloc_buf, no vma [ 2616.238746] binder: 24716:24742 transaction failed 29189/-3, size 0-0 line 3137 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2616.304244] binder: 24757:24765 got reply transaction with no transaction stack 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.304254] binder: 24757:24765 transaction failed 29201/-71, size 104-24 line 2922 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.367339] binder: 24777:24798 got reply transaction with no transaction stack [ 2616.367349] binder: 24777:24798 transaction failed 29201/-71, size 104-24 line 2922 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.384946] binder_alloc: 24771: binder_alloc_buf, no vma 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.384989] binder: 24771:24808 transaction failed 29189/-3, size 0-0 line 3137 02:30:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2616.508678] binder_alloc: 24828: binder_alloc_buf, no vma [ 2616.508723] binder: 24828:24852 transaction failed 29189/-3, size 0-0 line 3137 [ 2616.509416] binder: 24832:24861 got reply transaction with no transaction stack 02:30:10 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2616.509426] binder: 24832:24861 transaction failed 29201/-71, size 104-24 line 2922 [ 2616.578776] binder_alloc: 24873: binder_alloc_buf, no vma 02:30:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2616.578821] binder: 24873:24885 transaction failed 29189/-3, size 0-0 line 3137 02:30:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.607654] binder: 24904:24921 got reply transaction with no transaction stack 02:30:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.607664] binder: 24904:24921 transaction failed 29201/-71, size 104-24 line 2922 [ 2616.636657] binder_alloc: 24925: binder_alloc_buf, no vma [ 2616.636703] binder: 24925:24929 transaction failed 29189/-3, size 0-0 line 3137 [ 2616.731529] binder_alloc: 24953: binder_alloc_buf, no vma [ 2616.731575] binder: 24953:24961 transaction failed 29189/-3, size 0-0 line 3137 [ 2616.735379] binder: 24946:24981 got reply transaction with no transaction stack 02:30:11 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.735388] binder: 24946:24981 transaction failed 29201/-71, size 104-24 line 2922 [ 2616.848971] binder: 25025:25032 got reply transaction with no transaction stack [ 2616.848981] binder: 25025:25032 transaction failed 29201/-71, size 104-24 line 2922 [ 2616.850235] binder_alloc: 25010: binder_alloc_buf, no vma 02:30:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.850282] binder: 25010:25038 transaction failed 29189/-3, size 0-0 line 3137 [ 2616.977319] binder_alloc: 25077: binder_alloc_buf, no vma [ 2616.977363] binder: 25077:25098 transaction failed 29189/-3, size 0-0 line 3137 02:30:11 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2616.981241] binder: 25080:25108 got reply transaction with no transaction stack [ 2616.981251] binder: 25080:25108 transaction failed 29201/-71, size 104-24 line 2922 [ 2617.091826] binder: 25145:25161 got reply transaction with no transaction stack 02:30:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2617.091836] binder: 25145:25161 transaction failed 29201/-71, size 104-24 line 2922 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2617.097000] binder_alloc: 25143: binder_alloc_buf, no vma [ 2617.097041] binder: 25143:25154 transaction failed 29189/-3, size 0-0 line 3137 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2617.176866] binder: 25191:25205 got reply transaction with no transaction stack [ 2617.176875] binder: 25191:25205 transaction failed 29201/-71, size 104-24 line 2922 [ 2617.255429] binder_alloc: 25234: binder_alloc_buf, no vma 02:30:11 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2617.255471] binder: 25234:25250 transaction failed 29189/-3, size 0-0 line 3137 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2617.257669] binder: 25209:25254 got reply transaction with no transaction stack [ 2617.257678] binder: 25209:25254 transaction failed 29201/-71, size 104-24 line 2922 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2617.371456] binder: 25287:25292 got reply transaction with no transaction stack 02:30:11 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2617.371466] binder: 25287:25292 transaction failed 29201/-71, size 104-24 line 2922 [ 2617.394279] binder_alloc: 25298: binder_alloc_buf, no vma 02:30:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2617.394324] binder: 25298:25314 transaction failed 29189/-3, size 0-0 line 3137 [ 2617.554528] binder_alloc: 25349: binder_alloc_buf, no vma [ 2617.554571] binder: 25349:25365 transaction failed 29189/-3, size 0-0 line 3137 02:30:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2617.557919] binder: 25342:25373 got reply transaction with no transaction stack 02:30:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2617.557938] binder: 25342:25373 transaction failed 29201/-71, size 104-24 line 2922 [ 2617.656952] binder: 25409:25433 got reply transaction with no transaction stack 02:30:12 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2617.656963] binder: 25409:25433 transaction failed 29201/-71, size 104-24 line 2922 [ 2617.678289] binder_alloc: 25440: binder_alloc_buf, no vma [ 2617.678335] binder: 25440:25447 transaction failed 29189/-3, size 0-0 line 3137 02:30:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2617.808056] binder_alloc: 25476: binder_alloc_buf, no vma [ 2617.808101] binder: 25476:25508 transaction failed 29189/-3, size 0-0 line 3137 [ 2617.809514] binder: 25479:25513 got reply transaction with no transaction stack [ 2617.809523] binder: 25479:25513 transaction failed 29201/-71, size 104-24 line 2922 02:30:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2617.896806] binder: 25539:25540 got reply transaction with no transaction stack [ 2617.896816] binder: 25539:25540 transaction failed 29201/-71, size 104-24 line 2922 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2617.953144] binder_alloc: 25586: binder_alloc_buf, no vma [ 2617.953694] binder: 25586:25587 transaction failed 29189/-3, size 0-0 line 3137 02:30:12 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2618.014372] binder: 25581:25592 got reply transaction with no transaction stack [ 2618.014382] binder: 25581:25592 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.059340] binder: 25632:25638 got reply transaction with no transaction stack 02:30:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2618.059350] binder: 25632:25638 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.070037] binder_alloc: 25606: binder_alloc_buf, no vma [ 2618.070077] binder: 25606:25636 transaction failed 29189/-3, size 0-0 line 3137 02:30:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2618.169649] binder: 25652:25675 got reply transaction with no transaction stack [ 2618.169659] binder: 25652:25675 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.212834] binder_alloc: 25677: binder_alloc_buf, no vma 02:30:12 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2618.212878] binder: 25677:25705 transaction failed 29189/-3, size 0-0 line 3137 [ 2618.275755] binder: 25713:25725 got reply transaction with no transaction stack 02:30:12 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2618.275765] binder: 25713:25725 transaction failed 29201/-71, size 104-24 line 2922 02:30:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2618.281422] binder_alloc: 25731: binder_alloc_buf, no vma [ 2618.281465] binder: 25731:25747 transaction failed 29189/-3, size 0-0 line 3137 [ 2618.325699] binder: 25750:25761 got reply transaction with no transaction stack [ 2618.325709] binder: 25750:25761 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.345868] binder_alloc: 25765: binder_alloc_buf, no vma [ 2618.345912] binder: 25765:25780 transaction failed 29189/-3, size 0-0 line 3137 [ 2618.424322] binder: 25805:25813 got reply transaction with no transaction stack [ 2618.424332] binder: 25805:25813 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.455120] binder_alloc: 25823: binder_alloc_buf, no vma [ 2618.455165] binder: 25823:25846 transaction failed 29189/-3, size 0-0 line 3137 02:30:13 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2618.540711] binder: 25854:25860 got reply transaction with no transaction stack [ 2618.540720] binder: 25854:25860 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.585130] binder_alloc: 25867: binder_alloc_buf, no vma [ 2618.585174] binder: 25867:25892 transaction failed 29189/-3, size 0-0 line 3137 [ 2618.659909] binder: 25893:25911 got reply transaction with no transaction stack 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2618.659918] binder: 25893:25911 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.724827] binder: 25956:25967 got reply transaction with no transaction stack 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2618.724836] binder: 25956:25967 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.759509] binder_alloc: 25971: binder_alloc_buf, no vma [ 2618.759554] binder: 25971:25979 transaction failed 29189/-3, size 0-0 line 3137 [ 2618.841168] binder_alloc: 25985: binder_alloc_buf, no vma [ 2618.841213] binder: 25985:26021 transaction failed 29189/-3, size 0-0 line 3137 [ 2618.873458] binder: 26009:26027 got reply transaction with no transaction stack [ 2618.873467] binder: 26009:26027 transaction failed 29201/-71, size 104-24 line 2922 02:30:13 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2618.945220] binder: 26065:26069 got reply transaction with no transaction stack [ 2618.945230] binder: 26065:26069 transaction failed 29201/-71, size 104-24 line 2922 [ 2618.949375] binder_alloc: 26060: binder_alloc_buf, no vma 02:30:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2618.949421] binder: 26060:26072 transaction failed 29189/-3, size 0-0 line 3137 [ 2619.121251] binder: 26096:26123 got reply transaction with no transaction stack [ 2619.121261] binder: 26096:26123 transaction failed 29201/-71, size 104-24 line 2922 [ 2619.126884] binder_alloc: 26112: binder_alloc_buf, no vma 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2619.126929] binder: 26112:26132 transaction failed 29189/-3, size 0-0 line 3137 [ 2619.218840] binder_alloc: 26165: binder_alloc_buf, no vma [ 2619.218885] binder: 26165:26185 transaction failed 29189/-3, size 0-0 line 3137 02:30:13 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2619.273367] binder: 26215:26216 got reply transaction with no transaction stack [ 2619.273375] binder: 26215:26216 transaction failed 29201/-71, size 104-24 line 2922 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2619.403636] binder: 26243:26260 got reply transaction with no transaction stack [ 2619.403645] binder: 26243:26260 transaction failed 29201/-71, size 104-24 line 2922 [ 2619.405112] binder_alloc: 26233: binder_alloc_buf, no vma 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2619.405156] binder: 26233:26259 transaction failed 29189/-3, size 0-0 line 3137 [ 2619.491792] binder_alloc: 26322: binder_alloc_buf, no vma [ 2619.491838] binder: 26322:26337 transaction failed 29189/-3, size 0-0 line 3137 02:30:13 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2619.544276] binder: 26305:26319 got reply transaction with no transaction stack 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2619.544286] binder: 26305:26319 transaction failed 29201/-71, size 104-24 line 2922 [ 2619.606662] binder_alloc: 26362: binder_alloc_buf, no vma 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:13 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2619.606706] binder: 26362:26404 transaction failed 29189/-3, size 0-0 line 3137 [ 2619.685261] binder: 26390:26411 got reply transaction with no transaction stack 02:30:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2619.685270] binder: 26390:26411 transaction failed 29201/-71, size 104-24 line 2922 [ 2619.692288] binder_alloc: 26423: binder_alloc_buf, no vma [ 2619.692333] binder: 26423:26457 transaction failed 29189/-3, size 0-0 line 3137 [ 2619.779962] binder: 26476:26505 got reply transaction with no transaction stack 02:30:14 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2619.779972] binder: 26476:26505 transaction failed 29201/-71, size 104-24 line 2922 [ 2619.885716] binder: 26529:26548 got reply transaction with no transaction stack 02:30:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2619.885726] binder: 26529:26548 transaction failed 29201/-71, size 104-24 line 2922 02:30:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2619.889294] binder_alloc: 26517: binder_alloc_buf, no vma [ 2619.889337] binder: 26517:26560 transaction failed 29189/-3, size 0-0 line 3137 [ 2619.991363] binder_alloc: 26574: binder_alloc_buf, no vma [ 2619.991408] binder: 26574:26583 transaction failed 29189/-3, size 0-0 line 3137 [ 2620.051013] binder_alloc: 26628: binder_alloc_buf, no vma 02:30:14 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2620.051060] binder: 26628:26637 transaction failed 29189/-3, size 0-0 line 3137 [ 2620.111468] binder: 26567:26659 got reply transaction with no transaction stack 02:30:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2620.111478] binder: 26567:26659 transaction failed 29201/-71, size 104-24 line 2922 02:30:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2620.149271] binder_alloc: 26668: binder_alloc_buf, no vma [ 2620.149325] binder: 26668:26678 transaction failed 29189/-3, size 0-0 line 3137 [ 2620.153530] binder: 26673:26688 got reply transaction with no transaction stack [ 2620.153540] binder: 26673:26688 transaction failed 29201/-71, size 104-24 line 2922 02:30:14 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2620.230400] binder_alloc: 26714: binder_alloc_buf, no vma [ 2620.230452] binder: 26714:26719 transaction failed 29189/-3, size 0-0 line 3137 [ 2620.237103] binder: 26696:26728 got reply transaction with no transaction stack [ 2620.237114] binder: 26696:26728 transaction failed 29201/-71, size 104-24 line 2922 02:30:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2620.383409] binder: 26777:26790 got reply transaction with no transaction stack [ 2620.383420] binder: 26777:26790 transaction failed 29201/-71, size 104-24 line 2922 02:30:14 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2620.438548] binder_alloc: 26775: binder_alloc_buf, no vma [ 2620.438593] binder: 26775:26814 transaction failed 29189/-3, size 0-0 line 3137 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2620.507446] binder: 26837:26870 got reply transaction with no transaction stack 02:30:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:14 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2620.507456] binder: 26837:26870 transaction failed 29201/-71, size 104-24 line 2922 [ 2620.535576] binder_alloc: 26868: binder_alloc_buf, no vma [ 2620.535623] binder: 26868:26882 transaction failed 29189/-3, size 0-0 line 3137 02:30:15 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2620.961832] binder: 26927:26929 got reply transaction with no transaction stack [ 2620.961842] binder: 26927:26929 transaction failed 29201/-71, size 104-24 line 2922 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2621.015245] binder_alloc: 26957: binder_alloc_buf, no vma [ 2621.015290] binder: 26957:26965 transaction failed 29189/-3, size 0-0 line 3137 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2621.016911] binder: 26963:26972 got reply transaction with no transaction stack [ 2621.016920] binder: 26963:26972 transaction failed 29201/-71, size 104-24 line 2922 02:30:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2621.090934] binder: 26980:26988 got reply transaction with no transaction stack [ 2621.090943] binder: 26980:26988 transaction failed 29201/-71, size 104-24 line 2922 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2621.100907] binder_alloc: 26995: binder_alloc_buf, no vma 02:30:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2621.100961] binder: 26995:26996 transaction failed 29189/-3, size 0-0 line 3137 [ 2621.155361] binder_alloc: 27011: binder_alloc_buf, no vma [ 2621.155407] binder: 27011:27028 transaction failed 29189/-3, size 0-0 line 3137 [ 2621.169125] binder: 27009:27024 got reply transaction with no transaction stack [ 2621.169137] binder: 27009:27024 transaction failed 29201/-71, size 104-24 line 2922 02:30:15 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2621.254416] binder: 27064:27091 got reply transaction with no transaction stack [ 2621.254424] binder: 27064:27091 transaction failed 29201/-71, size 104-24 line 2922 [ 2621.258465] binder_alloc: 27062: binder_alloc_buf, no vma [ 2621.258510] binder: 27062:27083 transaction failed 29189/-3, size 0-0 line 3137 [ 2621.368905] binder_alloc: 27127: binder_alloc_buf, no vma 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2621.368962] binder: 27127:27135 transaction failed 29189/-3, size 0-0 line 3137 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2621.448822] binder: 27151:27158 got reply transaction with no transaction stack [ 2621.448831] binder: 27151:27158 transaction failed 29201/-71, size 104-24 line 2922 [ 2621.498432] binder_alloc: 27170: binder_alloc_buf, no vma [ 2621.498479] binder: 27170:27177 transaction failed 29189/-3, size 0-0 line 3137 [ 2621.584255] binder: 27201:27215 got reply transaction with no transaction stack [ 2621.584265] binder: 27201:27215 transaction failed 29201/-71, size 104-24 line 2922 02:30:15 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2621.591645] binder_alloc: 27208: binder_alloc_buf, no vma 02:30:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2621.591691] binder: 27208:27229 transaction failed 29189/-3, size 0-0 line 3137 [ 2621.689989] binder_alloc: 27250: binder_alloc_buf, no vma [ 2621.690036] binder: 27250:27264 transaction failed 29189/-3, size 0-0 line 3137 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2621.776340] binder: 27262:27310 got reply transaction with no transaction stack [ 2621.776350] binder: 27262:27310 transaction failed 29201/-71, size 104-24 line 2922 [ 2621.843455] binder: 27324:27330 got reply transaction with no transaction stack 02:30:16 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2621.843465] binder: 27324:27330 transaction failed 29201/-71, size 104-24 line 2922 [ 2621.858655] binder_alloc: 27323: binder_alloc_buf, no vma 02:30:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2621.858700] binder: 27323:27347 transaction failed 29189/-3, size 0-0 line 3137 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2622.009702] binder_alloc: 27413: binder_alloc_buf, no vma 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2622.009819] binder: 27413:27418 transaction failed 29189/-3, size 0-0 line 3137 [ 2622.066098] binder: 27364:27429 got reply transaction with no transaction stack 02:30:16 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2622.066108] binder: 27364:27429 transaction failed 29201/-71, size 104-24 line 2922 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.116588] binder_alloc: 27440: binder_alloc_buf, no vma [ 2622.116633] binder: 27440:27480 transaction failed 29189/-3, size 0-0 line 3137 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.131631] binder: 27481:27489 got reply transaction with no transaction stack [ 2622.131640] binder: 27481:27489 transaction failed 29201/-71, size 104-24 line 2922 02:30:16 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.224181] binder: 27506:27533 got reply transaction with no transaction stack 02:30:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.224191] binder: 27506:27533 transaction failed 29201/-71, size 104-24 line 2922 [ 2622.241358] binder_alloc: 27494: binder_alloc_buf, no vma 02:30:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.241402] binder: 27494:27532 transaction failed 29189/-3, size 0-0 line 3137 [ 2622.351542] binder: 27557:27591 got reply transaction with no transaction stack 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.351550] binder: 27557:27591 transaction failed 29201/-71, size 104-24 line 2922 [ 2622.353844] binder_alloc: 27564: binder_alloc_buf, no vma [ 2622.353889] binder: 27564:27595 transaction failed 29189/-3, size 0-0 line 3137 [ 2622.433153] binder: 27607:27617 got reply transaction with no transaction stack [ 2622.433172] binder: 27607:27617 transaction failed 29201/-71, size 104-24 line 2922 [ 2622.468800] binder_alloc: 27605: binder_alloc_buf, no vma 02:30:16 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:16 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.468845] binder: 27605:27648 transaction failed 29189/-3, size 0-0 line 3137 02:30:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.509426] binder: 27660:27664 got reply transaction with no transaction stack [ 2622.509702] binder: 27660:27664 transaction failed 29201/-71, size 104-24 line 2922 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.666354] binder_alloc: 27687: binder_alloc_buf, no vma [ 2622.666399] binder: 27687:27720 transaction failed 29189/-3, size 0-0 line 3137 [ 2622.688134] binder: 27707:27717 got reply transaction with no transaction stack [ 2622.688143] binder: 27707:27717 transaction failed 29201/-71, size 104-24 line 2922 02:30:17 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.761988] binder: 27767:27768 got reply transaction with no transaction stack [ 2622.761998] binder: 27767:27768 transaction failed 29201/-71, size 104-24 line 2922 [ 2622.809991] binder_alloc: 27733: binder_alloc_buf, no vma [ 2622.810037] binder: 27733:27754 transaction failed 29189/-3, size 0-0 line 3137 [ 2622.903363] binder: 27814:27839 got reply transaction with no transaction stack 02:30:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2622.903373] binder: 27814:27839 transaction failed 29201/-71, size 104-24 line 2922 02:30:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.009675] binder: 27879:27883 got reply transaction with no transaction stack [ 2623.009685] binder: 27879:27883 transaction failed 29201/-71, size 104-24 line 2922 02:30:17 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2623.055688] binder_alloc: 27902: binder_alloc_buf, no vma [ 2623.055735] binder: 27902:27911 transaction failed 29189/-3, size 0-0 line 3137 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2623.066046] binder: 27931:27932 got reply transaction with no transaction stack [ 2623.066056] binder: 27931:27932 transaction failed 29201/-71, size 104-24 line 2922 02:30:17 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2623.161615] binder: 27948:27963 got reply transaction with no transaction stack [ 2623.161625] binder: 27948:27963 transaction failed 29201/-71, size 104-24 line 2922 [ 2623.167801] binder_alloc: 27956: binder_alloc_buf, no vma [ 2623.167847] binder: 27956:27982 transaction failed 29189/-3, size 0-0 line 3137 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.264250] binder: 27993:28013 got reply transaction with no transaction stack 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.264260] binder: 27993:28013 transaction failed 29201/-71, size 104-24 line 2922 02:30:17 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.289237] binder_alloc: 28021: binder_alloc_buf, no vma [ 2623.289284] binder: 28021:28042 transaction failed 29189/-3, size 0-0 line 3137 02:30:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.334017] binder: 28052:28055 got reply transaction with no transaction stack 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.334026] binder: 28052:28055 transaction failed 29201/-71, size 104-24 line 2922 [ 2623.400015] binder_alloc: 28057: binder_alloc_buf, no vma 02:30:18 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2623.400060] binder: 28057:28070 transaction failed 29189/-3, size 0-0 line 3137 [ 2623.404208] binder: 28068:28079 got reply transaction with no transaction stack 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2623.404217] binder: 28068:28079 transaction failed 29201/-71, size 104-24 line 2922 [ 2623.464405] binder_alloc: 28093: binder_alloc_buf, no vma [ 2623.464460] binder: 28093:28105 transaction failed 29189/-3, size 0-0 line 3137 02:30:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.522970] binder: 28122:28136 got reply transaction with no transaction stack [ 2623.522979] binder: 28122:28136 transaction failed 29201/-71, size 104-24 line 2922 02:30:18 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.536701] binder_alloc: 28126: binder_alloc_buf, no vma [ 2623.536745] binder: 28126:28142 transaction failed 29189/-3, size 0-0 line 3137 [ 2623.655135] binder: 28196:28214 got reply transaction with no transaction stack [ 2623.655145] binder: 28196:28214 transaction failed 29201/-71, size 104-24 line 2922 [ 2623.660950] binder_alloc: 28203: binder_alloc_buf, no vma [ 2623.660994] binder: 28203:28216 transaction failed 29189/-3, size 0-0 line 3137 02:30:18 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2623.750893] binder: 28245:28273 got reply transaction with no transaction stack [ 2623.750903] binder: 28245:28273 transaction failed 29201/-71, size 104-24 line 2922 02:30:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2623.759756] binder_alloc: 28279: binder_alloc_buf, no vma [ 2623.759801] binder: 28279:28282 transaction failed 29189/-3, size 0-0 line 3137 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2623.811027] binder: 28302:28317 got reply transaction with no transaction stack [ 2623.811036] binder: 28302:28317 transaction failed 29201/-71, size 104-24 line 2922 [ 2623.916757] binder: 28356:28369 got reply transaction with no transaction stack [ 2623.916767] binder: 28356:28369 transaction failed 29201/-71, size 104-24 line 2922 [ 2623.922730] binder_alloc: 28335: binder_alloc_buf, no vma [ 2623.922773] binder: 28335:28383 transaction failed 29189/-3, size 0-0 line 3137 02:30:18 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2624.020604] binder_alloc: 28403: binder_alloc_buf, no vma [ 2624.020648] binder: 28403:28411 transaction failed 29189/-3, size 0-0 line 3137 [ 2624.025577] binder: 28409:28429 got reply transaction with no transaction stack 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2624.025585] binder: 28409:28429 transaction failed 29201/-71, size 104-24 line 2922 [ 2624.159398] binder_alloc: 28463: binder_alloc_buf, no vma [ 2624.159441] binder: 28463:28478 transaction failed 29189/-3, size 0-0 line 3137 [ 2624.170783] binder: 28465:28499 got reply transaction with no transaction stack 02:30:18 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:18 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2624.170792] binder: 28465:28499 transaction failed 29201/-71, size 104-24 line 2922 [ 2624.247967] binder: 28510:28512 transaction failed 29189/-22, size 0-0 line 3014 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2624.290553] binder_alloc: 28555: binder_alloc_buf, no vma [ 2624.290598] binder: 28555:28589 transaction failed 29189/-3, size 0-0 line 3137 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2624.301456] binder: 28554:28586 got reply transaction with no transaction stack [ 2624.301466] binder: 28554:28586 transaction failed 29201/-71, size 104-24 line 2922 [ 2624.411316] binder_alloc: 28603: binder_alloc_buf, no vma 02:30:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2624.411361] binder: 28603:28618 transaction failed 29189/-3, size 0-0 line 3137 [ 2624.436519] binder: 28604:28625 got reply transaction with no transaction stack 02:30:19 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:19 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2624.436529] binder: 28604:28625 transaction failed 29201/-71, size 104-24 line 2922 [ 2624.505249] binder: 28654:28661 got reply transaction with no transaction stack [ 2624.505259] binder: 28654:28661 transaction failed 29201/-71, size 104-24 line 2922 [ 2624.528156] binder_alloc: 28657: binder_alloc_buf, no vma [ 2624.528206] binder: 28657:28663 transaction failed 29189/-3, size 0-0 line 3137 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2624.587205] binder: 28689:28695 got reply transaction with no transaction stack [ 2624.587214] binder: 28689:28695 transaction failed 29201/-71, size 104-24 line 2922 02:30:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2624.686262] binder: 28724:28749 got reply transaction with no transaction stack [ 2624.686273] binder: 28724:28749 transaction failed 29201/-71, size 104-24 line 2922 [ 2624.695186] binder_alloc: 28709: binder_alloc_buf, no vma 02:30:19 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2624.695212] binder: 28709:28747 transaction failed 29189/-3, size 0-0 line 3137 [ 2624.767037] binder_alloc: 28793: binder_alloc_buf, no vma 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2624.767081] binder: 28793:28797 transaction failed 29189/-3, size 0-0 line 3137 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2624.817000] binder_alloc: 28817: binder_alloc_buf, no vma [ 2624.817044] binder: 28817:28830 transaction failed 29189/-3, size 0-0 line 3137 02:30:19 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:19 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2624.822804] binder: 28822:28839 got reply transaction with no transaction stack [ 2624.822814] binder: 28822:28839 transaction failed 29201/-71, size 104-24 line 2922 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2624.949035] binder: 28865:28872 got reply transaction with no transaction stack [ 2624.949044] binder: 28865:28872 transaction failed 29201/-71, size 104-24 line 2922 02:30:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:19 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2624.954695] binder_alloc: 28859: binder_alloc_buf, no vma [ 2624.954738] binder: 28859:28874 transaction failed 29189/-3, size 0-0 line 3137 [ 2625.055132] binder: 28898:28903 got reply transaction with no transaction stack 02:30:20 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2625.055142] binder: 28898:28903 transaction failed 29201/-71, size 104-24 line 2922 [ 2625.136505] binder_alloc: 28926: binder_alloc_buf, no vma [ 2625.136549] binder: 28926:28938 transaction failed 29189/-3, size 0-0 line 3137 [ 2625.154758] binder: 28939:28944 got reply transaction with no transaction stack [ 2625.154824] binder: 28939:28944 transaction failed 29201/-71, size 104-24 line 2922 02:30:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2625.264427] binder: 28998:29005 got reply transaction with no transaction stack [ 2625.264436] binder: 28998:29005 transaction failed 29201/-71, size 104-24 line 2922 02:30:20 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2625.278752] binder_alloc: 28999: binder_alloc_buf, no vma [ 2625.278797] binder: 28999:29016 transaction failed 29189/-3, size 0-0 line 3137 [ 2625.381089] binder_alloc: 29056: binder_alloc_buf, no vma [ 2625.381134] binder: 29056:29064 transaction failed 29189/-3, size 0-0 line 3137 [ 2625.424333] binder: 29071:29075 got reply transaction with no transaction stack [ 2625.424342] binder: 29071:29075 transaction failed 29201/-71, size 104-24 line 2922 [ 2625.557335] binder_alloc: 29113: binder_alloc_buf, no vma [ 2625.557381] binder: 29113:29143 transaction failed 29189/-3, size 0-0 line 3137 02:30:20 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2625.587950] binder: 29106:29146 got reply transaction with no transaction stack [ 2625.587961] binder: 29106:29146 transaction failed 29201/-71, size 104-24 line 2922 [ 2625.624745] binder: 29157:29164 got reply transaction with no transaction stack 02:30:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2625.624755] binder: 29157:29164 transaction failed 29201/-71, size 104-24 line 2922 02:30:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2625.666929] binder_alloc: 29165: binder_alloc_buf, no vma [ 2625.666986] binder: 29165:29188 transaction failed 29189/-3, size 0-0 line 3137 [ 2625.670382] binder: 29193:29197 got reply transaction with no transaction stack 02:30:20 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2625.670391] binder: 29193:29197 transaction failed 29201/-71, size 104-24 line 2922 [ 2625.792512] binder: 29208:29219 got reply transaction with no transaction stack [ 2625.792523] binder: 29208:29219 transaction failed 29201/-71, size 104-24 line 2922 02:30:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:20 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2625.827448] binder: 29210:29224 transaction failed 29189/-22, size 0-0 line 3014 [ 2625.853218] binder: 29253:29278 got reply transaction with no transaction stack [ 2625.853227] binder: 29253:29278 transaction failed 29201/-71, size 104-24 line 2922 02:30:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2625.880137] binder_alloc: 29272: binder_alloc_buf, no vma [ 2625.880182] binder: 29272:29283 transaction failed 29189/-3, size 0-0 line 3137 [ 2625.923556] binder: 29294:29305 got reply transaction with no transaction stack [ 2625.923565] binder: 29294:29305 transaction failed 29201/-71, size 104-24 line 2922 [ 2625.991970] binder_alloc: 29321: binder_alloc_buf, no vma [ 2625.992015] binder: 29321:29334 transaction failed 29189/-3, size 0-0 line 3137 [ 2626.021716] binder: 29344:29372 got reply transaction with no transaction stack 02:30:20 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2626.021725] binder: 29344:29372 transaction failed 29201/-71, size 104-24 line 2922 [ 2626.125428] binder: 29412:29420 got reply transaction with no transaction stack [ 2626.125453] binder: 29412:29420 transaction failed 29201/-71, size 104-24 line 2922 [ 2626.162675] binder_alloc: 29385: binder_alloc_buf, no vma [ 2626.162720] binder: 29385:29401 transaction failed 29189/-3, size 0-0 line 3137 [ 2626.178913] binder: 29450:29454 got reply transaction with no transaction stack [ 2626.178919] binder: 29450:29454 transaction failed 29201/-71, size 104-24 line 2922 [ 2626.316705] binder_alloc: 29496: binder_alloc_buf, no vma [ 2626.316750] binder: 29496:29502 transaction failed 29189/-3, size 0-0 line 3137 [ 2626.321991] binder: 29501:29503 got reply transaction with no transaction stack [ 2626.322000] binder: 29501:29503 transaction failed 29201/-71, size 104-24 line 2922 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2626.419039] binder_alloc: 29544: binder_alloc_buf, no vma [ 2626.419088] binder: 29544:29568 transaction failed 29189/-3, size 0-0 line 3137 [ 2626.449046] binder: 29577:29607 got reply transaction with no transaction stack 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2626.449057] binder: 29577:29607 transaction failed 29201/-71, size 104-24 line 2922 [ 2626.547949] binder_alloc: 29628: binder_alloc_buf, no vma 02:30:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2626.547994] binder: 29628:29645 transaction failed 29189/-3, size 0-0 line 3137 [ 2626.640311] binder_alloc: 29665: binder_alloc_buf, no vma 02:30:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2626.640357] binder: 29665:29672 transaction failed 29189/-3, size 0-0 line 3137 02:30:21 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2626.732966] binder: 29635:29714 got reply transaction with no transaction stack [ 2626.732976] binder: 29635:29714 transaction failed 29201/-71, size 104-24 line 2922 [ 2626.748054] binder_alloc: 29722: binder_alloc_buf, no vma 02:30:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2626.748099] binder: 29722:29728 transaction failed 29189/-3, size 0-0 line 3137 02:30:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2626.829490] binder: 29757:29767 got reply transaction with no transaction stack 02:30:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2626.829500] binder: 29757:29767 transaction failed 29201/-71, size 104-24 line 2922 [ 2626.868964] binder_alloc: 29750: binder_alloc_buf, no vma 02:30:21 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2626.869019] binder: 29750:29770 transaction failed 29189/-3, size 0-0 line 3137 [ 2626.872752] binder: 29774:29786 got reply transaction with no transaction stack [ 2626.872762] binder: 29774:29786 transaction failed 29201/-71, size 104-24 line 2922 02:30:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2626.995068] binder_alloc: 29840: binder_alloc_buf, no vma [ 2626.995114] binder: 29840:29847 transaction failed 29189/-3, size 0-0 line 3137 02:30:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.101163] binder: 29884:29885 got reply transaction with no transaction stack [ 2627.101174] binder: 29884:29885 transaction failed 29201/-71, size 104-24 line 2922 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.115664] binder_alloc: 29865: binder_alloc_buf, no vma [ 2627.115711] binder: 29865:29896 transaction failed 29189/-3, size 0-0 line 3137 02:30:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.212347] binder: 29918:29950 got reply transaction with no transaction stack [ 2627.212356] binder: 29918:29950 transaction failed 29201/-71, size 104-24 line 2922 [ 2627.223954] binder_alloc: 29933: binder_alloc_buf, no vma [ 2627.224000] binder: 29933:29947 transaction failed 29189/-3, size 0-0 line 3137 02:30:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.339590] binder: 29986:29991 got reply transaction with no transaction stack [ 2627.339600] binder: 29986:29991 transaction failed 29201/-71, size 104-24 line 2922 02:30:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.346140] binder_alloc: 29996: binder_alloc_buf, no vma [ 2627.346185] binder: 29996:30004 transaction failed 29189/-3, size 0-0 line 3137 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.465765] binder_alloc: 30030: binder_alloc_buf, no vma [ 2627.465813] binder: 30030:30066 transaction failed 29189/-3, size 0-0 line 3137 02:30:22 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.501353] binder: 30082:30089 got reply transaction with no transaction stack [ 2627.501363] binder: 30082:30089 transaction failed 29201/-71, size 104-24 line 2922 02:30:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.517751] binder_alloc: 30095: binder_alloc_buf, no vma 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.517796] binder: 30095:30106 transaction failed 29189/-3, size 0-0 line 3137 [ 2627.601214] binder_alloc: 30130: binder_alloc_buf, no vma [ 2627.601258] binder: 30130:30132 transaction failed 29189/-3, size 0-0 line 3137 [ 2627.616891] binder: 30128:30144 got reply transaction with no transaction stack [ 2627.616901] binder: 30128:30144 transaction failed 29201/-71, size 104-24 line 2922 [ 2627.712942] binder: 30165:30181 got reply transaction with no transaction stack [ 2627.712951] binder: 30165:30181 transaction failed 29201/-71, size 104-24 line 2922 [ 2627.743000] binder_alloc: 30206: binder_alloc_buf, no vma [ 2627.743046] binder: 30206:30208 transaction failed 29189/-3, size 0-0 line 3137 [ 2627.779204] binder: 30223:30228 got reply transaction with no transaction stack 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2627.779214] binder: 30223:30228 transaction failed 29201/-71, size 104-24 line 2922 [ 2627.854137] binder: 30238:30246 got reply transaction with no transaction stack [ 2627.854147] binder: 30238:30246 transaction failed 29201/-71, size 104-24 line 2922 [ 2627.882804] binder_alloc: 30234: binder_alloc_buf, no vma [ 2627.882848] binder: 30234:30239 transaction failed 29189/-3, size 0-0 line 3137 02:30:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2627.972415] binder: 30279:30294 got reply transaction with no transaction stack 02:30:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2627.972425] binder: 30279:30294 transaction failed 29201/-71, size 104-24 line 2922 [ 2627.981679] binder_alloc: 30280: binder_alloc_buf, no vma [ 2627.981722] binder: 30280:30299 transaction failed 29189/-3, size 0-0 line 3137 02:30:22 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2628.039572] binder_alloc: 30334: binder_alloc_buf, no vma [ 2628.039617] binder: 30334:30344 transaction failed 29189/-3, size 0-0 line 3137 [ 2628.240424] binder_alloc: 30382: binder_alloc_buf, no vma [ 2628.240470] binder: 30382:30397 transaction failed 29189/-3, size 0-0 line 3137 02:30:23 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2628.258913] binder: 30364:30415 got reply transaction with no transaction stack [ 2628.258923] binder: 30364:30415 transaction failed 29201/-71, size 104-24 line 2922 [ 2628.361575] binder_alloc: 30449: binder_alloc_buf, no vma [ 2628.361620] binder: 30449:30459 transaction failed 29189/-3, size 0-0 line 3137 [ 2628.391203] binder: 30474:30504 got reply transaction with no transaction stack 02:30:23 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2628.391212] binder: 30474:30504 transaction failed 29201/-71, size 104-24 line 2922 [ 2628.485545] binder_alloc: 30516: binder_alloc_buf, no vma [ 2628.485588] binder: 30516:30528 transaction failed 29189/-3, size 0-0 line 3137 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2628.487526] binder: 30526:30536 got reply transaction with no transaction stack [ 2628.487535] binder: 30526:30536 transaction failed 29201/-71, size 104-24 line 2922 [ 2628.649141] binder_alloc: 30550: binder_alloc_buf, no vma 02:30:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2628.649184] binder: 30550:30597 transaction failed 29189/-3, size 0-0 line 3137 [ 2628.755932] binder: 30631:30639 got reply transaction with no transaction stack [ 2628.755952] binder: 30631:30639 transaction failed 29201/-71, size 104-24 line 2922 02:30:23 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2628.759090] binder_alloc: 30615: binder_alloc_buf, no vma 02:30:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2628.759135] binder: 30615:30640 transaction failed 29189/-3, size 0-0 line 3137 [ 2628.913722] binder_alloc: 30667: binder_alloc_buf, no vma 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2628.913766] binder: 30667:30694 transaction failed 29189/-3, size 0-0 line 3137 02:30:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2628.921135] binder: 30689:30701 got reply transaction with no transaction stack [ 2628.921144] binder: 30689:30701 transaction failed 29201/-71, size 104-24 line 2922 [ 2628.985697] binder_alloc: 30715: binder_alloc_buf, no vma [ 2628.985744] binder: 30715:30721 transaction failed 29189/-3, size 0-0 line 3137 02:30:23 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2629.012336] binder: 30734:30742 got reply transaction with no transaction stack [ 2629.012344] binder: 30734:30742 transaction failed 29201/-71, size 104-24 line 2922 [ 2629.117531] binder: 30773:30781 got reply transaction with no transaction stack 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2629.117540] binder: 30773:30781 transaction failed 29201/-71, size 104-24 line 2922 [ 2629.207991] binder: 30810:30826 got reply transaction with no transaction stack 02:30:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2629.208001] binder: 30810:30826 transaction failed 29201/-71, size 104-24 line 2922 [ 2629.216880] binder_alloc: 30754: binder_alloc_buf, no vma [ 2629.216924] binder: 30754:30825 transaction failed 29189/-3, size 0-0 line 3137 02:30:24 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2629.295664] binder_alloc: 30836: binder_alloc_buf, no vma [ 2629.295710] binder: 30836:30884 transaction failed 29189/-3, size 0-0 line 3137 [ 2629.298395] binder: 30875:30890 got reply transaction with no transaction stack 02:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2629.298404] binder: 30875:30890 transaction failed 29201/-71, size 104-24 line 2922 02:30:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2629.412223] binder: 30927:30943 got reply transaction with no transaction stack [ 2629.412233] binder: 30927:30943 transaction failed 29201/-71, size 104-24 line 2922 [ 2629.500937] binder_alloc: 30921: binder_alloc_buf, no vma [ 2629.501005] binder: 30921:30974 transaction failed 29189/-3, size 0-0 line 3137 02:30:24 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2629.540093] binder: 30990:31002 got reply transaction with no transaction stack [ 2629.540104] binder: 30990:31002 transaction failed 29201/-71, size 104-24 line 2922 [ 2629.620820] binder: 31011:31014 transaction failed 29189/-22, size 0-0 line 3014 [ 2629.647264] binder: 31045:31076 got reply transaction with no transaction stack [ 2629.647274] binder: 31045:31076 transaction failed 29201/-71, size 104-24 line 2922 [ 2629.684221] binder_alloc: 31082: binder_alloc_buf, no vma 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2629.684267] binder: 31082:31089 transaction failed 29189/-3, size 0-0 line 3137 02:30:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2629.799002] binder: 31110:31126 got reply transaction with no transaction stack [ 2629.799012] binder: 31110:31126 transaction failed 29201/-71, size 104-24 line 2922 [ 2629.874323] binder: 31116:31140 transaction failed 29189/-22, size 0-0 line 3014 [ 2629.902944] binder: 31173:31186 got reply transaction with no transaction stack [ 2629.902955] binder: 31173:31186 transaction failed 29201/-71, size 104-24 line 2922 [ 2629.954964] binder_alloc: 31194: binder_alloc_buf, no vma [ 2629.955005] binder: 31194:31196 transaction failed 29189/-3, size 0-0 line 3137 [ 2629.993435] binder: 31197:31200 got reply transaction with no transaction stack 02:30:24 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2629.993445] binder: 31197:31200 transaction failed 29201/-71, size 104-24 line 2922 [ 2630.035218] binder_alloc: 31223: binder_alloc_buf, no vma 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.035264] binder: 31223:31237 transaction failed 29189/-3, size 0-0 line 3137 [ 2630.088523] binder: 31233:31249 got reply transaction with no transaction stack 02:30:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.088533] binder: 31233:31249 transaction failed 29201/-71, size 104-24 line 2922 [ 2630.164209] binder: 31304:31312 got reply transaction with no transaction stack [ 2630.164219] binder: 31304:31312 transaction failed 29201/-71, size 104-24 line 2922 [ 2630.204211] binder_alloc: 31330: binder_alloc_buf, no vma [ 2630.204256] binder: 31330:31333 transaction failed 29189/-3, size 0-0 line 3137 02:30:24 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.283422] binder: 31347:31367 got reply transaction with no transaction stack [ 2630.283431] binder: 31347:31367 transaction failed 29201/-71, size 104-24 line 2922 02:30:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.293763] binder_alloc: 31358: binder_alloc_buf, no vma 02:30:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.293808] binder: 31358:31397 transaction failed 29189/-3, size 0-0 line 3137 02:30:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.390183] binder_alloc: 31425: binder_alloc_buf, no vma [ 2630.390228] binder: 31425:31438 transaction failed 29189/-3, size 0-0 line 3137 02:30:25 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.488616] binder_alloc: 31491: binder_alloc_buf, no vma [ 2630.488662] binder: 31491:31492 transaction failed 29189/-3, size 0-0 line 3137 [ 2630.520206] binder: 31415:31419 got reply transaction with no transaction stack 02:30:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.520215] binder: 31415:31419 transaction failed 29201/-71, size 104-24 line 2922 [ 2630.613283] binder_alloc: 31508: binder_alloc_buf, no vma 02:30:25 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2630.613325] binder: 31508:31526 transaction failed 29189/-3, size 0-0 line 3137 [ 2630.627639] binder: 31523:31545 got reply transaction with no transaction stack [ 2630.627649] binder: 31523:31545 transaction failed 29201/-71, size 104-24 line 2922 [ 2630.678793] binder_alloc: 31569: binder_alloc_buf, no vma [ 2630.678835] binder: 31569:31578 transaction failed 29189/-3, size 0-0 line 3137 [ 2630.685112] binder: 31580:31582 got reply transaction with no transaction stack [ 2630.685121] binder: 31580:31582 transaction failed 29201/-71, size 104-24 line 2922 [ 2630.801776] binder_alloc: 31602: binder_alloc_buf, no vma [ 2630.801821] binder: 31602:31607 transaction failed 29189/-3, size 0-0 line 3137 02:30:25 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2630.809196] binder: 31597:31619 got reply transaction with no transaction stack [ 2630.809206] binder: 31597:31619 transaction failed 29201/-71, size 104-24 line 2922 [ 2630.908926] binder_alloc: 31653: binder_alloc_buf, no vma [ 2630.908981] binder: 31653:31679 transaction failed 29189/-3, size 0-0 line 3137 [ 2630.938401] binder: 31660:31687 got reply transaction with no transaction stack [ 2630.938411] binder: 31660:31687 transaction failed 29201/-71, size 104-24 line 2922 02:30:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2631.107885] binder_alloc: 31732: binder_alloc_buf, no vma [ 2631.107929] binder: 31732:31756 transaction failed 29189/-3, size 0-0 line 3137 [ 2631.139812] binder_alloc: 31773: binder_alloc_buf, no vma 02:30:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2631.139859] binder: 31773:31775 transaction failed 29189/-3, size 0-0 line 3137 [ 2631.195410] binder: 31737:31748 got reply transaction with no transaction stack [ 2631.195419] binder: 31737:31748 transaction failed 29201/-71, size 104-24 line 2922 02:30:25 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2631.220332] binder_alloc: 31804: binder_alloc_buf, no vma [ 2631.220375] binder: 31804:31812 transaction failed 29189/-3, size 0-0 line 3137 [ 2631.255033] binder: 31825:31834 got reply transaction with no transaction stack [ 2631.255044] binder: 31825:31834 transaction failed 29201/-71, size 104-24 line 2922 02:30:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2631.333575] binder_alloc: 31854: binder_alloc_buf, no vma [ 2631.333622] binder: 31854:31857 transaction failed 29189/-3, size 0-0 line 3137 02:30:25 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2631.415973] binder: 31882:31894 got reply transaction with no transaction stack 02:30:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2631.415982] binder: 31882:31894 transaction failed 29201/-71, size 104-24 line 2922 [ 2631.432146] binder_alloc: 31884: binder_alloc_buf, no vma [ 2631.432191] binder: 31884:31910 transaction failed 29189/-3, size 0-0 line 3137 [ 2631.476854] binder: 31930:31940 got reply transaction with no transaction stack [ 2631.476864] binder: 31930:31940 transaction failed 29201/-71, size 104-24 line 2922 02:30:26 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2631.479743] binder_alloc: 31932: binder_alloc_buf, no vma [ 2631.479787] binder: 31932:31943 transaction failed 29189/-3, size 0-0 line 3137 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2631.600168] binder_alloc: 31965: binder_alloc_buf, no vma 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2631.600212] binder: 31965:31977 transaction failed 29189/-3, size 0-0 line 3137 [ 2631.617968] binder: 31970:31991 got reply transaction with no transaction stack [ 2631.617979] binder: 31970:31991 transaction failed 29201/-71, size 104-24 line 2922 02:30:26 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2631.723743] binder_alloc: 32039: binder_alloc_buf, no vma [ 2631.723854] binder: 32039:32051 transaction failed 29189/-3, size 0-0 line 3137 [ 2631.853837] binder_alloc: 32075: binder_alloc_buf, no vma [ 2631.853884] binder: 32075:32103 transaction failed 29189/-3, size 0-0 line 3137 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2631.865485] binder: 32099:32120 got reply transaction with no transaction stack [ 2631.865495] binder: 32099:32120 transaction failed 29201/-71, size 104-24 line 2922 02:30:26 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2632.040128] binder_alloc: 32163: binder_alloc_buf, no vma [ 2632.040172] binder: 32163:32193 transaction failed 29189/-3, size 0-0 line 3137 [ 2632.088391] binder: 32202:32210 got reply transaction with no transaction stack 02:30:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2632.088401] binder: 32202:32210 transaction failed 29201/-71, size 104-24 line 2922 [ 2632.163576] binder_alloc: 32223: binder_alloc_buf, no vma 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2632.163621] binder: 32223:32231 transaction failed 29189/-3, size 0-0 line 3137 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2632.246683] binder_alloc: 32285: binder_alloc_buf, no vma [ 2632.246729] binder: 32285:32303 transaction failed 29189/-3, size 0-0 line 3137 02:30:26 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2632.256984] binder: 32238:32315 got reply transaction with no transaction stack [ 2632.256993] binder: 32238:32315 transaction failed 29201/-71, size 104-24 line 2922 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2632.404892] binder: 32348:32351 got reply transaction with no transaction stack [ 2632.404902] binder: 32348:32351 transaction failed 29201/-71, size 104-24 line 2922 02:30:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2632.410936] binder_alloc: 32349: binder_alloc_buf, no vma 02:30:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2632.410979] binder: 32349:32368 transaction failed 29189/-3, size 0-0 line 3137 [ 2632.472972] binder: 32394:32402 got reply transaction with no transaction stack [ 2632.472982] binder: 32394:32402 transaction failed 29201/-71, size 104-24 line 2922 [ 2632.495059] binder_alloc: 32426: binder_alloc_buf, no vma 02:30:27 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:27 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2632.495104] binder: 32426:32436 transaction failed 29189/-3, size 0-0 line 3137 [ 2632.595969] binder: 32447:32460 got reply transaction with no transaction stack 02:30:27 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2632.595979] binder: 32447:32460 transaction failed 29201/-71, size 104-24 line 2922 [ 2632.627079] binder_alloc: 32453: binder_alloc_buf, no vma [ 2632.627123] binder: 32453:32462 transaction failed 29189/-3, size 0-0 line 3137 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2632.695077] binder: 32505:32529 got reply transaction with no transaction stack [ 2632.695087] binder: 32505:32529 transaction failed 29201/-71, size 104-24 line 2922 [ 2632.697523] binder_alloc: 32514: binder_alloc_buf, no vma [ 2632.697566] binder: 32514:32533 transaction failed 29189/-3, size 0-0 line 3137 02:30:27 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2632.750605] binder: 32547:32558 got reply transaction with no transaction stack [ 2632.750615] binder: 32547:32558 transaction failed 29201/-71, size 104-24 line 2922 [ 2632.782776] binder_alloc: 32566: binder_alloc_buf, no vma [ 2632.782822] binder: 32566:32569 transaction failed 29189/-3, size 0-0 line 3137 02:30:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2632.876475] binder_alloc: 32602: binder_alloc_buf, no vma [ 2632.876519] binder: 32602:32618 transaction failed 29189/-3, size 0-0 line 3137 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2632.882741] binder: 32605:32620 got reply transaction with no transaction stack [ 2632.882751] binder: 32605:32620 transaction failed 29201/-71, size 104-24 line 2922 [ 2632.987750] binder_alloc: 32642: binder_alloc_buf, no vma [ 2632.987795] binder: 32642:32657 transaction failed 29189/-3, size 0-0 line 3137 [ 2633.054471] binder_alloc: 32691: binder_alloc_buf, no vma 02:30:27 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:27 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2633.054516] binder: 32691:32701 transaction failed 29189/-3, size 0-0 line 3137 [ 2633.126955] binder: 32726:32755 got reply transaction with no transaction stack [ 2633.126965] binder: 32726:32755 transaction failed 29201/-71, size 104-24 line 2922 [ 2633.221281] binder_alloc: 358: binder_alloc_buf, no vma [ 2633.221325] binder: 358:370 transaction failed 29189/-3, size 0-0 line 3137 [ 2633.239299] binder: 366:373 got reply transaction with no transaction stack 02:30:27 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2633.239310] binder: 366:373 transaction failed 29201/-71, size 104-24 line 2922 [ 2633.361187] binder: 404:408 got reply transaction with no transaction stack 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2633.361197] binder: 404:408 transaction failed 29201/-71, size 104-24 line 2922 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2633.391501] binder_alloc: 398: binder_alloc_buf, no vma [ 2633.391556] binder: 398:436 transaction failed 29189/-3, size 0-0 line 3137 [ 2633.406767] binder: 440:454 got reply transaction with no transaction stack 02:30:27 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2633.406776] binder: 440:454 transaction failed 29201/-71, size 104-24 line 2922 [ 2633.511692] binder: 504:512 got reply transaction with no transaction stack [ 2633.511702] binder: 504:512 transaction failed 29201/-71, size 104-24 line 2922 02:30:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2633.559596] binder_alloc: 519: binder_alloc_buf, no vma [ 2633.559640] binder: 519:525 transaction failed 29189/-3, size 0-0 line 3137 02:30:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2633.638172] binder: 542:554 got reply transaction with no transaction stack [ 2633.638182] binder: 542:554 transaction failed 29201/-71, size 104-24 line 2922 [ 2633.643712] binder_alloc: 546: binder_alloc_buf, no vma [ 2633.643755] binder: 546:561 transaction failed 29189/-3, size 0-0 line 3137 02:30:28 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2633.718963] binder_alloc: 585: binder_alloc_buf, no vma [ 2633.719008] binder: 585:601 transaction failed 29189/-3, size 0-0 line 3137 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2633.722211] binder: 605:609 got reply transaction with no transaction stack 02:30:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2633.722220] binder: 605:609 transaction failed 29201/-71, size 104-24 line 2922 [ 2633.827359] binder_alloc: 652: binder_alloc_buf, no vma [ 2633.827404] binder: 652:662 transaction failed 29189/-3, size 0-0 line 3137 [ 2633.892364] binder: 663:683 got reply transaction with no transaction stack [ 2633.892373] binder: 663:683 transaction failed 29201/-71, size 104-24 line 2922 [ 2633.920092] binder_alloc: 694: binder_alloc_buf, no vma 02:30:28 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2633.920141] binder: 694:705 transaction failed 29189/-3, size 0-0 line 3137 [ 2633.982506] binder: 708:729 got reply transaction with no transaction stack 02:30:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2633.982515] binder: 708:729 transaction failed 29201/-71, size 104-24 line 2922 [ 2634.050996] binder_alloc: 764: binder_alloc_buf, no vma [ 2634.051042] binder: 764:775 transaction failed 29189/-3, size 0-0 line 3137 [ 2634.056035] binder: 767:777 got reply transaction with no transaction stack 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.056045] binder: 767:777 transaction failed 29201/-71, size 104-24 line 2922 [ 2634.136866] binder: 806:807 got reply transaction with no transaction stack [ 2634.136875] binder: 806:807 transaction failed 29201/-71, size 104-24 line 2922 02:30:28 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.183753] binder_alloc: 796: binder_alloc_buf, no vma [ 2634.183798] binder: 796:829 transaction failed 29189/-3, size 0-0 line 3137 02:30:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2634.264079] binder: 854:867 got reply transaction with no transaction stack 02:30:28 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2634.264089] binder: 854:867 transaction failed 29201/-71, size 104-24 line 2922 [ 2634.315150] binder_alloc: 896: binder_alloc_buf, no vma 02:30:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2634.315196] binder: 896:906 transaction failed 29189/-3, size 0-0 line 3137 [ 2634.418789] binder: 930:938 got reply transaction with no transaction stack 02:30:28 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:28 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2634.418799] binder: 930:938 transaction failed 29201/-71, size 104-24 line 2922 [ 2634.423015] binder_alloc: 935: binder_alloc_buf, no vma 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2634.423060] binder: 935:940 transaction failed 29189/-3, size 0-0 line 3137 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.516683] binder_alloc: 975: binder_alloc_buf, no vma 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.516728] binder: 975:995 transaction failed 29189/-3, size 0-0 line 3137 [ 2634.521993] binder: 991:1005 got reply transaction with no transaction stack 02:30:29 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.522002] binder: 991:1005 transaction failed 29201/-71, size 104-24 line 2922 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.602463] binder_alloc: 1012: binder_alloc_buf, no vma 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.602505] binder: 1012:1028 transaction failed 29189/-3, size 0-0 line 3137 [ 2634.652376] binder: 1053:1074 got reply transaction with no transaction stack [ 2634.652385] binder: 1053:1074 transaction failed 29201/-71, size 104-24 line 2922 [ 2634.751612] binder_alloc: 1064: binder_alloc_buf, no vma [ 2634.751656] binder: 1064:1107 transaction failed 29189/-3, size 0-0 line 3137 02:30:29 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2634.773984] binder: 1087:1093 got reply transaction with no transaction stack [ 2634.773996] binder: 1087:1093 transaction failed 29201/-71, size 104-24 line 2922 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.816371] binder: 1138:1150 got reply transaction with no transaction stack 02:30:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.816381] binder: 1138:1150 transaction failed 29201/-71, size 104-24 line 2922 [ 2634.873060] binder_alloc: 1151: binder_alloc_buf, no vma [ 2634.873105] binder: 1151:1163 transaction failed 29189/-3, size 0-0 line 3137 [ 2634.883129] binder: 1167:1174 got reply transaction with no transaction stack 02:30:29 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.883139] binder: 1167:1174 transaction failed 29201/-71, size 104-24 line 2922 [ 2634.943510] binder_alloc: 1192: binder_alloc_buf, no vma [ 2634.943557] binder: 1192:1206 transaction failed 29189/-3, size 0-0 line 3137 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.983121] binder: 1205:1214 got reply transaction with no transaction stack 02:30:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2634.983131] binder: 1205:1214 transaction failed 29201/-71, size 104-24 line 2922 [ 2635.049701] binder: 1280:1289 got reply transaction with no transaction stack 02:30:29 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2635.049711] binder: 1280:1289 transaction failed 29201/-71, size 104-24 line 2922 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2635.052916] binder_alloc: 1285: binder_alloc_buf, no vma [ 2635.052970] binder: 1285:1295 transaction failed 29189/-3, size 0-0 line 3137 02:30:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2635.166371] binder: 1310:1316 got reply transaction with no transaction stack [ 2635.166381] binder: 1310:1316 transaction failed 29201/-71, size 104-24 line 2922 [ 2635.179616] binder_alloc: 1314: binder_alloc_buf, no vma [ 2635.179661] binder: 1314:1320 transaction failed 29189/-3, size 0-0 line 3137 [ 2635.332196] binder: 1371:1384 got reply transaction with no transaction stack [ 2635.332206] binder: 1371:1384 transaction failed 29201/-71, size 104-24 line 2922 02:30:30 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:30 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2635.345389] binder_alloc: 1357: binder_alloc_buf, no vma [ 2635.345432] binder: 1357:1413 transaction failed 29189/-3, size 0-0 line 3137 02:30:30 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2635.455293] binder: 1428:1449 got reply transaction with no transaction stack 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2635.455301] binder: 1428:1449 transaction failed 29201/-71, size 104-24 line 2922 02:30:30 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2635.456914] binder_alloc: 1431: binder_alloc_buf, no vma [ 2635.456951] binder: 1431:1443 transaction failed 29189/-3, size 0-0 line 3137 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2635.537497] binder: 1480:1504 got reply transaction with no transaction stack 02:30:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2635.537507] binder: 1480:1504 transaction failed 29201/-71, size 104-24 line 2922 [ 2635.562912] binder_alloc: 1486: binder_alloc_buf, no vma [ 2635.563159] binder: 1486:1518 transaction failed 29189/-3, size 0-0 line 3137 [ 2635.623195] binder: 1532:1535 got reply transaction with no transaction stack [ 2635.623204] binder: 1532:1535 transaction failed 29201/-71, size 104-24 line 2922 02:30:30 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2635.700240] binder_alloc: 1549: binder_alloc_buf, no vma [ 2635.702489] binder: 1558:1572 got reply transaction with no transaction stack 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2635.702498] binder: 1558:1572 transaction failed 29201/-71, size 104-24 line 2922 [ 2635.704551] binder: 1549:1568 transaction failed 29189/-3, size 0-0 line 3137 [ 2635.914914] binder_alloc: 1608: binder_alloc_buf, no vma [ 2635.914959] binder: 1608:1619 transaction failed 29189/-3, size 0-0 line 3137 02:30:31 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2636.154170] binder: 1652:1653 got reply transaction with no transaction stack [ 2636.154180] binder: 1652:1653 transaction failed 29201/-71, size 104-24 line 2922 02:30:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2636.233080] binder: 1666:1688 got reply transaction with no transaction stack 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2636.233089] binder: 1666:1688 transaction failed 29201/-71, size 104-24 line 2922 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2636.247747] binder_alloc: 1668: binder_alloc_buf, no vma [ 2636.247791] binder: 1668:1693 transaction failed 29189/-3, size 0-0 line 3137 02:30:31 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 2636.292926] binder: 1726:1737 got reply transaction with no transaction stack [ 2636.292936] binder: 1726:1737 transaction failed 29201/-71, size 104-24 line 2922 [ 2636.315925] binder_alloc: 1736: binder_alloc_buf, no vma [ 2636.315969] binder: 1736:1739 transaction failed 29189/-3, size 0-0 line 3137 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2636.420250] binder: 1765:1776 got reply transaction with no transaction stack 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2636.420259] binder: 1765:1776 transaction failed 29201/-71, size 104-24 line 2922 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2636.426055] binder_alloc: 1770: binder_alloc_buf, no vma 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2636.426100] binder: 1770:1781 transaction failed 29189/-3, size 0-0 line 3137 [ 2636.520212] binder: 1833:1835 got reply transaction with no transaction stack [ 2636.520221] binder: 1833:1835 transaction failed 29201/-71, size 104-24 line 2922 [ 2636.548933] binder_alloc: 1838: binder_alloc_buf, no vma 02:30:31 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2636.548978] binder: 1838:1862 transaction failed 29189/-3, size 0-0 line 3137 [ 2636.598912] binder: 1876:1885 got reply transaction with no transaction stack [ 2636.598921] binder: 1876:1885 transaction failed 29201/-71, size 104-24 line 2922 02:30:31 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2636.730957] binder_alloc: 1908: binder_alloc_buf, no vma [ 2636.731003] binder: 1908:1931 transaction failed 29189/-3, size 0-0 line 3137 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2636.746911] binder: 1901:1953 got reply transaction with no transaction stack [ 2636.746922] binder: 1901:1953 transaction failed 29201/-71, size 104-24 line 2922 [ 2636.810905] binder: 1985:2013 got reply transaction with no transaction stack 02:30:31 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2636.810915] binder: 1985:2013 transaction failed 29201/-71, size 104-24 line 2922 [ 2636.813687] binder_alloc: 1977: binder_alloc_buf, no vma [ 2636.813730] binder: 1977:2008 transaction failed 29189/-3, size 0-0 line 3137 02:30:31 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2636.927837] binder: 2032:2053 got reply transaction with no transaction stack [ 2636.927847] binder: 2032:2053 transaction failed 29201/-71, size 104-24 line 2922 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2637.000958] binder_alloc: 2036: binder_alloc_buf, no vma [ 2637.001004] binder: 2036:2090 transaction failed 29189/-3, size 0-0 line 3137 [ 2637.032824] binder_alloc: 2118: binder_alloc_buf, no vma 02:30:32 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2637.032869] binder: 2118:2144 transaction failed 29189/-3, size 0-0 line 3137 [ 2637.066968] binder: 2093:2150 got reply transaction with no transaction stack 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2637.066977] binder: 2093:2150 transaction failed 29201/-71, size 104-24 line 2922 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2637.210133] binder: 2208:2224 got reply transaction with no transaction stack [ 2637.210144] binder: 2208:2224 transaction failed 29201/-71, size 104-24 line 2922 [ 2637.212449] binder_alloc: 2202: binder_alloc_buf, no vma 02:30:32 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2637.212495] binder: 2202:2233 transaction failed 29189/-3, size 0-0 line 3137 [ 2637.304599] binder_alloc: 2260: binder_alloc_buf, no vma [ 2637.304644] binder: 2260:2275 transaction failed 29189/-3, size 0-0 line 3137 [ 2637.320540] binder: 2273:2295 got reply transaction with no transaction stack 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2637.320550] binder: 2273:2295 transaction failed 29201/-71, size 104-24 line 2922 [ 2637.389884] binder_alloc: 2304: binder_alloc_buf, no vma [ 2637.389933] binder: 2304:2312 transaction failed 29189/-3, size 0-0 line 3137 [ 2637.481074] binder_alloc: 2363: binder_alloc_buf, no vma 02:30:32 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2637.481121] binder: 2363:2381 transaction failed 29189/-3, size 0-0 line 3137 [ 2637.481245] binder: 2353:2382 got reply transaction with no transaction stack 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2637.481253] binder: 2353:2382 transaction failed 29201/-71, size 104-24 line 2922 [ 2637.594904] binder_alloc: 2408: binder_alloc_buf, no vma [ 2637.594949] binder: 2408:2432 transaction failed 29189/-3, size 0-0 line 3137 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2637.612339] binder: 2455:2461 got reply transaction with no transaction stack [ 2637.612348] binder: 2455:2461 transaction failed 29201/-71, size 104-24 line 2922 [ 2637.799658] binder: 2483:2531 got reply transaction with no transaction stack [ 2637.799667] binder: 2483:2531 transaction failed 29201/-71, size 104-24 line 2922 [ 2637.806274] binder_alloc: 2518: binder_alloc_buf, no vma 02:30:32 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2637.806321] binder: 2518:2527 transaction failed 29189/-3, size 0-0 line 3137 [ 2637.905321] binder: 2562:2575 got reply transaction with no transaction stack [ 2637.905330] binder: 2562:2575 transaction failed 29201/-71, size 104-24 line 2922 [ 2637.906367] binder_alloc: 2552: binder_alloc_buf, no vma [ 2637.906411] binder: 2552:2582 transaction failed 29189/-3, size 0-0 line 3137 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2637.956859] binder: 2612:2621 got reply transaction with no transaction stack 02:30:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2637.956869] binder: 2612:2621 transaction failed 29201/-71, size 104-24 line 2922 02:30:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2638.013557] binder_alloc: 2635: binder_alloc_buf, no vma [ 2638.013598] binder: 2635:2646 transaction failed 29189/-3, size 0-0 line 3137 [ 2638.042623] binder: 2637:2653 got reply transaction with no transaction stack [ 2638.042633] binder: 2637:2653 transaction failed 29201/-71, size 104-24 line 2922 [ 2638.168747] binder: 2677:2707 got reply transaction with no transaction stack [ 2638.168757] binder: 2677:2707 transaction failed 29201/-71, size 104-24 line 2922 [ 2638.173119] binder_alloc: 2681: binder_alloc_buf, no vma [ 2638.173165] binder: 2681:2713 transaction failed 29189/-3, size 0-0 line 3137 02:30:33 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2638.288973] binder: 2756:2777 got reply transaction with no transaction stack [ 2638.288982] binder: 2756:2777 transaction failed 29201/-71, size 104-24 line 2922 [ 2638.335124] binder_alloc: 2744: binder_alloc_buf, no vma [ 2638.335170] binder: 2744:2793 transaction failed 29189/-3, size 0-0 line 3137 02:30:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2638.423953] binder: 2816:2841 got reply transaction with no transaction stack [ 2638.423963] binder: 2816:2841 transaction failed 29201/-71, size 104-24 line 2922 02:30:33 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2638.427183] binder_alloc: 2831: binder_alloc_buf, no vma [ 2638.427228] binder: 2831:2844 transaction failed 29189/-3, size 0-0 line 3137 [ 2638.538720] binder_alloc: 2868: binder_alloc_buf, no vma 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2638.538765] binder: 2868:2885 transaction failed 29189/-3, size 0-0 line 3137 [ 2638.548924] binder: 2863:2882 got reply transaction with no transaction stack [ 2638.548934] binder: 2863:2882 transaction failed 29201/-71, size 104-24 line 2922 02:30:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2638.604923] binder: 2900:2926 got reply transaction with no transaction stack [ 2638.604932] binder: 2900:2926 transaction failed 29201/-71, size 104-24 line 2922 02:30:33 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2638.703289] binder: 2959:2966 got reply transaction with no transaction stack [ 2638.703298] binder: 2959:2966 transaction failed 29201/-71, size 104-24 line 2922 02:30:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2638.709457] binder_alloc: 2945: binder_alloc_buf, no vma [ 2638.709501] binder: 2945:2976 transaction failed 29189/-3, size 0-0 line 3137 02:30:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:33 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2638.794611] binder: 2994:3010 got reply transaction with no transaction stack [ 2638.794620] binder: 2994:3010 transaction failed 29201/-71, size 104-24 line 2922 [ 2638.860368] binder_alloc: 3038: binder_alloc_buf, no vma [ 2638.860415] binder: 3038:3044 transaction failed 29189/-3, size 0-0 line 3137 02:30:34 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2638.878745] binder: 3045:3053 got reply transaction with no transaction stack [ 2638.878755] binder: 3045:3053 transaction failed 29201/-71, size 104-24 line 2922 [ 2638.958953] binder_alloc: 3063: binder_alloc_buf, no vma 02:30:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2638.959114] binder: 3063:3080 transaction failed 29189/-3, size 0-0 line 3137 [ 2638.963407] binder: 3070:3091 got reply transaction with no transaction stack [ 2638.963415] binder: 3070:3091 transaction failed 29201/-71, size 104-24 line 2922 [ 2639.011515] binder: 3105:3119 got reply transaction with no transaction stack 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.011525] binder: 3105:3119 transaction failed 29201/-71, size 104-24 line 2922 02:30:34 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.022472] binder_alloc: 3103: binder_alloc_buf, no vma [ 2639.022518] binder: 3103:3112 transaction failed 29189/-3, size 0-0 line 3137 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2639.122439] binder: 3148:3152 got reply transaction with no transaction stack 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.122456] binder: 3148:3152 transaction failed 29201/-71, size 104-24 line 2922 [ 2639.216078] binder: 3190:3198 got reply transaction with no transaction stack [ 2639.216088] binder: 3190:3198 transaction failed 29201/-71, size 104-24 line 2922 [ 2639.287849] binder_alloc: 3187: binder_alloc_buf, no vma [ 2639.287895] binder: 3187:3230 transaction failed 29189/-3, size 0-0 line 3137 [ 2639.344004] binder: 3246:3266 got reply transaction with no transaction stack 02:30:34 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.344012] binder: 3246:3266 transaction failed 29201/-71, size 104-24 line 2922 02:30:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.380612] binder_alloc: 3289: binder_alloc_buf, no vma [ 2639.380656] binder: 3289:3294 transaction failed 29189/-3, size 0-0 line 3137 [ 2639.485834] binder: 3309:3321 got reply transaction with no transaction stack [ 2639.485843] binder: 3309:3321 transaction failed 29201/-71, size 104-24 line 2922 [ 2639.544230] binder_alloc: 3315: binder_alloc_buf, no vma [ 2639.544274] binder: 3315:3343 transaction failed 29189/-3, size 0-0 line 3137 [ 2639.558459] binder: 3351:3356 got reply transaction with no transaction stack 02:30:34 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:34 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2639.558469] binder: 3351:3356 transaction failed 29201/-71, size 104-24 line 2922 [ 2639.628427] binder_alloc: 3400: binder_alloc_buf, no vma [ 2639.628471] binder: 3400:3401 transaction failed 29189/-3, size 0-0 line 3137 [ 2639.655992] binder: 3408:3410 got reply transaction with no transaction stack 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2639.656002] binder: 3408:3410 transaction failed 29201/-71, size 104-24 line 2922 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:34 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.767456] binder: 3442:3449 got reply transaction with no transaction stack [ 2639.767466] binder: 3442:3449 transaction failed 29201/-71, size 104-24 line 2922 02:30:35 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.799711] binder_alloc: 3420: binder_alloc_buf, no vma [ 2639.799754] binder: 3420:3464 transaction failed 29189/-3, size 0-0 line 3137 02:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.878792] binder: 3500:3512 got reply transaction with no transaction stack 02:30:35 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2639.878802] binder: 3500:3512 transaction failed 29201/-71, size 104-24 line 2922 [ 2639.926066] binder_alloc: 3533: binder_alloc_buf, no vma 02:30:35 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2639.926108] binder: 3533:3546 transaction failed 29189/-3, size 0-0 line 3137 [ 2640.036854] binder: 3587:3597 got reply transaction with no transaction stack [ 2640.036863] binder: 3587:3597 transaction failed 29201/-71, size 104-24 line 2922 [ 2640.073078] binder_alloc: 3572: binder_alloc_buf, no vma [ 2640.073131] binder: 3572:3607 transaction failed 29189/-3, size 0-0 line 3137 02:30:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2640.154588] binder: 3621:3643 got reply transaction with no transaction stack 02:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2640.154598] binder: 3621:3643 transaction failed 29201/-71, size 104-24 line 2922 [ 2640.157956] binder_alloc: 3663: binder_alloc_buf, no vma [ 2640.158000] binder: 3663:3678 transaction failed 29189/-3, size 0-0 line 3137 02:30:35 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2640.290743] binder: 3697:3724 got reply transaction with no transaction stack [ 2640.290753] binder: 3697:3724 transaction failed 29201/-71, size 104-24 line 2922 [ 2640.297386] binder_alloc: 3694: binder_alloc_buf, no vma [ 2640.297431] binder: 3694:3738 transaction failed 29189/-3, size 0-0 line 3137 [ 2640.419351] binder_alloc: 3763: binder_alloc_buf, no vma 02:30:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2640.419397] binder: 3763:3784 transaction failed 29189/-3, size 0-0 line 3137 [ 2640.476597] binder: 3778:3800 got reply transaction with no transaction stack 02:30:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2640.476608] binder: 3778:3800 transaction failed 29201/-71, size 104-24 line 2922 [ 2640.636270] binder_alloc: 3842: binder_alloc_buf, no vma [ 2640.636316] binder: 3842:3851 transaction failed 29189/-3, size 0-0 line 3137 [ 2640.642657] binder: 3859:3863 got reply transaction with no transaction stack 02:30:35 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:35 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:35 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2640.642666] binder: 3859:3863 transaction failed 29201/-71, size 104-24 line 2922 [ 2640.715428] binder_alloc: 3895: binder_alloc_buf, no vma [ 2640.715484] binder: 3895:3904 transaction failed 29189/-3, size 0-0 line 3137 [ 2640.725638] binder: 3892:3909 got reply transaction with no transaction stack [ 2640.725647] binder: 3892:3909 transaction failed 29201/-71, size 104-24 line 2922 [ 2640.825446] binder_alloc: 3964: binder_alloc_buf, no vma 02:30:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2640.825491] binder: 3964:3968 transaction failed 29189/-3, size 0-0 line 3137 02:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2640.905655] binder: 3986:3996 got reply transaction with no transaction stack [ 2640.905665] binder: 3986:3996 transaction failed 29201/-71, size 104-24 line 2922 02:30:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2640.936930] binder_alloc: 3997: binder_alloc_buf, no vma [ 2640.936986] binder: 3997:4017 transaction failed 29189/-3, size 0-0 line 3137 [ 2641.017455] binder_alloc: 4059: binder_alloc_buf, no vma [ 2641.017503] binder: 4059:4086 transaction failed 29189/-3, size 0-0 line 3137 02:30:36 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:36 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2641.080223] binder: 4096:4116 got reply transaction with no transaction stack [ 2641.080233] binder: 4096:4116 transaction failed 29201/-71, size 104-24 line 2922 02:30:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2641.183893] binder_alloc: 4140: binder_alloc_buf, no vma [ 2641.183938] binder: 4140:4166 transaction failed 29189/-3, size 0-0 line 3137 02:30:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2641.206773] binder: 4155:4172 got reply transaction with no transaction stack 02:30:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2641.206784] binder: 4155:4172 transaction failed 29201/-71, size 104-24 line 2922 [ 2641.306247] binder_alloc: 4210: binder_alloc_buf, no vma 02:30:36 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2641.306294] binder: 4210:4250 transaction failed 29189/-3, size 0-0 line 3137 02:30:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2641.432710] binder: 4292:4299 got reply transaction with no transaction stack [ 2641.432720] binder: 4292:4299 transaction failed 29201/-71, size 104-24 line 2922 02:30:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2641.442833] binder_alloc: 4284: binder_alloc_buf, no vma [ 2641.442912] binder: 4284:4303 transaction failed 29189/-3, size 0-0 line 3137 02:30:36 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2641.551399] binder_alloc: 4326: binder_alloc_buf, no vma [ 2641.551442] binder: 4326:4351 transaction failed 29189/-3, size 0-0 line 3137 [ 2641.605653] binder_alloc: 4392: binder_alloc_buf, no vma 02:30:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2641.605697] binder: 4392:4394 transaction failed 29189/-3, size 0-0 line 3137 02:30:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2641.653757] binder: 4380:4388 got reply transaction with no transaction stack 02:30:37 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2641.653768] binder: 4380:4388 transaction failed 29201/-71, size 104-24 line 2922 [ 2641.720278] binder_alloc: 4428: binder_alloc_buf, no vma 02:30:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2641.720323] binder: 4428:4465 transaction failed 29189/-3, size 0-0 line 3137 [ 2641.749235] binder: 4441:4469 got reply transaction with no transaction stack 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2641.749245] binder: 4441:4469 transaction failed 29201/-71, size 104-24 line 2922 02:30:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2641.798056] binder_alloc: 4491: binder_alloc_buf, no vma [ 2641.798104] binder: 4491:4499 transaction failed 29189/-3, size 0-0 line 3137 02:30:37 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2641.950322] binder_alloc: 4566: binder_alloc_buf, no vma [ 2641.950367] binder: 4566:4582 transaction failed 29189/-3, size 0-0 line 3137 [ 2642.005159] binder: 4563:4573 got reply transaction with no transaction stack [ 2642.005169] binder: 4563:4573 transaction failed 29201/-71, size 104-24 line 2922 02:30:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.071747] binder_alloc: 4621: binder_alloc_buf, no vma 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.071967] binder: 4621:4650 transaction failed 29189/-3, size 0-0 line 3137 [ 2642.087378] binder: 4642:4655 got reply transaction with no transaction stack 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2642.087387] binder: 4642:4655 transaction failed 29201/-71, size 104-24 line 2922 [ 2642.208091] binder_alloc: 4715: binder_alloc_buf, no vma [ 2642.208135] binder: 4715:4754 transaction failed 29189/-3, size 0-0 line 3137 02:30:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2642.243186] binder: 4712:4758 got reply transaction with no transaction stack 02:30:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2642.243196] binder: 4712:4758 transaction failed 29201/-71, size 104-24 line 2922 [ 2642.341337] binder: 4799:4820 got reply transaction with no transaction stack [ 2642.341347] binder: 4799:4820 transaction failed 29201/-71, size 104-24 line 2922 02:30:37 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.346845] binder: 4784:4797 transaction failed 29189/-22, size 0-0 line 3014 [ 2642.454360] binder_alloc: 4861: binder_alloc_buf, no vma 02:30:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.454406] binder: 4861:4878 transaction failed 29189/-3, size 0-0 line 3137 02:30:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.501092] binder: 4888:4889 got reply transaction with no transaction stack 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2642.501102] binder: 4888:4889 transaction failed 29201/-71, size 104-24 line 2922 02:30:38 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.572678] binder: 4921:4950 got reply transaction with no transaction stack 02:30:38 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2642.572687] binder: 4921:4950 transaction failed 29201/-71, size 104-24 line 2922 02:30:38 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.595263] binder_alloc: 4929: binder_alloc_buf, no vma 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2642.595309] binder: 4929:4957 transaction failed 29189/-3, size 0-0 line 3137 [ 2642.635038] binder: 4964:4975 got reply transaction with no transaction stack [ 2642.635048] binder: 4964:4975 transaction failed 29201/-71, size 104-24 line 2922 [ 2642.782901] binder: 5001:5015 got reply transaction with no transaction stack 02:30:38 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:38 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2642.782911] binder: 5001:5015 transaction failed 29201/-71, size 104-24 line 2922 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.816994] binder_alloc: 4996: binder_alloc_buf, no vma 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.817039] binder: 4996:5009 transaction failed 29189/-3, size 0-0 line 3137 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.878213] binder: 5043:5052 got reply transaction with no transaction stack 02:30:38 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:38 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2642.878239] binder: 5043:5052 transaction failed 29201/-71, size 104-24 line 2922 [ 2642.943637] binder_alloc: 5074: binder_alloc_buf, no vma [ 2642.943682] binder: 5074:5095 transaction failed 29189/-3, size 0-0 line 3137 [ 2642.946120] binder: 5101:5113 got reply transaction with no transaction stack 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2642.946129] binder: 5101:5113 transaction failed 29201/-71, size 104-24 line 2922 [ 2643.042787] binder: 5124:5154 got reply transaction with no transaction stack 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2643.042797] binder: 5124:5154 transaction failed 29201/-71, size 104-24 line 2922 [ 2643.065859] binder_alloc: 5121: binder_alloc_buf, no vma 02:30:38 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2643.065904] binder: 5121:5173 transaction failed 29189/-3, size 0-0 line 3137 [ 2643.184845] binder_alloc: 5213: binder_alloc_buf, no vma 02:30:38 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2643.184891] binder: 5213:5220 transaction failed 29189/-3, size 0-0 line 3137 [ 2643.193014] binder: 5184:5239 got reply transaction with no transaction stack 02:30:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.193023] binder: 5184:5239 transaction failed 29201/-71, size 104-24 line 2922 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.298912] binder: 5277:5281 got reply transaction with no transaction stack 02:30:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2643.298922] binder: 5277:5281 transaction failed 29201/-71, size 104-24 line 2922 02:30:39 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.316632] binder_alloc: 5279: binder_alloc_buf, no vma [ 2643.316675] binder: 5279:5302 transaction failed 29189/-3, size 0-0 line 3137 [ 2643.428940] binder_alloc: 5366: binder_alloc_buf, no vma 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.428985] binder: 5366:5401 transaction failed 29189/-3, size 0-0 line 3137 [ 2643.434804] binder: 5367:5415 got reply transaction with no transaction stack 02:30:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2643.434813] binder: 5367:5415 transaction failed 29201/-71, size 104-24 line 2922 [ 2643.478773] binder_alloc: 5430: binder_alloc_buf, no vma [ 2643.478916] binder: 5430:5432 transaction failed 29189/-3, size 0-0 line 3137 02:30:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.588768] binder: 5458:5466 got reply transaction with no transaction stack [ 2643.588777] binder: 5458:5466 transaction failed 29201/-71, size 104-24 line 2922 [ 2643.590323] binder_alloc: 5472: binder_alloc_buf, no vma [ 2643.590367] binder: 5472:5481 transaction failed 29189/-3, size 0-0 line 3137 02:30:39 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.671967] binder: 5510:5533 got reply transaction with no transaction stack 02:30:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2643.671976] binder: 5510:5533 transaction failed 29201/-71, size 104-24 line 2922 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.757302] binder_alloc: 5531: binder_alloc_buf, no vma [ 2643.757344] binder: 5531:5593 transaction failed 29189/-3, size 0-0 line 3137 02:30:39 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.759373] binder: 5583:5597 got reply transaction with no transaction stack [ 2643.759382] binder: 5583:5597 transaction failed 29201/-71, size 104-24 line 2922 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2643.857602] binder: 5645:5648 got reply transaction with no transaction stack 02:30:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2643.857612] binder: 5645:5648 transaction failed 29201/-71, size 104-24 line 2922 [ 2643.954315] binder_alloc: 5678: binder_alloc_buf, no vma [ 2643.954360] binder: 5678:5696 transaction failed 29189/-3, size 0-0 line 3137 [ 2643.983082] binder: 5698:5718 got reply transaction with no transaction stack 02:30:39 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2643.983092] binder: 5698:5718 transaction failed 29201/-71, size 104-24 line 2922 02:30:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2644.030167] binder_alloc: 5725: binder_alloc_buf, no vma [ 2644.030210] binder: 5725:5733 transaction failed 29189/-3, size 0-0 line 3137 02:30:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2644.030312] binder: 5732:5746 got reply transaction with no transaction stack [ 2644.030320] binder: 5732:5746 transaction failed 29201/-71, size 104-24 line 2922 [ 2644.133669] binder: 5781:5789 got reply transaction with no transaction stack [ 2644.133679] binder: 5781:5789 transaction failed 29201/-71, size 104-24 line 2922 02:30:40 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2644.137460] binder_alloc: 5795: binder_alloc_buf, no vma [ 2644.137505] binder: 5795:5797 transaction failed 29189/-3, size 0-0 line 3137 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2644.226050] binder: 5818:5829 got reply transaction with no transaction stack [ 2644.226058] binder: 5818:5829 transaction failed 29201/-71, size 104-24 line 2922 [ 2644.260235] binder_alloc: 5828: binder_alloc_buf, no vma 02:30:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2644.260279] binder: 5828:5844 transaction failed 29189/-3, size 0-0 line 3137 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2644.304275] binder: 5870:5894 got reply transaction with no transaction stack [ 2644.304284] binder: 5870:5894 transaction failed 29201/-71, size 104-24 line 2922 [ 2644.436098] binder: 5935:5961 got reply transaction with no transaction stack 02:30:40 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2644.436107] binder: 5935:5961 transaction failed 29201/-71, size 104-24 line 2922 [ 2644.464694] binder_alloc: 5900: binder_alloc_buf, no vma [ 2644.464742] binder: 5900:5957 transaction failed 29189/-3, size 0-0 line 3137 02:30:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2644.512972] binder: 5987:6008 got reply transaction with no transaction stack [ 2644.512982] binder: 5987:6008 transaction failed 29201/-71, size 104-24 line 2922 02:30:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2644.523617] binder_alloc: 6009: binder_alloc_buf, no vma [ 2644.523663] binder: 6009:6015 transaction failed 29189/-3, size 0-0 line 3137 [ 2644.633755] binder: 6052:6061 got reply transaction with no transaction stack 02:30:40 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2644.633765] binder: 6052:6061 transaction failed 29201/-71, size 104-24 line 2922 [ 2644.645664] binder_alloc: 6059: binder_alloc_buf, no vma 02:30:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2644.645712] binder: 6059:6071 transaction failed 29189/-3, size 0-0 line 3137 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2644.737821] binder: 6089:6115 got reply transaction with no transaction stack 02:30:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2644.737830] binder: 6089:6115 transaction failed 29201/-71, size 104-24 line 2922 02:30:41 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2644.807859] binder_alloc: 6144: binder_alloc_buf, no vma [ 2644.807904] binder: 6144:6178 transaction failed 29189/-3, size 0-0 line 3137 02:30:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2644.909177] binder: 6187:6223 got reply transaction with no transaction stack [ 2644.909187] binder: 6187:6223 transaction failed 29201/-71, size 104-24 line 2922 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2644.998416] binder_alloc: 6234: binder_alloc_buf, no vma [ 2644.998466] binder: 6234:6256 transaction failed 29189/-3, size 0-0 line 3137 02:30:41 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2645.036811] binder: 6278:6287 got reply transaction with no transaction stack [ 2645.036821] binder: 6278:6287 transaction failed 29201/-71, size 104-24 line 2922 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2645.073435] binder_alloc: 6298: binder_alloc_buf, no vma [ 2645.073492] binder: 6298:6313 transaction failed 29189/-3, size 0-0 line 3137 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2645.160376] binder: 6332:6352 got reply transaction with no transaction stack [ 2645.160386] binder: 6332:6352 transaction failed 29201/-71, size 104-24 line 2922 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2645.166289] binder_alloc: 6339: binder_alloc_buf, no vma [ 2645.166334] binder: 6339:6373 transaction failed 29189/-3, size 0-0 line 3137 02:30:41 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2645.291747] binder_alloc: 6419: binder_alloc_buf, no vma [ 2645.291793] binder: 6419:6428 transaction failed 29189/-3, size 0-0 line 3137 [ 2645.347256] binder: 6382:6448 got reply transaction with no transaction stack [ 2645.347267] binder: 6382:6448 transaction failed 29201/-71, size 104-24 line 2922 [ 2645.478734] binder_alloc: 6471: binder_alloc_buf, no vma 02:30:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2645.478779] binder: 6471:6508 transaction failed 29189/-3, size 0-0 line 3137 [ 2645.484268] binder: 6485:6509 got reply transaction with no transaction stack [ 2645.484277] binder: 6485:6509 transaction failed 29201/-71, size 104-24 line 2922 02:30:41 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2645.582239] binder: 6561:6574 got reply transaction with no transaction stack [ 2645.582249] binder: 6561:6574 transaction failed 29201/-71, size 104-24 line 2922 [ 2645.671219] binder_alloc: 6581: binder_alloc_buf, no vma 02:30:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2645.671264] binder: 6581:6607 transaction failed 29189/-3, size 0-0 line 3137 [ 2645.739017] binder: 6637:6659 got reply transaction with no transaction stack 02:30:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2645.739027] binder: 6637:6659 transaction failed 29201/-71, size 104-24 line 2922 02:30:41 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2645.748219] binder_alloc: 6652: binder_alloc_buf, no vma [ 2645.748265] binder: 6652:6669 transaction failed 29189/-3, size 0-0 line 3137 [ 2645.861617] binder_alloc: 6719: binder_alloc_buf, no vma [ 2645.861695] binder: 6719:6731 transaction failed 29189/-3, size 0-0 line 3137 [ 2645.918919] binder: 6706:6758 got reply transaction with no transaction stack 02:30:42 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2645.918929] binder: 6706:6758 transaction failed 29201/-71, size 104-24 line 2922 [ 2645.983170] binder_alloc: 6770: binder_alloc_buf, no vma [ 2645.983215] binder: 6770:6797 transaction failed 29189/-3, size 0-0 line 3137 [ 2646.012635] binder: 6775:6810 got reply transaction with no transaction stack [ 2646.012647] binder: 6775:6810 transaction failed 29201/-71, size 104-24 line 2922 [ 2646.083725] binder: 6835:6860 got reply transaction with no transaction stack 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2646.083735] binder: 6835:6860 transaction failed 29201/-71, size 104-24 line 2922 [ 2646.138013] binder: 6847:6878 transaction failed 29189/-22, size 0-0 line 3014 02:30:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2646.269647] binder_alloc: 6922: binder_alloc_buf, no vma [ 2646.269691] binder: 6922:6954 transaction failed 29189/-3, size 0-0 line 3137 [ 2646.272348] binder: 6923:6962 got reply transaction with no transaction stack [ 2646.272358] binder: 6923:6962 transaction failed 29201/-71, size 104-24 line 2922 [ 2646.367499] binder: 6993:7015 got reply transaction with no transaction stack 02:30:42 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2646.367509] binder: 6993:7015 transaction failed 29201/-71, size 104-24 line 2922 [ 2646.449998] binder_alloc: 7029: binder_alloc_buf, no vma [ 2646.450044] binder: 7029:7030 transaction failed 29189/-3, size 0-0 line 3137 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2646.524594] binder: 7063:7080 got reply transaction with no transaction stack 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2646.524604] binder: 7063:7080 transaction failed 29201/-71, size 104-24 line 2922 [ 2646.553880] binder_alloc: 7054: binder_alloc_buf, no vma [ 2646.553924] binder: 7054:7084 transaction failed 29189/-3, size 0-0 line 3137 02:30:42 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2646.623205] binder: 7114:7145 got reply transaction with no transaction stack [ 2646.623215] binder: 7114:7145 transaction failed 29201/-71, size 104-24 line 2922 [ 2646.633527] binder_alloc: 7120: binder_alloc_buf, no vma [ 2646.633571] binder: 7120:7128 transaction failed 29189/-3, size 0-0 line 3137 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2646.711783] binder_alloc: 7169: binder_alloc_buf, no vma [ 2646.711829] binder: 7169:7184 transaction failed 29189/-3, size 0-0 line 3137 [ 2646.748574] binder: 7185:7197 got reply transaction with no transaction stack [ 2646.748584] binder: 7185:7197 transaction failed 29201/-71, size 104-24 line 2922 02:30:42 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:42 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2646.769897] binder_alloc: 7236: binder_alloc_buf, no vma [ 2646.769941] binder: 7236:7245 transaction failed 29189/-3, size 0-0 line 3137 02:30:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2646.837600] binder: 7261:7286 got reply transaction with no transaction stack 02:30:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2646.837610] binder: 7261:7286 transaction failed 29201/-71, size 104-24 line 2922 [ 2646.880775] binder_alloc: 7290: binder_alloc_buf, no vma [ 2646.880821] binder: 7290:7296 transaction failed 29189/-3, size 0-0 line 3137 [ 2646.910921] binder: 7303:7312 got reply transaction with no transaction stack [ 2646.910931] binder: 7303:7312 transaction failed 29201/-71, size 104-24 line 2922 [ 2646.976203] binder_alloc: 7350: binder_alloc_buf, no vma [ 2646.976245] binder: 7350:7370 transaction failed 29189/-3, size 0-0 line 3137 02:30:43 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.004144] binder: 7375:7391 got reply transaction with no transaction stack [ 2647.004154] binder: 7375:7391 transaction failed 29201/-71, size 104-24 line 2922 [ 2647.145462] binder_alloc: 7403: binder_alloc_buf, no vma [ 2647.145506] binder: 7403:7459 transaction failed 29189/-3, size 0-0 line 3137 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.147032] binder: 7411:7461 got reply transaction with no transaction stack 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2647.147042] binder: 7411:7461 transaction failed 29201/-71, size 104-24 line 2922 [ 2647.249551] binder: 7498:7503 got reply transaction with no transaction stack [ 2647.249561] binder: 7498:7503 transaction failed 29201/-71, size 104-24 line 2922 02:30:43 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.361531] binder: 7557:7572 got reply transaction with no transaction stack [ 2647.361541] binder: 7557:7572 transaction failed 29201/-71, size 104-24 line 2922 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2647.411649] binder: 7619:7631 got reply transaction with no transaction stack [ 2647.411658] binder: 7619:7631 transaction failed 29201/-71, size 104-24 line 2922 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.412746] binder: 7552:7595 transaction failed 29189/-22, size 0-0 line 3014 [ 2647.518229] binder: 7676:7691 got reply transaction with no transaction stack [ 2647.518238] binder: 7676:7691 transaction failed 29201/-71, size 104-24 line 2922 [ 2647.614983] binder: 7715:7740 got reply transaction with no transaction stack 02:30:43 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.614993] binder: 7715:7740 transaction failed 29201/-71, size 104-24 line 2922 [ 2647.691966] binder: 7738:7745 transaction failed 29189/-22, size 0-0 line 3014 [ 2647.724352] binder: 7800:7811 got reply transaction with no transaction stack 02:30:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.724362] binder: 7800:7811 transaction failed 29201/-71, size 104-24 line 2922 [ 2647.734090] binder_alloc: 7792: binder_alloc_buf, no vma 02:30:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2647.734135] binder: 7792:7815 transaction failed 29189/-3, size 0-0 line 3137 02:30:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.845221] binder: 7856:7872 got reply transaction with no transaction stack 02:30:43 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.845231] binder: 7856:7872 transaction failed 29201/-71, size 104-24 line 2922 02:30:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.901839] binder_alloc: 7865: binder_alloc_buf, no vma 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.901882] binder: 7865:7894 transaction failed 29189/-3, size 0-0 line 3137 02:30:44 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2647.979478] binder: 7933:7935 got reply transaction with no transaction stack [ 2647.979489] binder: 7933:7935 transaction failed 29201/-71, size 104-24 line 2922 02:30:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2648.029406] binder_alloc: 7957: binder_alloc_buf, no vma 02:30:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2648.029450] binder: 7957:7987 transaction failed 29189/-3, size 0-0 line 3137 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2648.170596] binder_alloc: 8025: binder_alloc_buf, no vma [ 2648.170641] binder: 8025:8031 transaction failed 29189/-3, size 0-0 line 3137 [ 2648.236745] binder: 8023:8071 got reply transaction with no transaction stack 02:30:44 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2648.236755] binder: 8023:8071 transaction failed 29201/-71, size 104-24 line 2922 [ 2648.315316] binder: 8103:8121 got reply transaction with no transaction stack [ 2648.315325] binder: 8103:8121 transaction failed 29201/-71, size 104-24 line 2922 02:30:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2648.350851] binder_alloc: 8058: binder_alloc_buf, no vma [ 2648.350893] binder: 8058:8085 transaction failed 29189/-3, size 0-0 line 3137 02:30:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2648.437605] binder_alloc: 8165: binder_alloc_buf, no vma [ 2648.437657] binder: 8165:8187 transaction failed 29189/-3, size 0-0 line 3137 [ 2648.450492] binder: 8167:8196 got reply transaction with no transaction stack [ 2648.450501] binder: 8167:8196 transaction failed 29201/-71, size 104-24 line 2922 02:30:44 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2648.537420] binder: 8230:8242 got reply transaction with no transaction stack [ 2648.537430] binder: 8230:8242 transaction failed 29201/-71, size 104-24 line 2922 [ 2648.558192] binder_alloc: 8232: binder_alloc_buf, no vma 02:30:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2648.558235] binder: 8232:8250 transaction failed 29189/-3, size 0-0 line 3137 [ 2648.698103] binder_alloc: 8286: binder_alloc_buf, no vma [ 2648.698263] binder: 8286:8311 transaction failed 29189/-3, size 0-0 line 3137 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2648.782108] binder: 8259:8327 got reply transaction with no transaction stack 02:30:44 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2648.782117] binder: 8259:8327 transaction failed 29201/-71, size 104-24 line 2922 [ 2648.800176] binder_alloc: 8369: binder_alloc_buf, no vma [ 2648.800217] binder: 8369:8385 transaction failed 29189/-3, size 0-0 line 3137 [ 2648.856283] binder: 8390:8406 got reply transaction with no transaction stack 02:30:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2648.856293] binder: 8390:8406 transaction failed 29201/-71, size 104-24 line 2922 [ 2648.960256] binder: 8443:8453 got reply transaction with no transaction stack 02:30:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2648.960266] binder: 8443:8453 transaction failed 29201/-71, size 104-24 line 2922 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.005695] binder_alloc: 8441: binder_alloc_buf, no vma [ 2649.005741] binder: 8441:8466 transaction failed 29189/-3, size 0-0 line 3137 [ 2649.136677] binder_alloc: 8558: binder_alloc_buf, no vma [ 2649.136725] binder: 8558:8566 transaction failed 29189/-3, size 0-0 line 3137 [ 2649.164527] binder: 8502:8529 got reply transaction with no transaction stack [ 2649.164536] binder: 8502:8529 transaction failed 29201/-71, size 104-24 line 2922 [ 2649.225703] binder: 8594:8601 got reply transaction with no transaction stack [ 2649.225713] binder: 8594:8601 transaction failed 29201/-71, size 104-24 line 2922 02:30:45 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.363194] binder: 8642:8688 got reply transaction with no transaction stack [ 2649.363203] binder: 8642:8688 transaction failed 29201/-71, size 104-24 line 2922 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.425264] binder: 8633:8643 transaction failed 29189/-22, size 0-0 line 3014 [ 2649.439744] binder: 8716:8737 got reply transaction with no transaction stack 02:30:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2649.439753] binder: 8716:8737 transaction failed 29201/-71, size 104-24 line 2922 [ 2649.510172] binder_alloc: 8752: binder_alloc_buf, no vma [ 2649.510217] binder: 8752:8762 transaction failed 29189/-3, size 0-0 line 3137 [ 2649.562094] binder: 8804:8835 got reply transaction with no transaction stack 02:30:45 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.562104] binder: 8804:8835 transaction failed 29201/-71, size 104-24 line 2922 [ 2649.572702] binder_alloc: 8826: binder_alloc_buf, no vma 02:30:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.572747] binder: 8826:8836 transaction failed 29189/-3, size 0-0 line 3137 02:30:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.710025] binder: 8881:8901 got reply transaction with no transaction stack [ 2649.710035] binder: 8881:8901 transaction failed 29201/-71, size 104-24 line 2922 [ 2649.716057] binder_alloc: 8869: binder_alloc_buf, no vma [ 2649.716101] binder: 8869:8894 transaction failed 29189/-3, size 0-0 line 3137 02:30:45 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.830591] binder: 8948:8963 got reply transaction with no transaction stack [ 2649.830601] binder: 8948:8963 transaction failed 29201/-71, size 104-24 line 2922 [ 2649.833078] binder_alloc: 8941: binder_alloc_buf, no vma 02:30:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.833122] binder: 8941:8969 transaction failed 29189/-3, size 0-0 line 3137 [ 2649.974259] binder_alloc: 8989: binder_alloc_buf, no vma [ 2649.974302] binder: 8989:9021 transaction failed 29189/-3, size 0-0 line 3137 [ 2649.977281] binder: 9011:9016 got reply transaction with no transaction stack 02:30:45 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:46 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2649.977290] binder: 9011:9016 transaction failed 29201/-71, size 104-24 line 2922 [ 2650.075461] binder: 9069:9094 got reply transaction with no transaction stack 02:30:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2650.075471] binder: 9069:9094 transaction failed 29201/-71, size 104-24 line 2922 02:30:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2650.097638] binder_alloc: 9086: binder_alloc_buf, no vma [ 2650.097682] binder: 9086:9108 transaction failed 29189/-3, size 0-0 line 3137 02:30:46 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:46 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2650.240160] binder: 9137:9177 got reply transaction with no transaction stack [ 2650.240169] binder: 9137:9177 transaction failed 29201/-71, size 104-24 line 2922 02:30:46 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) [ 2650.252593] binder_alloc: 9141: binder_alloc_buf, no vma [ 2650.252640] binder: 9141:9187 transaction failed 29189/-3, size 0-0 line 3137 02:30:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2650.349710] binder_alloc: 9236: binder_alloc_buf, no vma [ 2650.349755] binder: 9236:9253 transaction failed 29189/-3, size 0-0 line 3137 [ 2650.371333] binder: 9229:9263 got reply transaction with no transaction stack [ 2650.371344] binder: 9229:9263 transaction failed 29201/-71, size 104-24 line 2922 02:30:46 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0xe5, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x261c41ec}) 02:30:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x21}, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) 02:30:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x0, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x2b}, @fda={0x66646185, 0x9, 0x0, 0x24}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1440}, @decrefs={0x40046307, 0x3}], 0x4a, 0x0, &(0x7f00000003c0)="8a426aa0de3ee6ce3bc842c6d978e619f6cada9c6aa608853167f80b808025b7001adc46a09f94cd153ec8bbde4f5e029d65f81b7c6e3ef44bea3872d8030c70fc2ef3bb2bce2803fc7e"}) [ 2650.477935] binder: 9275:9310 got reply transaction with no transaction stack [ 2650.477944] binder: 9275:9310 transaction failed 29201/-71, size 104-24 line 2922 [ 2650.505537] binder_alloc: 9271: binder_alloc_buf, no vma [ 2650.505579] binder: 9271:9313 transaction failed 29189/-3, size 0-0 line 3137 [ 2650.587929] binder: 9350:9366 got reply transaction with no transaction stack [ 2650.587938] binder: 9350:9366 transaction failed 29201/-71, size 104-24 line 2922 [ 2650.605172] binder_alloc: 9343: binder_alloc_buf, no vma [ 2650.605219] binder: 9343:9379 transaction failed 29189/-3, size 0-0 line 3137 [ 2650.644681] binder: 9384:9389 got reply transaction with no transaction stack [ 2650.644691] binder: 9384:9389 transaction failed 29201/-71, size 104-24 line 2922 [ 2650.746981] binder: 9412:9444 got reply transaction with no transaction stack [ 2650.746990] binder: 9412:9444 transaction failed 29201/-71, size 104-24 line 2922 [ 2650.748009] binder_alloc: 9397: binder_alloc_buf, no vma [ 2650.748054] binder: 9397:9415 transaction failed 29189/-3, size 0-0 line 3137 [ 2650.848726] binder_alloc: 9475: binder_alloc_buf, no vma [ 2650.848772] binder: 9475:9486 transaction failed 29189/-3, size 0-0 line 3137 [ 2650.866543] binder: 9495:9497 got reply transaction with no transaction stack [ 2650.866553] binder: 9495:9497 transaction failed 29201/-71, size 104-24 line 2922 [ 2651.061848] binder: 9537:9564 got reply transaction with no transaction stack [ 2651.061858] binder: 9537:9564 transaction failed 29201/-71, size 104-24 line 2922 [ 2651.071122] binder_alloc: 9561: binder_alloc_buf, no vma [ 2651.071164] binder: 9561:9581 transaction failed 29189/-3, size 0-0 line 3137 [ 2651.145531] binder: 9600:9607 got reply transaction with no transaction stack [ 2651.145540] binder: 9600:9607 transaction failed 29201/-71, size 104-24 line 2922 [ 2651.360154] binder_alloc: 9628: binder_alloc_buf, no vma [ 2651.360202] binder: 9628:9639 transaction failed 29189/-3, size 0-0 line 3137 [ 2651.523770] binder_alloc: 9669: binder_alloc_buf, no vma [ 2651.523813] binder: 9669:9674 transaction failed 29189/-3, size 0-0 line 3137 [ 2651.558392] binder: 9657:9681 got reply transaction with no transaction stack [ 2651.558402] binder: 9657:9681 transaction failed 29201/-71, size 104-24 line 2922 [ 2651.627249] binder_alloc: 9704: binder_alloc_buf, no vma [ 2651.627295] binder: 9704:9750 transaction failed 29189/-3, size 0-0 line 3137 [ 2651.637689] binder: 9751:9756 got reply transaction with no transaction stack [ 2651.637699] binder: 9751:9756 transaction failed 29201/-71, size 104-24 line 2922 [ 2651.689333] binder_alloc: 9763: binder_alloc_buf, no vma [ 2651.689377] binder: 9763:9768 transaction failed 29189/-3, size 0-0 line 3137 [ 2651.705837] binder: 9774:9791 got reply transaction with no transaction stack [ 2651.705847] binder: 9774:9791 transaction failed 29201/-71, size 104-24 line 2922 [ 2651.807660] binder_alloc: 9824: binder_alloc_buf, no vma [ 2651.807704] binder: 9824:9839 transaction failed 29189/-3, size 0-0 line 3137 [ 2651.847651] binder: 9811:9856 got reply transaction with no transaction stack [ 2651.847660] binder: 9811:9856 transaction failed 29201/-71, size 104-24 line 2922 [ 2651.895026] binder_alloc: 9886: binder_alloc_buf, no vma [ 2651.895072] binder: 9886:9913 transaction failed 29189/-3, size 0-0 line 3137 [ 2651.959282] binder: 9916:9963 got reply transaction with no transaction stack [ 2651.959292] binder: 9916:9963 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.061126] binder: 9985:10009 got reply transaction with no transaction stack [ 2652.061136] binder: 9985:10009 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.072376] binder_alloc: 9991: binder_alloc_buf, no vma [ 2652.072419] binder: 9991:10011 transaction failed 29189/-3, size 0-0 line 3137 [ 2652.171780] binder: 10041:10045 got reply transaction with no transaction stack [ 2652.171790] binder: 10041:10045 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.215385] binder_alloc: 10061: binder_alloc_buf, no vma [ 2652.215432] binder: 10061:10069 transaction failed 29189/-3, size 0-0 line 3137 [ 2652.235153] binder: 10078:10083 got reply transaction with no transaction stack [ 2652.235161] binder: 10078:10083 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.297461] binder_alloc: 10090: binder_alloc_buf, no vma [ 2652.297506] binder: 10090:10125 transaction failed 29189/-3, size 0-0 line 3137 [ 2652.306082] binder: 10115:10132 got reply transaction with no transaction stack [ 2652.306090] binder: 10115:10132 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.386951] binder_alloc: 10156: binder_alloc_buf, no vma [ 2652.387000] binder: 10156:10168 transaction failed 29189/-3, size 0-0 line 3137 [ 2652.507477] binder_alloc: 10195: binder_alloc_buf, no vma [ 2652.507523] binder: 10195:10220 transaction failed 29189/-3, size 0-0 line 3137 [ 2652.611359] binder: 10225:10280 got reply transaction with no transaction stack [ 2652.611369] binder: 10225:10280 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.625373] binder: 10260:10277 transaction failed 29189/-22, size 0-0 line 3014 [ 2652.731592] binder_alloc: 10352: binder_alloc_buf, no vma [ 2652.731635] binder: 10352:10357 transaction failed 29189/-3, size 0-0 line 3137 [ 2652.733015] binder: 10350:10361 got reply transaction with no transaction stack [ 2652.733025] binder: 10350:10361 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.812634] binder: 10409:10445 got reply transaction with no transaction stack [ 2652.812644] binder: 10409:10445 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.814981] binder_alloc: 10395: binder_alloc_buf, no vma [ 2652.815026] binder: 10395:10411 transaction failed 29189/-3, size 0-0 line 3137 [ 2652.906990] binder_alloc: 10478: binder_alloc_buf, no vma [ 2652.907036] binder: 10478:10486 transaction failed 29189/-3, size 0-0 line 3137 [ 2652.934114] binder: 10469:10496 got reply transaction with no transaction stack [ 2652.934123] binder: 10469:10496 transaction failed 29201/-71, size 104-24 line 2922 [ 2652.964225] binder_alloc: 10516: binder_alloc_buf, no vma [ 2652.964269] binder: 10516:10531 transaction failed 29189/-3, size 0-0 line 3137 [ 2653.067088] binder_alloc: 10564: binder_alloc_buf, no vma [ 2653.067132] binder: 10564:10570 transaction failed 29189/-3, size 0-0 line 3137 [ 2653.099867] binder: 10551:10580 got reply transaction with no transaction stack [ 2653.099877] binder: 10551:10580 transaction failed 29201/-71, size 104-24 line 2922 [ 2653.151385] binder: 10615:10637 got reply transaction with no transaction stack [ 2653.151395] binder: 10615:10637 transaction failed 29201/-71, size 104-24 line 2922 [ 2653.159819] binder_alloc: 10602: binder_alloc_buf, no vma [ 2653.159865] binder: 10602:10647 transaction failed 29189/-3, size 0-0 line 3137 [ 2653.249120] binder: 10656:10667 got reply transaction with no transaction stack [ 2653.249131] binder: 10656:10667 transaction failed 29201/-71, size 104-24 line 2922 [ 2653.298832] binder_alloc: 10679: binder_alloc_buf, no vma [ 2653.298877] binder: 10679:10694 transaction failed 29189/-3, size 0-0 line 3137 [ 2653.341411] binder: 10709:10723 got reply transaction with no transaction stack [ 2653.341420] binder: 10709:10723 transaction failed 29201/-71, size 104-24 line 2922 [ 2653.405376] binder_alloc: 10731: binder_alloc_buf, no vma [ 2653.405428] binder: 10731:10733 transaction failed 29189/-3, size 0-0 line 3137 [ 2653.456858] binder: 10761:10804 got reply transaction with no transaction stack [ 2653.456904] binder: 10761:10804 transaction failed 29201/-71, size 104-24 line 2922 [ 2653.492505] binder_alloc: 10796: binder_alloc_buf, no vma [ 2653.492551] binder: 10796:10806 transaction failed 29189/-3, size 0-0 line 3137 [ 2653.608450] binder: 10863:10884 got reply transaction with no transaction stack [ 2653.608459] binder: 10863:10884 transaction failed 29201/-71, size 104-24 line 2922 [ 2653.608965] binder_alloc: 10845: binder_alloc_buf, no vma [ 2653.609011] binder: 10845:10877 transaction failed 29189/-3, size 0-0 line 3137 [ 2653.714237] binder: 10937:10940 got reply transaction with no transaction stack [ 2653.714247] binder: 10937:10940 transaction failed 29201/-71, size 104-24 line 2922 [ 2653.853411] binder_alloc: 10974: binder_alloc_buf, no vma [ 2653.853456] binder: 10974:11009 transaction failed 29189/-3, size 0-0 line 3137 [ 2653.868551] binder: 10972:11002 got reply transaction with no transaction stack [ 2653.868560] binder: 10972:11002 transaction failed 29201/-71, size 104-24 line 2922 [ 2653.953469] binder: 11036:11072 got reply transaction with no transaction stack [ 2653.953479] binder: 11036:11072 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.028362] binder_alloc: 11085: binder_alloc_buf, no vma [ 2654.028407] binder: 11085:11089 transaction failed 29189/-3, size 0-0 line 3137 [ 2654.028968] binder: 11093:11097 got reply transaction with no transaction stack [ 2654.028977] binder: 11093:11097 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.099376] binder: 11126:11132 got reply transaction with no transaction stack [ 2654.099386] binder: 11126:11132 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.215512] binder: 11168:11185 got reply transaction with no transaction stack [ 2654.215521] binder: 11168:11185 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.240838] binder_alloc: 11200: binder_alloc_buf, no vma [ 2654.240879] binder: 11200:11217 transaction failed 29189/-3, size 0-0 line 3137 [ 2654.293415] binder: 11240:11244 got reply transaction with no transaction stack [ 2654.293424] binder: 11240:11244 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.395120] binder: 11273:11287 got reply transaction with no transaction stack [ 2654.395130] binder: 11273:11287 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.396136] binder_alloc: 11260: binder_alloc_buf, no vma [ 2654.396182] binder: 11260:11285 transaction failed 29189/-3, size 0-0 line 3137 [ 2654.501214] binder: 11327:11337 got reply transaction with no transaction stack [ 2654.501224] binder: 11327:11337 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.529160] binder_alloc: 11338: binder_alloc_buf, no vma [ 2654.529205] binder: 11338:11355 transaction failed 29189/-3, size 0-0 line 3137 [ 2654.653991] binder: 11400:11407 got reply transaction with no transaction stack [ 2654.654001] binder: 11400:11407 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.654241] binder_alloc: 11391: binder_alloc_buf, no vma [ 2654.654286] binder: 11391:11401 transaction failed 29189/-3, size 0-0 line 3137 [ 2654.777912] binder: 11441:11465 got reply transaction with no transaction stack [ 2654.777922] binder: 11441:11465 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.805913] binder_alloc: 11487: binder_alloc_buf, no vma [ 2654.805970] binder: 11487:11494 transaction failed 29189/-3, size 0-0 line 3137 [ 2654.918308] binder: 11524:11552 got reply transaction with no transaction stack [ 2654.918319] binder: 11524:11552 transaction failed 29201/-71, size 104-24 line 2922 [ 2654.923686] binder_alloc: 11517: binder_alloc_buf, no vma [ 2654.923731] binder: 11517:11554 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.047898] binder_alloc: 11587: binder_alloc_buf, no vma [ 2655.047943] binder: 11587:11612 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.048833] binder: 11623:11637 got reply transaction with no transaction stack [ 2655.048842] binder: 11623:11637 transaction failed 29201/-71, size 104-24 line 2922 [ 2655.183045] binder_alloc: 11684: binder_alloc_buf, no vma [ 2655.183092] binder: 11684:11687 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.192757] binder: 11678:11702 got reply transaction with no transaction stack [ 2655.192769] binder: 11678:11702 transaction failed 29201/-71, size 104-24 line 2922 [ 2655.304136] binder: 11760:11773 got reply transaction with no transaction stack [ 2655.304146] binder: 11760:11773 transaction failed 29201/-71, size 104-24 line 2922 [ 2655.309406] binder_alloc: 11752: binder_alloc_buf, no vma [ 2655.309450] binder: 11752:11768 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.424105] binder: 11802:11842 got reply transaction with no transaction stack [ 2655.424114] binder: 11802:11842 transaction failed 29201/-71, size 104-24 line 2922 [ 2655.433653] binder_alloc: 11805: binder_alloc_buf, no vma [ 2655.433698] binder: 11805:11831 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.527294] binder: 11880:11894 got reply transaction with no transaction stack [ 2655.527304] binder: 11880:11894 transaction failed 29201/-71, size 104-24 line 2922 [ 2655.559178] binder_alloc: 11903: binder_alloc_buf, no vma [ 2655.559222] binder: 11903:11912 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.669127] binder: 11938:11957 got reply transaction with no transaction stack [ 2655.669137] binder: 11938:11957 transaction failed 29201/-71, size 104-24 line 2922 [ 2655.707055] binder_alloc: 11946: binder_alloc_buf, no vma [ 2655.707101] binder: 11946:11988 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.786046] binder: 12001:12016 got reply transaction with no transaction stack [ 2655.786055] binder: 12001:12016 transaction failed 29201/-71, size 104-24 line 2922 [ 2655.823428] binder: 12047:12062 got reply transaction with no transaction stack [ 2655.823437] binder: 12047:12062 transaction failed 29201/-71, size 104-24 line 2922 [ 2655.850173] binder_alloc: 12068: binder_alloc_buf, no vma [ 2655.850219] binder: 12068:12069 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.948000] binder_alloc: 12096: binder_alloc_buf, no vma [ 2655.948045] binder: 12096:12115 transaction failed 29189/-3, size 0-0 line 3137 [ 2655.957041] binder: 12105:12124 got reply transaction with no transaction stack [ 2655.957051] binder: 12105:12124 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.068385] binder: 12188:12201 got reply transaction with no transaction stack [ 2656.068395] binder: 12188:12201 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.095653] binder_alloc: 12205: binder_alloc_buf, no vma [ 2656.095698] binder: 12205:12214 transaction failed 29189/-3, size 0-0 line 3137 [ 2656.181274] binder_alloc: 12228: binder_alloc_buf, no vma [ 2656.181319] binder: 12228:12233 transaction failed 29189/-3, size 0-0 line 3137 [ 2656.215186] binder: 12240:12259 got reply transaction with no transaction stack [ 2656.215196] binder: 12240:12259 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.228637] binder_alloc: 12260: binder_alloc_buf, no vma [ 2656.228681] binder: 12260:12275 transaction failed 29189/-3, size 0-0 line 3137 [ 2656.344896] binder_alloc: 12320: binder_alloc_buf, no vma [ 2656.344940] binder: 12320:12330 transaction failed 29189/-3, size 0-0 line 3137 [ 2656.345800] binder: 12296:12326 got reply transaction with no transaction stack [ 2656.345809] binder: 12296:12326 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.423279] binder: 12354:12360 got reply transaction with no transaction stack [ 2656.423289] binder: 12354:12360 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.487135] binder_alloc: 12373: binder_alloc_buf, no vma [ 2656.487180] binder: 12373:12378 transaction failed 29189/-3, size 0-0 line 3137 [ 2656.545747] binder: 12397:12431 got reply transaction with no transaction stack [ 2656.545756] binder: 12397:12431 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.597448] binder_alloc: 12454: binder_alloc_buf, no vma [ 2656.597491] binder: 12454:12472 transaction failed 29189/-3, size 0-0 line 3137 [ 2656.599690] binder: 12457:12480 got reply transaction with no transaction stack [ 2656.599698] binder: 12457:12480 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.693236] binder_alloc: 12502: binder_alloc_buf, no vma [ 2656.693278] binder: 12502:12513 transaction failed 29189/-3, size 0-0 line 3137 [ 2656.699627] binder: 12506:12524 got reply transaction with no transaction stack [ 2656.699636] binder: 12506:12524 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.782254] binder: 12554:12565 got reply transaction with no transaction stack [ 2656.782262] binder: 12554:12565 transaction failed 29201/-71, size 104-24 line 2922 [ 2656.826924] binder: 12560:12579 transaction failed 29189/-22, size 0-0 line 3014 [ 2656.945576] binder: 12648:12657 got reply transaction with no transaction stack [ 2656.945585] binder: 12648:12657 transaction failed 29201/-71, size 104-24 line 2922 [ 2657.019415] binder_alloc: 12661: binder_alloc_buf, no vma [ 2657.019470] binder: 12661:12694 transaction failed 29189/-3, size 0-0 line 3137 [ 2657.094003] binder_alloc: 12718: binder_alloc_buf, no vma [ 2657.094049] binder: 12718:12746 transaction failed 29189/-3, size 0-0 line 3137 [ 2657.149399] binder: 12691:12711 got reply transaction with no transaction stack [ 2657.149409] binder: 12691:12711 transaction failed 29201/-71, size 104-24 line 2922 [ 2657.247738] binder: 12791:12801 got reply transaction with no transaction stack [ 2657.247748] binder: 12791:12801 transaction failed 29201/-71, size 104-24 line 2922 [ 2657.334257] binder: 12849:12860 got reply transaction with no transaction stack [ 2657.334266] binder: 12849:12860 transaction failed 29201/-71, size 104-24 line 2922 [ 2657.383178] binder_alloc: 12790: binder_alloc_buf, no vma [ 2657.383222] binder: 12790:12805 transaction failed 29189/-3, size 0-0 line 3137 [ 2657.389391] binder: 12876:12887 got reply transaction with no transaction stack [ 2657.389604] binder: 12876:12887 transaction failed 29201/-71, size 104-24 line 2922 [ 2657.515581] binder: 12915:12929 got reply transaction with no transaction stack [ 2657.515592] binder: 12915:12929 transaction failed 29201/-71, size 104-24 line 2922 [ 2657.519365] binder_alloc: 12908: binder_alloc_buf, no vma [ 2657.519409] binder: 12908:12927 transaction failed 29189/-3, size 0-0 line 3137 [ 2657.596287] binder_alloc: 12950: binder_alloc_buf, no vma [ 2657.596333] binder: 12950:12961 transaction failed 29189/-3, size 0-0 line 3137 [ 2657.677258] binder_alloc: 13004: binder_alloc_buf, no vma [ 2657.677303] binder: 13004:13010 transaction failed 29189/-3, size 0-0 line 3137 [ 2657.746747] binder: 13033:13043 got reply transaction with no transaction stack [ 2657.746757] binder: 13033:13043 transaction failed 29201/-71, size 104-24 line 2922 [ 2657.792703] binder_alloc: 13054: binder_alloc_buf, no vma [ 2657.792747] binder: 13054:13065 transaction failed 29189/-3, size 0-0 line 3137 [ 2657.888049] binder: 13084:13111 got reply transaction with no transaction stack [ 2657.888058] binder: 13084:13111 transaction failed 29201/-71, size 104-24 line 2922 [ 2658.033916] binder: 13179:13202 got reply transaction with no transaction stack [ 2658.033926] binder: 13179:13202 transaction failed 29201/-71, size 104-24 line 2922 [ 2658.035194] binder_alloc: 13197: binder_alloc_buf, no vma [ 2658.035238] binder: 13197:13224 transaction failed 29189/-3, size 0-0 line 3137 [ 2658.154198] binder_alloc: 13243: binder_alloc_buf, no vma [ 2658.154244] binder: 13243:13278 transaction failed 29189/-3, size 0-0 line 3137 [ 2658.181148] binder: 13240:13269 got reply transaction with no transaction stack [ 2658.181158] binder: 13240:13269 transaction failed 29201/-71, size 104-24 line 2922 [ 2658.325552] binder_alloc: 13309: binder_alloc_buf, no vma [ 2658.325598] binder: 13309:13316 transaction failed 29189/-3, size 0-0 line 3137 [ 2658.329403] binder: 13315:13330 got reply transaction with no transaction stack [ 2658.329413] binder: 13315:13330 transaction failed 29201/-71, size 104-24 line 2922 [ 2658.392013] binder_alloc: 13372: binder_alloc_buf, no vma [ 2658.392140] binder: 13372:13394 transaction failed 29189/-3, size 0-0 line 3137 [ 2658.399104] binder: 13395:13412 got reply transaction with no transaction stack [ 2658.399113] binder: 13395:13412 transaction failed 29201/-71, size 104-24 line 2922 [ 2658.490797] binder_alloc: 13416: binder_alloc_buf, no vma [ 2658.490837] binder: 13416:13428 transaction failed 29189/-3, size 0-0 line 3137 [ 2658.548287] binder_alloc: 13462: binder_alloc_buf, no vma [ 2658.548331] binder: 13462:13466 transaction failed 29189/-3, size 0-0 line 3137 [ 2658.568468] binder: 13448:13469 got reply transaction with no transaction stack [ 2658.568477] binder: 13448:13469 transaction failed 29201/-71, size 104-24 line 2922 [ 2658.675887] binder: 13525:13545 got reply transaction with no transaction stack [ 2658.675898] binder: 13525:13545 transaction failed 29201/-71, size 104-24 line 2922 [ 2658.692579] binder: 13513:13529 transaction failed 29189/-22, size 0-0 line 3014 [ 2658.812623] binder_alloc: 13602: binder_alloc_buf, no vma [ 2658.812668] binder: 13602:13621 transaction failed 29189/-3, size 0-0 line 3137 [ 2658.819900] binder: 13615:13640 got reply transaction with no transaction stack [ 2658.819911] binder: 13615:13640 transaction failed 29201/-71, size 104-24 line 2922 [ 2658.927973] binder_alloc: 13677: binder_alloc_buf, no vma [ 2658.928020] binder: 13677:13691 transaction failed 29189/-3, size 0-0 line 3137 [ 2658.977809] binder: 13712:13725 got reply transaction with no transaction stack [ 2658.977818] binder: 13712:13725 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.070871] binder_alloc: 13741: binder_alloc_buf, no vma [ 2659.070916] binder: 13741:13759 transaction failed 29189/-3, size 0-0 line 3137 [ 2659.106559] binder: 13750:13783 got reply transaction with no transaction stack [ 2659.106568] binder: 13750:13783 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.212398] binder_alloc: 13842: binder_alloc_buf, no vma [ 2659.212443] binder: 13842:13848 transaction failed 29189/-3, size 0-0 line 3137 [ 2659.214968] binder: 13835:13841 got reply transaction with no transaction stack [ 2659.214978] binder: 13835:13841 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.291529] binder_alloc: 13869: binder_alloc_buf, no vma [ 2659.291573] binder: 13869:13897 transaction failed 29189/-3, size 0-0 line 3137 [ 2659.295878] binder: 13867:13882 got reply transaction with no transaction stack [ 2659.295888] binder: 13867:13882 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.373233] binder: 13917:13937 got reply transaction with no transaction stack [ 2659.373243] binder: 13917:13937 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.424998] binder: 13967:13978 got reply transaction with no transaction stack [ 2659.425007] binder: 13967:13978 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.479304] binder_alloc: 13934: binder_alloc_buf, no vma [ 2659.479347] binder: 13934:13948 transaction failed 29189/-3, size 0-0 line 3137 [ 2659.604250] binder: 14022:14046 got reply transaction with no transaction stack [ 2659.604260] binder: 14022:14046 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.615176] binder_alloc: 14033: binder_alloc_buf, no vma [ 2659.615220] binder: 14033:14066 transaction failed 29189/-3, size 0-0 line 3137 [ 2659.721313] binder_alloc: 14100: binder_alloc_buf, no vma [ 2659.721359] binder: 14100:14109 transaction failed 29189/-3, size 0-0 line 3137 [ 2659.747840] binder: 14121:14127 got reply transaction with no transaction stack [ 2659.747850] binder: 14121:14127 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.835533] binder: 14144:14165 got reply transaction with no transaction stack [ 2659.835543] binder: 14144:14165 transaction failed 29201/-71, size 104-24 line 2922 [ 2659.863289] binder_alloc: 14143: binder_alloc_buf, no vma [ 2659.863334] binder: 14143:14172 transaction failed 29189/-3, size 0-0 line 3137 [ 2659.945627] binder: 14206:14221 got reply transaction with no transaction stack [ 2659.945636] binder: 14206:14221 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.011759] binder: 14285:14292 got reply transaction with no transaction stack [ 2660.011769] binder: 14285:14292 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.110313] binder_alloc: 14309: binder_alloc_buf, no vma [ 2660.110357] binder: 14309:14337 transaction failed 29189/-3, size 0-0 line 3137 [ 2660.115156] binder: 14329:14360 got reply transaction with no transaction stack [ 2660.115166] binder: 14329:14360 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.188512] binder: 14376:14382 got reply transaction with no transaction stack [ 2660.188582] binder: 14376:14382 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.230033] binder_alloc: 14389: binder_alloc_buf, no vma [ 2660.230079] binder: 14389:14394 transaction failed 29189/-3, size 0-0 line 3137 [ 2660.288019] binder: 14433:14441 got reply transaction with no transaction stack [ 2660.288028] binder: 14433:14441 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.385618] binder_alloc: 14459: binder_alloc_buf, no vma [ 2660.385663] binder: 14459:14477 transaction failed 29189/-3, size 0-0 line 3137 [ 2660.388279] binder: 14469:14493 got reply transaction with no transaction stack [ 2660.388289] binder: 14469:14493 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.474846] binder_alloc: 14517: binder_alloc_buf, no vma [ 2660.474886] binder: 14517:14543 transaction failed 29189/-3, size 0-0 line 3137 [ 2660.482902] binder: 14504:14552 got reply transaction with no transaction stack [ 2660.482912] binder: 14504:14552 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.537171] binder: 14554:14568 got reply transaction with no transaction stack [ 2660.537180] binder: 14554:14568 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.653036] binder: 14608:14617 got reply transaction with no transaction stack [ 2660.653045] binder: 14608:14617 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.680697] binder_alloc: 14589: binder_alloc_buf, no vma [ 2660.680741] binder: 14589:14612 transaction failed 29189/-3, size 0-0 line 3137 [ 2660.786534] binder_alloc: 14692: binder_alloc_buf, no vma [ 2660.786584] binder: 14692:14694 transaction failed 29189/-3, size 0-0 line 3137 [ 2660.786832] binder: 14685:14702 got reply transaction with no transaction stack [ 2660.786840] binder: 14685:14702 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.898704] binder: 14747:14761 got reply transaction with no transaction stack [ 2660.898714] binder: 14747:14761 transaction failed 29201/-71, size 104-24 line 2922 [ 2660.928431] binder_alloc: 14741: binder_alloc_buf, no vma [ 2660.928486] binder: 14741:14766 transaction failed 29189/-3, size 0-0 line 3137 [ 2661.012184] binder: 14781:14804 got reply transaction with no transaction stack [ 2661.012194] binder: 14781:14804 transaction failed 29201/-71, size 104-24 line 2922 [ 2661.063008] binder_alloc: 14827: binder_alloc_buf, no vma [ 2661.063051] binder: 14827:14843 transaction failed 29189/-3, size 0-0 line 3137 [ 2661.169790] binder_alloc: 14872: binder_alloc_buf, no vma [ 2661.169831] binder: 14872:14885 transaction failed 29189/-3, size 0-0 line 3137 [ 2661.172243] binder: 14874:14893 got reply transaction with no transaction stack [ 2661.172252] binder: 14874:14893 transaction failed 29201/-71, size 104-24 line 2922 [ 2661.323481] binder: 14966:14974 got reply transaction with no transaction stack [ 2661.323491] binder: 14966:14974 transaction failed 29201/-71, size 104-24 line 2922 [ 2661.422593] binder: 15001:15019 got reply transaction with no transaction stack [ 2661.422604] binder: 15001:15019 transaction failed 29201/-71, size 104-24 line 2922 [ 2661.497822] binder_alloc: 14903: binder_alloc_buf, no vma [ 2661.497868] binder: 14903:14980 transaction failed 29189/-3, size 0-0 line 3137 [ 2661.533107] binder: 15047:15055 got reply transaction with no transaction stack [ 2661.533117] binder: 15047:15055 transaction failed 29201/-71, size 104-24 line 2922 [ 2661.585284] binder_alloc: 15073: binder_alloc_buf, no vma [ 2661.585331] binder: 15073:15093 transaction failed 29189/-3, size 0-0 line 3137 [ 2661.617702] binder: 15091:15106 got reply transaction with no transaction stack [ 2661.617711] binder: 15091:15106 transaction failed 29201/-71, size 104-24 line 2922 [ 2661.676432] INFO: task init:5358 blocked for more than 140 seconds. [ 2661.676438] Not tainted 4.4.174+ #4 [ 2661.676440] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2661.676472] init D ffff88015231f718 29280 5358 1 0x00000000 [ 2661.676484] ffff88015231f718 ffff880151484740 472e16bb00dfe953 ffff880151484740 [ 2661.676492] 0000000000000000 ffff880151485000 ffff8801db71f180 ffff8801db71f1a8 [ 2661.676501] ffff8801db71e898 ffff88004e7f17c0 ffff880151484740 ffffed002a463001 [ 2661.676503] Call Trace: [ 2661.676518] [] schedule+0x99/0x1d0 [ 2661.676527] [] schedule_preempt_disabled+0x13/0x20 [ 2661.676536] [] mutex_lock_nested+0x3c2/0xb80 [ 2661.676546] [] ? tty_open+0x56a/0xf50 [ 2661.676554] [] ? assoc_array_gc+0x1233/0x12e0 [ 2661.676561] [] ? mutex_trylock+0x500/0x500 [ 2661.676569] [] ? kmem_cache_alloc_trace+0x123/0x2d0 [ 2661.676577] [] tty_open+0x56a/0xf50 [ 2661.676585] [] ? tty_init_dev+0x420/0x420 [ 2661.676593] [] ? chrdev_open+0xca/0x630 [ 2661.676601] [] ? tty_init_dev+0x420/0x420 [ 2661.676608] [] chrdev_open+0x230/0x630 [ 2661.676616] [] ? cdev_put.part.0+0x50/0x50 [ 2661.676627] [] do_dentry_open+0x38f/0xbd0 [ 2661.676634] [] ? __inode_permission2+0x9e/0x250 [ 2661.676642] [] ? cdev_put.part.0+0x50/0x50 [ 2661.676649] [] vfs_open+0x10b/0x210 [ 2661.676657] [] ? may_open.isra.0+0xe7/0x210 [ 2661.676664] [] path_openat+0x136f/0x4470 [ 2661.676672] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 2661.676680] [] ? may_open.isra.0+0x210/0x210 [ 2661.676689] [] ? trace_hardirqs_on+0x10/0x10 [ 2661.676697] [] do_filp_open+0x1a1/0x270 [ 2661.676705] [] ? user_path_mountpoint_at+0x50/0x50 [ 2661.676714] [] ? __alloc_fd+0x1ea/0x490 [ 2661.676721] [] ? _raw_spin_unlock+0x2d/0x50 [ 2661.676729] [] do_sys_open+0x2f8/0x600 [ 2661.676736] [] ? filp_open+0x70/0x70 [ 2661.676743] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 2661.676750] [] SyS_open+0x2d/0x40 [ 2661.676758] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 2661.676765] 1 lock held by init/5358: [ 2661.676792] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x56a/0xf50 [ 2661.676796] Sending NMI to all CPUs: [ 2661.678086] NMI backtrace for cpu 0 [ 2661.678090] CPU: 0 PID: 15117 Comm: syz-executor.2 Not tainted 4.4.174+ #4 [ 2661.678093] task: ffff8800633497c0 task.stack: ffff880149a68000 [ 2661.678097] RIP: 0010:[] [] print_context_stack+0x59/0xd0 [ 2661.678100] RSP: 0018:ffff880149a6f6a8 EFLAGS: 00000283 [ 2661.678103] RAX: 0000000000000000 RBX: ffff880149a6f920 RCX: 0000000000000000 [ 2661.678107] RDX: 0000000000000004 RSI: ffff8800b8d28408 RDI: 0000000000000001 [ 2661.678110] RBP: ffff880149a6f6f0 R08: ffff880149a6f7a8 R09: 0000000000000000 [ 2661.678113] R10: ffff880149a6f9d0 R11: ffffffff81998c51 R12: 0000000000000000 [ 2661.678116] R13: ffff880149a6f7a8 R14: ffff880149a6fff8 R15: ffff880149a68000 [ 2661.678120] FS: 000000000134b940(0063) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 2661.678123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2661.678127] CR2: 000000000046ee30 CR3: 000000014a157000 CR4: 00000000001606b0 [ 2661.678129] Stack: [ 2661.678132] ffff8800b8d28408 ffff880149a6f9d0 ffff880149a6f9d0 ffffffff8280f0b0 [ 2661.678135] ffff880149a6f7a8 ffffffff8280f0b0 ffff880149a6f748 ffff8801db607fc0 [ 2661.678138] 0000000000000000 ffff880149a6f780 ffffffff81012bb9 ffff880149a6f744 [ 2661.678140] Call Trace: [ 2661.678143] [] dump_trace+0x179/0x390 [ 2661.678146] [] save_stack_trace+0x26/0x50 [ 2661.678149] [] kasan_kmalloc.part.0+0x62/0xf0 [ 2661.678152] [] ? save_stack_trace+0x26/0x50 [ 2661.678155] [] ? kasan_kmalloc.part.0+0x62/0xf0 [ 2661.678157] [] ? __kmalloc+0xff/0x330 [ 2661.678160] [] ? context_struct_to_string+0x371/0x690 [ 2661.678162] [] ? security_sid_to_context_core+0x18a/0x200 [ 2661.678166] [] ? security_sid_to_context_force+0x2b/0x40 [ 2661.678169] [] ? selinux_inode_init_security+0x440/0x680 [ 2661.678173] [] ? security_inode_init_security+0x1a2/0x370 [ 2661.678175] [] ? shmem_symlink+0xee/0x670 [ 2661.678178] [] ? vfs_symlink2+0x1ef/0x3c0 [ 2661.678181] [] ? SyS_symlinkat+0x14e/0x240 [ 2661.678184] [] ? SyS_symlink+0x23/0x30 [ 2661.678187] [] ? entry_SYSCALL_64_fastpath+0x1e/0x9a [ 2661.678190] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 2661.678193] [] ? check_preemption_disabled+0x3c/0x200 [ 2661.678197] [] ? check_preemption_disabled+0x3c/0x200 [ 2661.678200] [] ? security_compute_sid.part.0+0xb5f/0x1160 [ 2661.678203] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 2661.678206] [] ? ebitmap_destroy+0xb3/0xe0 [ 2661.678209] [] ? flex_array_get+0x1b0/0x230 [ 2661.678212] [] ? check_preemption_disabled+0x3c/0x200 [ 2661.678216] [] ? check_preemption_disabled+0x3c/0x200 [ 2661.678219] [] ? kasan_unpoison_shadow+0x35/0x50 [ 2661.678222] [] kasan_kmalloc+0xb7/0xd0 [ 2661.678224] [] __kmalloc+0x141/0x330 [ 2661.678227] [] ? context_struct_to_string+0x371/0x690 [ 2661.678229] [] context_struct_to_string+0x371/0x690 [ 2661.678232] [] ? dump_masked_av_helper+0x90/0x90 [ 2661.678235] [] ? sidtab_search_core+0x18e/0x2b0 [ 2661.678238] [] security_sid_to_context_core+0x18a/0x200 [ 2661.678242] [] security_sid_to_context_force+0x2b/0x40 [ 2661.678245] [] selinux_inode_init_security+0x440/0x680 [ 2661.678248] [] ? inode_free_rcu+0x20/0x20 [ 2661.678251] [] security_inode_init_security+0x1a2/0x370 [ 2661.678254] [] ? shmem_encode_fh+0x330/0x330 [ 2661.678257] [] ? security_d_instantiate+0xe0/0xe0 [ 2661.678260] [] ? lockdep_annotate_inode_mutex_key+0x4c/0x60 [ 2661.678263] [] ? shmem_get_inode+0x3d3/0x6b0 [ 2661.678266] [] shmem_symlink+0xee/0x670 [ 2661.678269] [] ? shmem_file_read_iter+0x870/0x870 [ 2661.678272] [] ? selinux_inode_symlink+0x23/0x30 [ 2661.678274] [] ? security_inode_symlink+0xcd/0x100 [ 2661.678277] [] vfs_symlink2+0x1ef/0x3c0 [ 2661.678280] [] SyS_symlinkat+0x14e/0x240 [ 2661.678283] [] ? SyS_unlink+0x20/0x20 [ 2661.678286] [] ? retint_user+0x18/0x3c [ 2661.678289] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 2661.678291] [] SyS_symlink+0x23/0x30 [ 2661.678294] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 2661.678298] Code: 48 89 55 c8 74 5c 4c 39 e3 73 61 49 8d 84 24 00 80 ff ff 4 [ 2661.678301] NMI backtrace for cpu 1 [ 2661.678304] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4 [ 2661.678307] task: ffff8801da6c2f80 task.stack: ffff8800001e8000 [ 2661.678310] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1b0 [ 2661.678313] RSP: 0018:ffff8800001efc88 EFLAGS: 00000046 [ 2661.678316] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 2661.678319] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300 [ 2661.678322] RBP: ffff8800001efcb8 R08: 0000000000000018 R09: 0000000000000000 [ 2661.678325] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246 [ 2661.678328] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002 [ 2661.678332] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 2661.678334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2661.678337] CR2: 00000000018f5978 CR3: 00000000ab46c000 CR4: 00000000001606b0 [ 2661.678339] Stack: [ 2661.678342] 0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34 [ 2661.678346] 000000000001b6c0 0000000000000008 ffff8800001efcd8 ffffffff81092bee [ 2661.678349] 0000000000000008 ffffffff82924260 ffff8800001efd30 ffffffff81ab8252 [ 2661.678351] Call Trace: [ 2661.678354] [] nmi_raise_cpu_backtrace+0x5e/0x80 [ 2661.678357] [] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae [ 2661.678360] [] ? print_lock+0xa8/0xab [ 2661.678364] [] ? irq_force_complete_move+0x330/0x330 [ 2661.678367] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 2661.678369] [] watchdog.cold+0xd3/0xee [ 2661.678371] [] ? watchdog+0x2a5/0xa00 [ 2661.678374] [] ? reset_hung_task_detector+0x20/0x20 [ 2661.678376] [] kthread+0x273/0x310 [ 2661.678379] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 2661.678382] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 2661.678384] [] ? finish_task_switch+0x1e1/0x660 [ 2661.678387] [] ? finish_task_switch+0x1b3/0x660 [ 2661.678390] [] ? __schedule+0x7af/0x1ee0 [ 2661.678392] [] ? __schedule+0x7a3/0x1ee0 [ 2661.678395] [] ? __schedule+0x7af/0x1ee0 [ 2661.678397] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 2661.678400] [] ret_from_fork+0x55/0x80 [ 2661.678402] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 2661.678409] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 [ 2661.678533] Kernel panic - not syncing: hung_task: blocked tasks [ 2661.678541] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4 [ 2661.678552] 0000000000000000 f72589e3c53e95d1 ffff8800001efc60 ffffffff81aad1a1 [ 2661.678561] ffff880151484740 ffffffff82872120 dffffc0000000000 0000000000000002 [ 2661.678569] 00000000003fd1af ffff8800001efd40 ffffffff813a48c2 0000000041b58ab3 [ 2661.678570] Call Trace: [ 2661.678579] [] dump_stack+0xc1/0x120 [ 2661.678588] [] panic+0x1b9/0x37b [ 2661.678596] [] ? add_taint.cold+0x16/0x16 [ 2661.678603] [] ? find_next_bit+0x44/0x50 [ 2661.678612] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 2661.678620] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 2661.678628] [] watchdog.cold+0xe4/0xee [ 2661.678634] [] ? watchdog+0x2a5/0xa00 [ 2661.678642] [] ? reset_hung_task_detector+0x20/0x20 [ 2661.678649] [] kthread+0x273/0x310 [ 2661.678657] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 2661.678665] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 2661.678671] [] ? finish_task_switch+0x1e1/0x660 [ 2661.678677] [] ? finish_task_switch+0x1b3/0x660 [ 2661.678685] [] ? __schedule+0x7af/0x1ee0 [ 2661.678692] [] ? __schedule+0x7a3/0x1ee0 [ 2661.678699] [] ? __schedule+0x7af/0x1ee0 [ 2661.678707] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 2661.678714] [] ret_from_fork+0x55/0x80 [ 2661.678721] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 2661.679030] Kernel Offset: disabled [ 2665.303931] Rebooting in 86400 seconds..