0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, 0x0}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 827.455428] binder: 4025:4034 transaction failed 29189/-3, size 32-16 line 3134 ** 8 printk messages dropped ** [ 827.460918] binder: 4025:4034 unknown command 109446913 [ 827.460924] binder: 4025:4034 ioctl c0306201 20004000 returned -22 [ 827.461745] binder: 4025:4034 got reply transaction with no transaction stack [ 827.461751] binder: 4025:4034 transaction failed 29201/-71, size 0-0 line 2927 [ 827.461863] binder: 4024:4030 unknown command 109446913 [ 827.461869] binder: 4024:4030 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000003c0)={{}, {r1, r2+30000000}}, &(0x7f0000000400)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r4}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(0xffffffffffffffff, r0, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r5}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 827.504957] binder: BINDER_SET_CONTEXT_MGR already set ** 15 printk messages dropped ** [ 827.526286] binder: 4037:4039 unknown command 109446913 ** 15 printk messages dropped ** [ 827.584697] binder: 4047:4050 got transaction to invalid handle [ 827.584704] binder: 4047:4050 transaction failed 29201/-22, size 72-24 line 3011 [ 827.585383] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.585422] binder: 4047:4050 transaction failed 29189/-3, size 0-0 line 3134 [ 827.585720] binder: 4044:4053 got transaction to invalid handle 2018/03/30 07:11:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x0, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x0, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 827.585727] binder: 4044:4053 transaction failed 29201/-22, size 72-24 line 3011 ** 4 printk messages dropped ** [ 827.587118] binder_alloc: 5895: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 827.588133] binder: 4044:4053 unknown command 109446913 [ 827.588139] binder: 4044:4053 ioctl c0306201 20004000 returned -22 [ 827.588329] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.588430] binder: 4045:4052 transaction failed 29189/-3, size 0-0 line 3134 ** 2 printk messages dropped ** [ 827.589432] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:11:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 827.589438] binder: 4048:4049 ioctl 40046207 0 returned -16 [ 827.589769] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.589805] binder: 4048:4049 transaction failed 29189/-3, size 32-16 line 3134 [ 827.589974] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.590009] binder: 4048:4049 transaction failed 29189/-3, size 0-0 line 3134 ** 5 printk messages dropped ** [ 827.603445] binder: 4042:4054 ioctl 40046207 0 returned -16 ** 7 printk messages dropped ** [ 827.608936] binder: 4042:4054 transaction failed 29201/-71, size 0-0 line 2927 2018/03/30 07:11:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 12 printk messages dropped ** [ 827.664615] binder: 4046:4060 got transaction to invalid handle ** 1 printk messages dropped ** [ 827.671491] binder: 4046:4058 unknown command -393869567 ** 8 printk messages dropped ** [ 827.714922] binder: 4062:4068 ioctl 40046207 0 returned -16 ** 4 printk messages dropped ** [ 827.715547] binder: 4063:4069 got transaction to invalid handle [ 827.715554] binder: 4063:4069 transaction failed 29201/-22, size 72-24 line 3011 [ 827.715679] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.715838] binder: 4062:4068 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000003c0)={{}, {r1, r2+30000000}}, &(0x7f0000000400)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r4}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(0xffffffffffffffff, r0, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r5}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x0, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 827.715962] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.715996] binder: 4063:4069 transaction failed 29189/-3, size 0-0 line 3134 ** 5 printk messages dropped ** [ 827.717891] binder: 4062:4068 transaction failed 29201/-71, size 0-0 line 2927 ** 5 printk messages dropped ** [ 827.727122] binder: 4061:4066 ioctl c0306201 20004000 returned -22 [ 827.728006] binder: 4061:4066 got reply transaction with no transaction stack [ 827.728012] binder: 4061:4066 transaction failed 29201/-71, size 0-0 line 2927 ** 7 printk messages dropped ** [ 827.746456] binder: 4065:4070 ioctl 40046207 0 returned -16 [ 827.746718] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.746754] binder: 4065:4070 transaction failed 29189/-3, size 32-16 line 3134 [ 827.746902] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.746936] binder: 4065:4070 transaction failed 29189/-3, size 0-0 line 3134 [ 827.747044] binder: 4065:4070 unknown command 109446913 ** 17 printk messages dropped ** [ 827.809840] binder: 4073:4076 got reply transaction with no transaction stack 2018/03/30 07:11:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x0, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 11 printk messages dropped ** [ 827.868587] binder: BINDER_SET_CONTEXT_MGR already set [ 827.868594] binder: 4087:4090 ioctl 40046207 0 returned -16 [ 827.868873] binder_alloc: 5895: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 827.869682] binder: 4084:4094 got transaction to invalid handle ** 1 printk messages dropped ** [ 827.869778] binder: 4087:4090 got transaction to invalid handle [ 827.869784] binder: 4087:4090 transaction failed 29201/-22, size 72-24 line 3011 [ 827.870293] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 827.870328] binder: 4087:4090 transaction failed 29189/-3, size 0-0 line 3134 [ 827.870783] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.870817] binder: 4084:4094 transaction failed 29189/-3, size 0-0 line 3134 [ 827.872469] binder: 4087:4090 unknown command 109446913 ** 3 printk messages dropped ** [ 827.872775] binder: 4084:4094 unknown command 109446913 [ 827.872781] binder: 4084:4094 ioctl c0306201 20004000 returned -22 [ 827.873806] binder_alloc: 5895: binder_alloc_buf, no vma [ 827.873842] binder: 4085:4091 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 4 printk messages dropped ** [ 827.875395] binder: 4085:4091 unknown command 109446913 ** 5 printk messages dropped ** [ 827.876878] binder: 4083:4093 unknown command 109446913 ** 15 printk messages dropped ** [ 827.919761] binder: 4088:4097 got transaction to invalid handle ** 5 printk messages dropped ** [ 827.945569] binder: 4088:4097 got reply transaction with no transaction stack ** 2 printk messages dropped ** [ 827.992494] binder: 4099:4104 transaction failed 29201/-22, size 72-24 line 3011 ** 9 printk messages dropped ** [ 827.997924] binder: 4098:4103 transaction failed 29189/-3, size 0-0 line 3134 [ 828.007341] binder: BINDER_SET_CONTEXT_MGR already set [ 828.007348] binder: 4100:4110 ioctl 40046207 0 returned -16 [ 828.007535] binder: 4100:4110 got transaction to invalid handle [ 828.007541] binder: 4100:4110 transaction failed 29201/-22, size 72-24 line 3011 [ 828.011536] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.011573] binder: 4100:4110 transaction failed 29189/-3, size 0-0 line 3134 ** 1 printk messages dropped ** [ 828.012294] binder: 4101:4107 ioctl 40046207 0 returned -16 2018/03/30 07:11:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 828.012689] binder: 4101:4107 got transaction to invalid handle ** 9 printk messages dropped ** [ 828.019051] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.019093] binder: 4102:4108 transaction failed 29189/-3, size 32-16 line 3134 ** 8 printk messages dropped ** [ 828.029670] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.029706] binder: 4105:4111 transaction failed 29189/-3, size 32-16 line 3134 [ 828.030558] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.030592] binder: 4105:4111 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 828.030862] binder: 4105:4111 unknown command 109446913 [ 828.030868] binder: 4105:4111 ioctl c0306201 20004000 returned -22 [ 828.031692] binder: 4105:4111 got reply transaction with no transaction stack ** 22 printk messages dropped ** [ 828.109834] binder: 4117:4118 ioctl c0306201 20004000 returned -22 ** 9 printk messages dropped ** [ 828.158030] binder: 4121:4131 ioctl 40046207 0 returned -16 [ 828.158162] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.158199] binder: 4120:4130 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 828.158478] binder_alloc: 5895: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 828.159194] binder: 4124:4127 transaction failed 29189/-3, size 0-0 line 3134 [ 828.159361] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.159394] binder: 4121:4131 transaction failed 29189/-3, size 0-0 line 3134 [ 828.159611] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.159645] binder: 4122:4129 transaction failed 29189/-3, size 0-0 line 3134 [ 828.159804] binder: 4120:4130 unknown command 109446913 [ 828.159811] binder: 4120:4130 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 828.160922] binder: 4120:4130 got reply transaction with no transaction stack [ 828.160929] binder: 4120:4130 transaction failed 29201/-71, size 0-0 line 2927 [ 828.161155] binder: 4124:4127 unknown command 109446913 ** 8 printk messages dropped ** [ 828.162432] binder: 4121:4131 ioctl c0306201 20004000 returned -22 [ 828.163415] binder: 4124:4127 got reply transaction with no transaction stack [ 828.163421] binder: 4124:4127 transaction failed 29201/-71, size 0-0 line 2927 2018/03/30 07:11:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ** 3 printk messages dropped ** [ 828.188271] binder: 4119:4132 ioctl 40046207 0 returned -16 ** 15 printk messages dropped ** [ 828.242101] binder: 4123:4134 transaction failed 29201/-71, size 0-0 line 2927 [ 828.276761] binder: BINDER_SET_CONTEXT_MGR already set [ 828.276768] binder: 4137:4142 ioctl 40046207 0 returned -16 [ 828.276901] binder_alloc: 5895: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 828.278990] binder: 4137:4142 unknown command 109446913 ** 9 printk messages dropped ** [ 828.286530] binder: BINDER_SET_CONTEXT_MGR already set [ 828.286535] binder: 4135:4141 ioctl 40046207 0 returned -16 [ 828.286662] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.286698] binder: 4135:4141 transaction failed 29189/-3, size 32-16 line 3134 ** 1 printk messages dropped ** [ 828.286980] binder: 4135:4141 transaction failed 29189/-3, size 0-0 line 3134 ** 4 printk messages dropped ** [ 828.291576] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.291612] binder: 4139:4146 transaction failed 29189/-3, size 32-16 line 3134 ** 6 printk messages dropped ** [ 828.295393] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300), 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 828.295427] binder: 4140:4147 transaction failed 29189/-3, size 0-0 line 3134 ** 8 printk messages dropped ** [ 828.324034] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.324116] binder: 4143:4149 transaction failed 29189/-3, size 0-0 line 3134 [ 828.324496] binder: 4143:4149 unknown command 109446913 [ 828.324502] binder: 4143:4149 ioctl c0306201 20004000 returned -22 [ 828.352239] binder: BINDER_SET_CONTEXT_MGR already set [ 828.352247] binder: 4145:4152 ioctl 40046207 0 returned -16 [ 828.353428] binder: 4145:4152 got transaction to invalid handle 2018/03/30 07:11:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 21 printk messages dropped ** [ 828.391927] binder_alloc: 5895: binder_alloc_buf, no vma ** 14 printk messages dropped ** [ 828.437668] binder: 4161:4168 transaction failed 29201/-22, size 72-24 line 3011 [ 828.437801] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.437835] binder: 4159:4169 transaction failed 29189/-3, size 32-16 line 3134 ** 4 printk messages dropped ** [ 828.438605] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 828.438663] binder: 4164:4166 unknown command 109446913 2018/03/30 07:11:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300), 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 1 printk messages dropped ** [ 828.438959] binder_alloc: 5895: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 828.440046] binder: 4161:4168 unknown command 109446913 [ 828.440052] binder: 4161:4168 ioctl c0306201 20004000 returned -22 [ 828.440290] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.440324] binder: 4160:4170 transaction failed 29189/-3, size 0-0 line 3134 [ 828.441999] binder: 4160:4170 unknown command 109446913 [ 828.442005] binder: 4160:4170 ioctl c0306201 20004000 returned -22 [ 828.443194] binder: 4160:4170 got reply transaction with no transaction stack 2018/03/30 07:11:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 828.443201] binder: 4160:4170 transaction failed 29201/-71, size 0-0 line 2927 [ 828.448856] binder: BINDER_SET_CONTEXT_MGR already set [ 828.448863] binder: 4163:4165 ioctl 40046207 0 returned -16 ** 4 printk messages dropped ** [ 828.459001] binder: 4163:4165 unknown command 109446913 ** 7 printk messages dropped ** [ 828.465326] binder: 4158:4171 unknown command 109446913 ** 17 printk messages dropped ** [ 828.556415] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 2 printk messages dropped ** [ 828.556661] binder: 4176:4181 transaction failed 29189/-3, size 0-0 line 3134 [ 828.557718] binder: 4175:4180 unknown command 109446913 ** 5 printk messages dropped ** [ 828.574315] binder: 4174:4182 got transaction to invalid handle [ 828.574322] binder: 4174:4182 transaction failed 29201/-22, size 72-24 line 3011 [ 828.574658] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.574695] binder: 4174:4182 transaction failed 29189/-3, size 0-0 line 3134 [ 828.574824] binder: 4174:4182 unknown command 109446913 [ 828.574830] binder: 4174:4182 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {0x0, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x0, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300), 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x0, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 828.579640] binder: BINDER_SET_CONTEXT_MGR already set [ 828.579646] binder: 4178:4185 ioctl 40046207 0 returned -16 ** 9 printk messages dropped ** [ 828.583994] binder: 4177:4183 transaction failed 29201/-22, size 72-24 line 3011 [ 828.584381] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.584417] binder: 4177:4183 transaction failed 29189/-3, size 0-0 line 3134 [ 828.584546] binder: 4178:4185 got reply transaction with no transaction stack ** 6 printk messages dropped ** [ 828.584986] binder: 4179:4186 transaction failed 29189/-3, size 0-0 line 3134 [ 828.586112] binder: 4179:4186 unknown command 109446913 [ 828.586119] binder: 4179:4186 ioctl c0306201 20004000 returned -22 [ 828.587005] binder: 4177:4183 unknown command 109446913 [ 828.587011] binder: 4177:4183 ioctl c0306201 20004000 returned -22 [ 828.643180] binder: BINDER_SET_CONTEXT_MGR already set [ 828.643187] binder: 4190:4192 ioctl 40046207 0 returned -16 ** 23 printk messages dropped ** [ 828.673701] binder: 4194:4195 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x0, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x0, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 11 printk messages dropped ** [ 828.720230] binder: 4198:4208 transaction failed 29201/-22, size 72-24 line 3011 [ 828.720553] binder_alloc: 5895: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 828.721002] binder: 4201:4204 transaction failed 29189/-3, size 0-0 line 3134 ** 5 printk messages dropped ** [ 828.723620] binder: 4201:4204 ioctl c0306201 20004000 returned -22 ** 1 printk messages dropped ** [ 828.726146] binder: 4200:4206 ioctl 40046207 0 returned -16 [ 828.726230] binder: BINDER_SET_CONTEXT_MGR already set [ 828.726235] binder: 4197:4207 ioctl 40046207 0 returned -16 2018/03/30 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {0x0, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) ** 2 printk messages dropped ** [ 828.726705] binder: 4197:4207 got transaction to invalid handle ** 1 printk messages dropped ** [ 828.726885] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.726919] binder: 4200:4206 transaction failed 29189/-3, size 0-0 line 3134 [ 828.727354] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.727390] binder: 4197:4207 transaction failed 29189/-3, size 0-0 line 3134 [ 828.727578] binder: 4200:4206 unknown command 109446913 [ 828.727584] binder: 4200:4206 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 828.728348] binder: 4200:4206 got reply transaction with no transaction stack [ 828.728355] binder: 4200:4206 transaction failed 29201/-71, size 0-0 line 2927 ** 10 printk messages dropped ** [ 828.749294] binder: 4196:4209 got reply transaction with no transaction stack ** 13 printk messages dropped ** [ 828.846475] binder: BINDER_SET_CONTEXT_MGR already set ** 8 printk messages dropped ** [ 828.850896] binder: 4214:4219 transaction failed 29189/-3, size 0-0 line 3134 [ 828.855275] binder: BINDER_SET_CONTEXT_MGR already set ** 4 printk messages dropped ** [ 828.855934] binder: 4215:4220 transaction failed 29189/-3, size 0-0 line 3134 ** 4 printk messages dropped ** [ 828.856382] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.856416] binder: 4216:4221 transaction failed 29189/-3, size 32-16 line 3134 [ 828.857428] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.857462] binder: 4216:4221 transaction failed 29189/-3, size 0-0 line 3134 [ 828.857571] binder: 4216:4221 unknown command 109446913 [ 828.857577] binder: 4216:4221 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x0, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x0, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {0x0, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) ** 11 printk messages dropped ** [ 828.896506] binder: 4222:4225 transaction failed 29189/-3, size 32-16 line 3134 [ 828.896656] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.896693] binder: 4222:4225 transaction failed 29189/-3, size 0-0 line 3134 [ 828.896892] binder: 4222:4225 unknown command 109446913 ** 6 printk messages dropped ** [ 828.931980] binder: 4229:4231 transaction failed 29201/-22, size 72-24 line 3011 [ 828.932103] binder_alloc: 5895: binder_alloc_buf, no vma [ 828.932141] binder: 4229:4231 transaction failed 29189/-3, size 0-0 line 3134 [ 828.932406] binder: 4229:4231 unknown command 109446913 [ 828.932412] binder: 4229:4231 ioctl c0306201 20004000 returned -22 [ 828.938160] binder: BINDER_SET_CONTEXT_MGR already set [ 828.938167] binder: 4226:4228 ioctl 40046207 0 returned -16 ** 14 printk messages dropped ** [ 828.959781] binder: 4233:4234 unknown command 109446913 ** 27 printk messages dropped ** [ 829.005291] binder: 4238:4245 unknown command 109446913 [ 829.005297] binder: 4238:4245 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, 0x0}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x0, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ** 1 printk messages dropped ** [ 829.006428] binder: 4240:4243 ioctl 40046207 0 returned -16 [ 829.007412] binder: 4237:4246 unknown command 109446913 ** 4 printk messages dropped ** [ 829.009401] binder: 4237:4246 transaction failed 29201/-71, size 0-0 line 2927 [ 829.009525] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.009560] binder: 4240:4243 transaction failed 29189/-3, size 0-0 line 3134 [ 829.009978] binder: 4240:4243 unknown command 109446913 [ 829.009985] binder: 4240:4243 ioctl c0306201 20004000 returned -22 [ 829.010937] binder: 4240:4243 got reply transaction with no transaction stack 2018/03/30 07:11:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 829.010943] binder: 4240:4243 transaction failed 29201/-71, size 0-0 line 2927 [ 829.034876] binder: BINDER_SET_CONTEXT_MGR already set [ 829.034884] binder: 4235:4248 ioctl 40046207 0 returned -16 [ 829.034964] binder: 4235:4248 got transaction to invalid handle [ 829.034971] binder: 4235:4248 transaction failed 29201/-22, size 72-24 line 3011 [ 829.035105] binder_alloc: 5895: binder_alloc_buf, no vma ** 9 printk messages dropped ** [ 829.075947] binder: 4239:4250 got reply transaction with no transaction stack 2018/03/30 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, 0x0}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 14 printk messages dropped ** [ 829.120564] binder: 4252:4256 transaction failed 29189/-3, size 0-0 line 3134 ** 3 printk messages dropped ** [ 829.124683] binder: 4252:4256 transaction failed 29201/-71, size 0-0 line 2927 ** 7 printk messages dropped ** [ 829.145080] binder: 4253:4261 transaction failed 29201/-22, size 72-24 line 3011 ** 9 printk messages dropped ** [ 829.148921] binder: 4257:4262 transaction failed 29189/-3, size 0-0 line 3134 [ 829.149043] binder: 4257:4262 unknown command 109446913 [ 829.149049] binder: 4257:4262 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x0, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, 0x0}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 829.149210] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.149246] binder: 4258:4263 transaction failed 29189/-3, size 32-16 line 3134 [ 829.150313] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.150349] binder: 4258:4263 transaction failed 29189/-3, size 0-0 line 3134 [ 829.208240] binder: BINDER_SET_CONTEXT_MGR already set [ 829.208247] binder: 4265:4267 ioctl 40046207 0 returned -16 ** 7 printk messages dropped ** [ 829.210813] binder: 4260:4268 ioctl 40046207 0 returned -16 [ 829.212000] binder: 4260:4268 got transaction to invalid handle [ 829.212008] binder: 4260:4268 transaction failed 29201/-22, size 72-24 line 3011 [ 829.214240] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.214277] binder: 4260:4264 transaction failed 29189/-3, size 0-0 line 3134 [ 829.214412] binder: 4260:4264 unknown command -393869567 [ 829.214418] binder: 4260:4264 ioctl c0306201 20004000 returned -22 ** 18 printk messages dropped ** [ 829.283694] binder_alloc: 5895: binder_alloc_buf, no vma ** 22 printk messages dropped ** [ 829.290135] binder: 4277:4278 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x51, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x0, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 829.290311] binder_alloc: 5895: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 829.290505] binder: 4272:4282 transaction failed 29189/-3, size 0-0 line 3134 ** 1 printk messages dropped ** [ 829.291501] binder: 4272:4282 ioctl c0306201 20004000 returned -22 ** 3 printk messages dropped ** [ 829.312311] binder: 4271:4284 transaction failed 29189/-3, size 32-16 line 3134 [ 829.316033] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.316071] binder: 4271:4284 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 829.324755] binder: BINDER_SET_CONTEXT_MGR already set [ 829.324764] binder: 4276:4286 ioctl 40046207 0 returned -16 [ 829.326702] binder: 4276:4286 got transaction to invalid handle [ 829.326710] binder: 4276:4286 transaction failed 29201/-22, size 72-24 line 3011 [ 829.335631] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.335671] binder: 4276:4286 transaction failed 29189/-3, size 0-0 line 3134 [ 829.350296] binder: 4276:4286 unknown command -393869567 [ 829.350304] binder: 4276:4286 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 829.404618] binder_alloc: 5895: binder_alloc_buf, no vma ** 20 printk messages dropped ** [ 829.423985] binder: 4289:4296 ioctl 40046207 0 returned -16 ** 14 printk messages dropped ** [ 829.436633] binder: 4291:4297 got reply transaction with no transaction stack ** 1 printk messages dropped ** [ 829.441585] binder_alloc: 5895: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 829.495389] binder: BINDER_SET_CONTEXT_MGR already set [ 829.495396] binder: 4302:4304 ioctl 40046207 0 returned -16 [ 829.495521] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.495560] binder: 4302:4304 transaction failed 29189/-3, size 32-16 line 3134 [ 829.495678] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.495713] binder: 4302:4304 transaction failed 29189/-3, size 0-0 line 3134 [ 829.495801] binder: 4302:4304 unknown command 109446913 [ 829.495807] binder: 4302:4304 ioctl c0306201 20004000 returned -22 ** 2 printk messages dropped ** [ 829.499810] binder: BINDER_SET_CONTEXT_MGR already set ** 7 printk messages dropped ** [ 829.523463] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:11:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0x0, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x51, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ** 1 printk messages dropped ** [ 829.523603] binder_alloc: 5895: binder_alloc_buf, no vma ** 7 printk messages dropped ** [ 829.567538] binder: BINDER_SET_CONTEXT_MGR already set [ 829.567546] binder: 4311:4318 ioctl 40046207 0 returned -16 [ 829.567611] binder: BINDER_SET_CONTEXT_MGR already set [ 829.567616] binder: 4309:4319 ioctl 40046207 0 returned -16 [ 829.568036] binder: 4311:4318 got transaction to invalid handle [ 829.568043] binder: 4311:4318 transaction failed 29201/-22, size 72-24 line 3011 [ 829.568176] binder: 4309:4319 got transaction to invalid handle 2018/03/30 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 6 printk messages dropped ** [ 829.569121] binder: 4311:4318 transaction failed 29189/-3, size 0-0 line 3134 ** 29 printk messages dropped ** [ 829.600986] binder: 4308:4321 ioctl c0306201 20004000 returned -22 [ 829.601824] binder: 4308:4321 got reply transaction with no transaction stack [ 829.601830] binder: 4308:4321 transaction failed 29201/-71, size 0-0 line 2927 ** 4 printk messages dropped ** [ 829.619483] binder_alloc: 5895: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 829.627163] binder: 4312:4323 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x51, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0x0, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ** 3 printk messages dropped ** [ 829.686687] binder: 4326:4330 transaction failed 29201/-22, size 72-24 line 3011 ** 1 printk messages dropped ** [ 829.686948] binder: 4326:4330 transaction failed 29189/-3, size 0-0 line 3134 ** 1 printk messages dropped ** [ 829.687577] binder: 4326:4330 ioctl c0306201 20004000 returned -22 ** 1 printk messages dropped ** [ 829.689980] binder: 4325:4332 ioctl 40046207 0 returned -16 [ 829.690379] binder: 4325:4332 got transaction to invalid handle [ 829.690386] binder: 4325:4332 transaction failed 29201/-22, size 72-24 line 3011 2018/03/30 07:11:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 829.690743] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.690779] binder: 4325:4332 transaction failed 29189/-3, size 0-0 line 3134 [ 829.694691] binder: 4325:4332 unknown command 109446913 ** 4 printk messages dropped ** [ 829.698993] binder: 4324:4333 transaction failed 29201/-22, size 72-24 line 3011 ** 9 printk messages dropped ** [ 829.714869] binder: 4328:4335 transaction failed 29189/-3, size 32-16 line 3134 ** 12 printk messages dropped ** [ 829.728524] binder: 4331:4337 unknown command 109446913 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x7a, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f08"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 9 printk messages dropped ** [ 829.775243] binder: 4329:4341 unknown command -393869567 [ 829.775250] binder: 4329:4341 ioctl c0306201 20004000 returned -22 ** 8 printk messages dropped ** [ 829.801468] binder: BINDER_SET_CONTEXT_MGR already set [ 829.801474] binder: 4343:4344 ioctl 40046207 0 returned -16 [ 829.801605] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.801642] binder: 4343:4344 transaction failed 29189/-3, size 72-24 line 3134 [ 829.801782] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.801816] binder: 4343:4344 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0x0, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x7a, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f08"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 829.801924] binder: 4343:4344 unknown command 109446913 [ 829.801930] binder: 4343:4344 ioctl c0306201 20004000 returned -22 ** 1 printk messages dropped ** [ 829.802687] binder: 4343:4344 transaction failed 29201/-71, size 0-0 line 2927 ** 8 printk messages dropped ** [ 829.848511] binder: 4351:4352 got transaction to invalid handle [ 829.848517] binder: 4351:4352 transaction failed 29201/-22, size 72-24 line 3011 ** 6 printk messages dropped ** [ 829.850737] binder: 4351:4352 unknown command 109446913 [ 829.850743] binder: 4351:4352 ioctl c0306201 20004000 returned -22 [ 829.850874] binder: BINDER_SET_CONTEXT_MGR already set [ 829.850879] binder: 4347:4357 ioctl 40046207 0 returned -16 [ 829.852826] binder: 4347:4357 got transaction to invalid handle [ 829.852832] binder: 4347:4357 transaction failed 29201/-22, size 72-24 line 3011 [ 829.853071] binder_alloc: 5895: binder_alloc_buf, no vma ** 12 printk messages dropped ** [ 829.860751] binder: 4349:4354 transaction failed 29201/-71, size 0-0 line 2927 2018/03/30 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ** 23 printk messages dropped ** [ 829.965918] binder: 4362:4366 transaction failed 29189/-3, size 0-0 line 3134 [ 829.966592] binder: 4362:4366 unknown command 109446913 ** 2 printk messages dropped ** [ 829.968103] binder: 4361:4369 transaction failed 29201/-22, size 72-24 line 3011 ** 3 printk messages dropped ** [ 829.970114] binder: 4364:4370 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 829.970245] binder: 4361:4369 ioctl c0306201 20004000 returned -22 [ 829.971202] binder: 4364:4370 got transaction to invalid handle [ 829.971209] binder: 4364:4370 transaction failed 29201/-22, size 72-24 line 3011 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x7a, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f08"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 829.971468] binder_alloc: 5895: binder_alloc_buf, no vma [ 829.971502] binder: 4364:4370 transaction failed 29189/-3, size 0-0 line 3134 [ 829.976327] binder: 4364:4370 unknown command 109446913 [ 829.976334] binder: 4364:4370 ioctl c0306201 20004000 returned -22 ** 1 printk messages dropped ** [ 829.977657] binder: 4363:4371 transaction failed 29189/-3, size 32-16 line 3134 [ 829.977786] binder_alloc: 5895: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 829.994357] binder: 4367:4372 transaction failed 29189/-3, size 32-16 line 3134 2018/03/30 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 5 printk messages dropped ** [ 829.995514] binder: 4367:4372 transaction failed 29201/-71, size 0-0 line 2927 ** 5 printk messages dropped ** [ 830.008515] binder: 4365:4374 transaction failed 29189/-3, size 0-0 line 3134 ** 11 printk messages dropped ** [ 830.042530] binder: 4368:4373 ioctl c0306201 20004000 returned -22 ** 19 printk messages dropped ** [ 830.120182] binder: 4388:4389 ioctl 40046207 0 returned -16 [ 830.120355] binder: 4388:4389 got transaction to invalid handle [ 830.120362] binder: 4388:4389 transaction failed 29201/-22, size 72-24 line 3011 [ 830.120436] binder: BINDER_SET_CONTEXT_MGR already set [ 830.120441] binder: 4385:4392 ioctl 40046207 0 returned -16 [ 830.120608] binder: 4385:4392 got transaction to invalid handle [ 830.120614] binder: 4385:4392 transaction failed 29201/-22, size 72-24 line 3011 [ 830.120743] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.120780] binder: 4388:4389 transaction failed 29189/-3, size 0-0 line 3134 ** 9 printk messages dropped ** [ 830.124305] binder: 4383:4393 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x8e, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 830.124494] binder: BINDER_SET_CONTEXT_MGR already set [ 830.124499] binder: 4387:4390 ioctl 40046207 0 returned -16 [ 830.125302] binder_alloc: 5895: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 830.128029] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.128064] binder: 4384:4394 transaction failed 29189/-3, size 32-16 line 3134 [ 830.128235] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.128269] binder: 4384:4394 transaction failed 29189/-3, size 0-0 line 3134 [ 830.128303] binder: 4387:4390 unknown command 109446913 [ 830.128309] binder: 4387:4390 ioctl c0306201 20004000 returned -22 [ 830.129331] binder: 4387:4390 got reply transaction with no transaction stack ** 10 printk messages dropped ** [ 830.169006] binder: 4386:4397 ioctl 40046207 0 returned -16 ** 22 printk messages dropped ** [ 830.243457] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.243493] binder: 4399:4404 transaction failed 29189/-3, size 0-0 line 3134 ** 7 printk messages dropped ** [ 830.258219] binder: 4402:4407 transaction failed 29189/-3, size 32-16 line 3134 2018/03/30 07:11:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x64, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x8e, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 830.258403] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.258437] binder: 4402:4407 transaction failed 29189/-3, size 0-0 line 3134 ** 1 printk messages dropped ** [ 830.262695] binder: 4402:4407 ioctl c0306201 20004000 returned -22 [ 830.263557] binder: 4402:4407 got reply transaction with no transaction stack [ 830.263563] binder: 4402:4407 transaction failed 29201/-71, size 0-0 line 2927 [ 830.267271] binder: BINDER_SET_CONTEXT_MGR already set [ 830.267277] binder: 4401:4408 ioctl 40046207 0 returned -16 2018/03/30 07:11:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) ** 1 printk messages dropped ** [ 830.267359] binder: 4401:4408 transaction failed 29201/-22, size 72-24 line 3011 [ 830.267549] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.267588] binder: 4401:4408 transaction failed 29189/-3, size 0-0 line 3134 [ 830.274072] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.274175] binder: 4403:4409 transaction failed 29189/-3, size 32-16 line 3134 ** 14 printk messages dropped ** [ 830.328027] binder_alloc: 5895: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 830.328196] binder: 4410:4413 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x8e, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 6 printk messages dropped ** [ 830.352484] binder_alloc: 5895: binder_alloc_buf, no vma ** 12 printk messages dropped ** [ 830.397777] binder: 4426:4428 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 830.398041] binder: 4426:4428 transaction failed 29201/-22, size 72-24 line 3011 ** 8 printk messages dropped ** [ 830.403229] binder: BINDER_SET_CONTEXT_MGR already set [ 830.403235] binder: 4422:4430 ioctl 40046207 0 returned -16 [ 830.403446] binder: 4422:4430 got transaction to invalid handle [ 830.403452] binder: 4422:4430 transaction failed 29201/-22, size 72-24 line 3011 [ 830.403588] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.403624] binder: 4423:4427 transaction failed 29189/-3, size 0-0 line 3134 ** 2 printk messages dropped ** [ 830.404039] binder_alloc: 5895: binder_alloc_buf, no vma ** 9 printk messages dropped ** [ 830.433595] binder: BINDER_SET_CONTEXT_MGR already set [ 830.433601] binder: 4420:4433 ioctl 40046207 0 returned -16 [ 830.433678] binder: 4420:4433 got transaction to invalid handle 2018/03/30 07:11:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x64, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x98, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) ** 2 printk messages dropped ** [ 830.433962] binder: 4420:4433 transaction failed 29189/-3, size 0-0 line 3134 ** 2 printk messages dropped ** [ 830.441202] binder: 4424:4436 got transaction to invalid handle [ 830.441209] binder: 4424:4436 transaction failed 29201/-22, size 72-24 line 3011 [ 830.456017] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.456056] binder: 4424:4436 transaction failed 29189/-3, size 0-0 line 3134 [ 830.464109] binder: 4424:4436 unknown command -393869567 [ 830.464117] binder: 4424:4436 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x98, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ** 23 printk messages dropped ** [ 830.529263] binder: 4437:4447 transaction failed 29201/-22, size 72-24 line 3011 ** 14 printk messages dropped ** [ 830.569517] binder: 4444:4451 got transaction to invalid handle [ 830.569524] binder: 4444:4451 transaction failed 29201/-22, size 72-24 line 3011 ** 2 printk messages dropped ** [ 830.569762] binder: 4444:4451 unknown command 109446913 ** 3 printk messages dropped ** [ 830.595710] binder: 4445:4455 got transaction to invalid handle ** 3 printk messages dropped ** [ 830.604154] binder: 4445:4455 unknown command -393869567 2018/03/30 07:11:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x64, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x0, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) ** 1 printk messages dropped ** [ 830.605933] binder: 4445:4455 got reply transaction with no transaction stack [ 830.605940] binder: 4445:4455 transaction failed 29201/-71, size 0-0 line 2927 [ 830.606040] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 830.606176] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.606213] binder: 4454:4456 transaction failed 29189/-3, size 32-16 line 3134 [ 830.606732] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.606768] binder: 4454:4456 transaction failed 29189/-3, size 0-0 line 3134 [ 830.606902] binder: 4454:4456 unknown command 109446913 [ 830.606908] binder: 4454:4456 ioctl c0306201 20004000 returned -22 [ 830.611371] binder: 4454:4456 got reply transaction with no transaction stack ** 10 printk messages dropped ** [ 830.633794] binder: 4457:4458 transaction failed 29201/-71, size 0-0 line 2927 ** 8 printk messages dropped ** [ 830.678822] binder: BINDER_SET_CONTEXT_MGR already set ** 13 printk messages dropped ** [ 830.682119] binder: 4462:4469 got reply transaction with no transaction stack 2018/03/30 07:11:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x98, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 10 printk messages dropped ** [ 830.684305] binder: 4461:4471 ioctl c0306201 20004000 returned -22 [ 830.685552] binder: BINDER_SET_CONTEXT_MGR already set [ 830.685558] binder: 4464:4467 ioctl 40046207 0 returned -16 [ 830.685634] binder: 4464:4467 got transaction to invalid handle [ 830.685640] binder: 4464:4467 transaction failed 29201/-22, size 72-24 line 3011 [ 830.685763] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.685798] binder: 4464:4467 transaction failed 29189/-3, size 0-0 line 3134 [ 830.685868] binder: 4464:4467 unknown command 109446913 [ 830.685874] binder: 4464:4467 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x96, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x0, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r6}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) 2018/03/30 07:11:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x9d, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca16"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 2 printk messages dropped ** [ 830.705250] binder_alloc: 5895: binder_alloc_buf, no vma ** 7 printk messages dropped ** [ 830.758441] binder: 4463:4474 unknown command -393869567 [ 830.758450] binder: 4463:4474 ioctl c0306201 20004000 returned -22 [ 830.760258] binder: 4463:4474 got reply transaction with no transaction stack ** 5 printk messages dropped ** [ 830.799813] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.799852] binder: 4476:4480 transaction failed 29189/-3, size 0-0 line 3134 [ 830.800027] binder: 4478:4482 got transaction to invalid handle [ 830.800033] binder: 4478:4482 transaction failed 29201/-22, size 72-24 line 3011 [ 830.800108] binder: BINDER_SET_CONTEXT_MGR already set [ 830.800114] binder: 4477:4481 ioctl 40046207 0 returned -16 ** 16 printk messages dropped ** [ 830.808419] binder_alloc: 5895: binder_alloc_buf, no vma ** 18 printk messages dropped ** [ 830.846607] binder: 4483:4487 transaction failed 29189/-3, size 0-0 line 3134 [ 830.886613] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x0, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x9d, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca16"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x96, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 2 printk messages dropped ** [ 830.886783] binder: 4489:4491 transaction failed 29189/-3, size 32-16 line 3134 ** 5 printk messages dropped ** [ 830.887743] binder: 4489:4491 transaction failed 29201/-71, size 0-0 line 2927 ** 1 printk messages dropped ** [ 830.890797] binder: 4486:4492 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 830.892077] binder: 4486:4488 transaction failed 29201/-22, size 72-24 line 3011 ** 1 printk messages dropped ** [ 830.892282] binder: 4486:4488 transaction failed 29189/-3, size 0-0 line 3134 [ 830.892409] binder: 4486:4488 unknown command -393869567 2018/03/30 07:11:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r6}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) [ 830.892415] binder: 4486:4488 ioctl c0306201 20004000 returned -22 ** 1 printk messages dropped ** [ 830.893030] binder: 4486:4488 transaction failed 29201/-71, size 0-0 line 2927 [ 830.912944] binder: BINDER_SET_CONTEXT_MGR already set [ 830.912951] binder: 4493:4494 ioctl 40046207 0 returned -16 [ 830.913086] binder_alloc: 5895: binder_alloc_buf, no vma [ 830.913123] binder: 4493:4494 transaction failed 29189/-3, size 72-24 line 3134 [ 830.913250] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ** 3 printk messages dropped ** [ 830.914085] binder: 4493:4494 got reply transaction with no transaction stack ** 7 printk messages dropped ** [ 830.958865] binder_alloc: 5895: binder_alloc_buf, no vma ** 17 printk messages dropped ** [ 830.960484] binder_alloc: 5895: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 830.961965] binder: 4499:4503 unknown command 109446913 ** 1 printk messages dropped ** [ 830.964205] binder: 4499:4503 got reply transaction with no transaction stack ** 4 printk messages dropped ** [ 830.965935] binder: 4498:4504 transaction failed 29201/-71, size 0-0 line 2927 ** 4 printk messages dropped ** [ 830.991282] binder: 4495:4508 unknown command 109446913 [ 830.991288] binder: 4495:4508 ioctl c0306201 20004000 returned -22 [ 831.000756] binder: BINDER_SET_CONTEXT_MGR already set [ 831.000763] binder: 4501:4510 ioctl 40046207 0 returned -16 [ 831.008371] binder: 4501:4510 got transaction to invalid handle ** 7 printk messages dropped ** [ 831.074170] binder_alloc: 5895: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 831.077028] binder: 4512:4517 got transaction to invalid handle 2018/03/30 07:11:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x0, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0x9d, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca16"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0x96, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r6}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) 2018/03/30 07:11:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) fcntl$getown(r0, 0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 831.077034] binder: 4512:4517 transaction failed 29201/-22, size 72-24 line 3011 [ 831.078381] binder: 4512:4517 unknown command 109446913 ** 6 printk messages dropped ** [ 831.081164] binder: 4513:4518 transaction failed 29189/-3, size 0-0 line 3134 [ 831.081365] binder: 4513:4518 unknown command 109446913 [ 831.081371] binder: 4513:4518 ioctl c0306201 20004000 returned -22 [ 831.082252] binder: 4513:4518 got reply transaction with no transaction stack [ 831.082258] binder: 4513:4518 transaction failed 29201/-71, size 0-0 line 2927 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) fcntl$getown(r0, 0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 831.101149] binder: BINDER_SET_CONTEXT_MGR already set [ 831.101156] binder: 4515:4520 ioctl 40046207 0 returned -16 ** 31 printk messages dropped ** [ 831.166032] binder: 4527:4530 transaction failed 29201/-22, size 72-24 line 3011 ** 4 printk messages dropped ** [ 831.168890] binder: 4521:4526 got reply transaction with no transaction stack [ 831.168897] binder: 4521:4526 transaction failed 29201/-71, size 0-0 line 2927 ** 4 printk messages dropped ** [ 831.192594] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.192628] binder: 4531:4532 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x0, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa0, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xaf, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ** 1 printk messages dropped ** [ 831.192782] binder: 4531:4532 ioctl c0306201 20004000 returned -22 [ 831.193441] binder: 4531:4532 got reply transaction with no transaction stack [ 831.193447] binder: 4531:4532 transaction failed 29201/-71, size 0-0 line 2927 [ 831.238857] binder: BINDER_SET_CONTEXT_MGR already set [ 831.238863] binder: 4535:4545 ioctl 40046207 0 returned -16 [ 831.239573] binder_alloc: 5895: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 831.241377] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 831.241383] binder: 4538:4541 ioctl 40046207 0 returned -16 [ 831.241861] binder: BINDER_SET_CONTEXT_MGR already set [ 831.241867] binder: 4536:4543 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 831.242065] binder_alloc: 5895: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 831.242241] binder_alloc: 5895: binder_alloc_buf, no vma ** 7 printk messages dropped ** [ 831.243817] binder: 4535:4545 unknown command 109446913 ** 7 printk messages dropped ** [ 831.246896] binder: 4536:4543 got reply transaction with no transaction stack 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) fcntl$getown(r0, 0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ** 17 printk messages dropped ** [ 831.290094] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.290132] binder: 4537:4548 transaction failed 29189/-3, size 0-0 line 3134 [ 831.298530] binder: 4537:4548 unknown command -393869567 [ 831.298538] binder: 4537:4548 ioctl c0306201 20004000 returned -22 ** 2 printk messages dropped ** [ 831.360805] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 831.360948] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.360994] binder: 4550:4555 transaction failed 29189/-3, size 32-16 line 3134 [ 831.361242] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.361276] binder: 4550:4555 transaction failed 29189/-3, size 0-0 line 3134 [ 831.361910] binder: 4550:4555 unknown command 109446913 ** 3 printk messages dropped ** [ 831.364212] binder: BINDER_SET_CONTEXT_MGR already set ** 10 printk messages dropped ** [ 831.367535] binder: 4549:4554 ioctl c0306201 20004000 returned -22 [ 831.368608] binder: 4549:4554 got reply transaction with no transaction stack 2018/03/30 07:11:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa0, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xaf, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x0, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) ** 6 printk messages dropped ** [ 831.370909] binder: 4551:4556 ioctl c0306201 20004000 returned -22 [ 831.383445] binder: BINDER_SET_CONTEXT_MGR already set [ 831.383452] binder: 4553:4560 ioctl 40046207 0 returned -16 [ 831.383929] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.383971] binder: 4553:4560 transaction failed 29189/-3, size 0-0 line 3134 [ 831.388532] binder: 4553:4560 unknown command 109446913 [ 831.388539] binder: 4553:4560 ioctl c0306201 20004000 returned -22 ** 12 printk messages dropped ** [ 831.441896] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0x0, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 20 printk messages dropped ** [ 831.475594] binder: 4569:4570 transaction failed 29189/-3, size 0-0 line 3134 [ 831.475757] binder: 4569:4570 unknown command 109446913 [ 831.475763] binder: 4569:4570 ioctl c0306201 20004000 returned -22 [ 831.476412] binder: 4569:4570 got reply transaction with no transaction stack [ 831.476418] binder: 4569:4570 transaction failed 29201/-71, size 0-0 line 2927 ** 6 printk messages dropped ** [ 831.520178] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.520215] binder: 4571:4582 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa0, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xaf, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 831.520331] binder: BINDER_SET_CONTEXT_MGR already set [ 831.520337] binder: 4577:4579 ioctl 40046207 0 returned -16 [ 831.520455] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.520490] binder: 4575:4578 transaction failed 29189/-3, size 0-0 line 3134 ** 2 printk messages dropped ** [ 831.521209] binder_alloc: 5895: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 831.521304] binder: 4571:4582 unknown command 109446913 [ 831.521310] binder: 4571:4582 ioctl c0306201 20004000 returned -22 2018/03/30 07:11:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 6 printk messages dropped ** [ 831.523508] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.523543] binder: 4573:4581 transaction failed 29189/-3, size 0-0 line 3134 [ 831.523656] binder: 4575:4578 unknown command 109446913 [ 831.523663] binder: 4575:4578 ioctl c0306201 20004000 returned -22 ** 12 printk messages dropped ** [ 831.556821] binder_alloc: 5895: binder_alloc_buf, no vma ** 15 printk messages dropped ** [ 831.645498] binder: BINDER_SET_CONTEXT_MGR already set [ 831.645506] binder: 4593:4595 ioctl 40046207 0 returned -16 [ 831.646048] binder_alloc: 5895: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 831.646401] binder_alloc: 5895: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 831.647401] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.647436] binder: 4590:4598 transaction failed 29189/-3, size 0-0 line 3134 [ 831.647572] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.647606] binder: 4588:4599 transaction failed 29189/-3, size 32-16 line 3134 [ 831.648489] binder_alloc: 5895: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 831.649643] binder: 4593:4595 got reply transaction with no transaction stack 2018/03/30 07:11:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa1, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0x0, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300), 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r6}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) ** 3 printk messages dropped ** [ 831.651572] binder: 4588:4599 got reply transaction with no transaction stack ** 4 printk messages dropped ** [ 831.651823] binder: 4592:4597 transaction failed 29189/-3, size 0-0 line 3134 [ 831.651949] binder: 4592:4597 unknown command 109446913 ** 7 printk messages dropped ** [ 831.677608] binder: 4589:4600 unknown command 109446913 [ 831.677615] binder: 4589:4600 ioctl c0306201 20004000 returned -22 [ 831.690371] binder: BINDER_SET_CONTEXT_MGR already set [ 831.690379] binder: 4591:4604 ioctl 40046207 0 returned -16 [ 831.694269] binder: BINDER_SET_CONTEXT_MGR already set [ 831.694276] binder: 4594:4601 ioctl 40046207 0 returned -16 [ 831.694354] binder: 4594:4601 got transaction to invalid handle ** 11 printk messages dropped ** [ 831.711319] binder: 4591:4604 got reply transaction with no transaction stack ** 23 printk messages dropped ** [ 831.800050] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.800086] binder: 4611:4621 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300), 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0x0, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa1, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ** 1 printk messages dropped ** [ 831.801175] binder: 4610:4620 transaction failed 29201/-22, size 72-24 line 3011 ** 4 printk messages dropped ** [ 831.802789] binder: 4614:4616 got transaction to invalid handle [ 831.802795] binder: 4614:4616 transaction failed 29201/-22, size 72-24 line 3011 [ 831.802844] binder: BINDER_SET_CONTEXT_MGR already set [ 831.802849] binder: 4612:4619 ioctl 40046207 0 returned -16 [ 831.803171] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 831.803400] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r6}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) [ 831.803435] binder: 4614:4616 transaction failed 29189/-3, size 0-0 line 3134 ** 2 printk messages dropped ** [ 831.803692] binder: 4610:4620 unknown command 109446913 [ 831.803698] binder: 4610:4620 ioctl c0306201 20004000 returned -22 [ 831.803846] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.803880] binder: 4615:4617 transaction failed 29189/-3, size 32-16 line 3134 [ 831.805202] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.805240] binder: 4615:4617 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 2 printk messages dropped ** [ 831.806709] binder: 4615:4617 unknown command 109446913 ** 7 printk messages dropped ** [ 831.808694] binder: 4612:4619 got reply transaction with no transaction stack ** 16 printk messages dropped ** [ 831.874561] binder: 4613:4624 ioctl c0306201 20004000 returned -22 ** 8 printk messages dropped ** [ 831.920166] binder: 4625:4630 unknown command 109446913 ** 7 printk messages dropped ** [ 831.923646] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.923681] binder: 4626:4631 transaction failed 29189/-3, size 0-0 line 3134 [ 831.923823] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.923859] binder: 4627:4634 transaction failed 29189/-3, size 32-16 line 3134 [ 831.927536] binder: 4626:4631 unknown command 109446913 [ 831.927542] binder: 4626:4631 ioctl c0306201 20004000 returned -22 [ 831.928356] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.928394] binder: 4627:4634 transaction failed 29189/-3, size 0-0 line 3134 ** 7 printk messages dropped ** [ 831.936129] binder: 4629:4635 ioctl c0306201 20004000 returned -22 ** 2 printk messages dropped ** [ 831.941337] binder: 4628:4637 got transaction to invalid handle 2018/03/30 07:11:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300), 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa1, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r6}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) 2018/03/30 07:11:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 831.941344] binder: 4628:4637 transaction failed 29201/-22, size 72-24 line 3011 [ 831.941657] binder_alloc: 5895: binder_alloc_buf, no vma ** 7 printk messages dropped ** [ 831.959333] binder_alloc: 5895: binder_alloc_buf, no vma [ 831.959369] binder: 4632:4639 transaction failed 29189/-3, size 0-0 line 3134 [ 831.965834] binder: 4632:4639 unknown command 109446913 [ 831.965841] binder: 4632:4639 ioctl c0306201 20004000 returned -22 [ 831.996800] binder: BINDER_SET_CONTEXT_MGR already set [ 831.996809] binder: 4633:4642 ioctl 40046207 0 returned -16 2018/03/30 07:11:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 831.998005] binder: 4633:4642 got transaction to invalid handle ** 7 printk messages dropped ** [ 832.011029] binder: BINDER_SET_CONTEXT_MGR already set ** 27 printk messages dropped ** [ 832.078951] binder: BINDER_SET_CONTEXT_MGR already set [ 832.078957] binder: 4647:4657 ioctl 40046207 0 returned -16 [ 832.079246] binder: 4647:4657 got transaction to invalid handle [ 832.079253] binder: 4647:4657 transaction failed 29201/-22, size 72-24 line 3011 ** 4 printk messages dropped ** [ 832.079831] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc1, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ** 3 printk messages dropped ** [ 832.080375] binder: 4651:4654 got transaction to invalid handle ** 1 printk messages dropped ** [ 832.080454] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 832.080785] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.080819] binder: 4651:4654 transaction failed 29189/-3, size 0-0 line 3134 [ 832.080960] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.080993] binder: 4648:4658 transaction failed 29189/-3, size 32-16 line 3134 2018/03/30 07:11:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 832.081149] binder: 4649:4655 unknown command 109446913 [ 832.081155] binder: 4649:4655 ioctl c0306201 20004000 returned -22 [ 832.082381] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.082418] binder: 4648:4658 transaction failed 29189/-3, size 0-0 line 3134 [ 832.082646] binder: 4652:4653 unknown command 109446913 [ 832.082652] binder: 4652:4653 ioctl c0306201 20004000 returned -22 ** 12 printk messages dropped ** [ 832.109355] binder_alloc: 5895: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 832.119143] binder: 4650:4661 got transaction to invalid handle 2018/03/30 07:11:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc1, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ** 11 printk messages dropped ** [ 832.193632] binder: BINDER_SET_CONTEXT_MGR already set ** 11 printk messages dropped ** [ 832.195876] binder: 4663:4669 got reply transaction with no transaction stack [ 832.195882] binder: 4663:4669 transaction failed 29201/-71, size 0-0 line 2927 [ 832.201384] binder: BINDER_SET_CONTEXT_MGR already set [ 832.201391] binder: 4664:4670 ioctl 40046207 0 returned -16 [ 832.206325] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.206365] binder: 4664:4670 transaction failed 29189/-3, size 32-16 line 3134 [ 832.212894] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.212932] binder: 4664:4670 transaction failed 29189/-3, size 0-0 line 3134 [ 832.213724] binder: BINDER_SET_CONTEXT_MGR already set ** 2 printk messages dropped ** [ 832.213809] binder: 4664:4670 ioctl c0306201 20004000 returned -22 ** 8 printk messages dropped ** [ 832.216329] binder: 4665:4671 unknown command 109446913 [ 832.216336] binder: 4665:4671 ioctl c0306201 20004000 returned -22 [ 832.216382] binder: 4666:4672 got transaction to invalid handle 2018/03/30 07:11:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = dup2(r0, 0xffffffffffffffff) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) 2018/03/30 07:11:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc1, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ** 8 printk messages dropped ** [ 832.219325] binder: 4668:4673 transaction failed 29189/-3, size 0-0 line 3134 [ 832.282206] binder: BINDER_SET_CONTEXT_MGR already set [ 832.282213] binder: 4676:4678 ioctl 40046207 0 returned -16 [ 832.282281] binder: 4676:4678 got transaction to invalid handle [ 832.282288] binder: 4676:4678 transaction failed 29201/-22, size 72-24 line 3011 [ 832.282408] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.282447] binder: 4676:4678 transaction failed 29189/-3, size 0-0 line 3134 2018/03/30 07:11:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 14 printk messages dropped ** [ 832.310552] binder_alloc: 5895: binder_alloc_buf, no vma ** 17 printk messages dropped ** [ 832.357834] binder: 4682:4692 unknown command 109446913 [ 832.357841] binder: 4682:4692 ioctl c0306201 20004000 returned -22 ** 2 printk messages dropped ** [ 832.359317] binder: BINDER_SET_CONTEXT_MGR already set [ 832.359322] binder: 4683:4693 ioctl 40046207 0 returned -16 [ 832.359872] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.359908] binder: 4683:4693 transaction failed 29189/-3, size 32-16 line 3134 [ 832.361087] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = dup2(r0, 0xffffffffffffffff) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 832.361121] binder: 4683:4693 transaction failed 29189/-3, size 0-0 line 3134 [ 832.361328] binder: 4683:4693 unknown command 109446913 [ 832.361334] binder: 4683:4693 ioctl c0306201 20004000 returned -22 [ 832.361442] binder: BINDER_SET_CONTEXT_MGR already set [ 832.361447] binder: 4687:4688 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 832.362340] binder: 4683:4693 transaction failed 29201/-71, size 0-0 line 2927 [ 832.362617] binder: 4687:4688 got transaction to invalid handle 2018/03/30 07:11:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) flistxattr(r5, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r8}) [ 832.362624] binder: 4687:4688 transaction failed 29201/-22, size 72-24 line 3011 [ 832.363031] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.363067] binder: 4687:4688 transaction failed 29189/-3, size 0-0 line 3134 ** 8 printk messages dropped ** [ 832.368910] binder: 4684:4691 unknown command 109446913 ** 1 printk messages dropped ** [ 832.386565] binder: BINDER_SET_CONTEXT_MGR already set ** 7 printk messages dropped ** [ 832.397030] binder: BINDER_SET_CONTEXT_MGR already set ** 19 printk messages dropped ** [ 832.483088] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ** 2 printk messages dropped ** [ 832.483247] binder: 4700:4706 ioctl 40046207 0 returned -16 [ 832.483379] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.483414] binder: 4697:4707 transaction failed 29189/-3, size 32-16 line 3134 [ 832.483582] binder: 4700:4706 got transaction to invalid handle [ 832.483588] binder: 4700:4706 transaction failed 29201/-22, size 72-24 line 3011 [ 832.483764] binder: 4699:4705 unknown command 109446913 [ 832.483770] binder: 4699:4705 ioctl c0306201 20004000 returned -22 [ 832.484051] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0x0, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = dup2(r0, 0xffffffffffffffff) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r5 = fcntl$getown(r0, 0x9) flistxattr(0xffffffffffffffff, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r6}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) 2018/03/30 07:11:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 832.484085] binder: 4700:4706 transaction failed 29189/-3, size 0-0 line 3134 ** 6 printk messages dropped ** [ 832.486009] binder_alloc: 5895: binder_alloc_buf, no vma [ 832.486044] binder: 4697:4707 transaction failed 29189/-3, size 0-0 line 3134 [ 832.486247] binder: 4700:4706 unknown command 109446913 [ 832.486253] binder: 4700:4706 ioctl c0306201 20004000 returned -22 ** 6 printk messages dropped ** [ 832.509838] binder: 4701:4708 unknown command 109446913 [ 832.509844] binder: 4701:4708 ioctl c0306201 20004000 returned -22 [ 832.511887] binder: BINDER_SET_CONTEXT_MGR already set [ 832.511893] binder: 4703:4710 ioctl 40046207 0 returned -16 [ 832.512021] binder: 4703:4710 got transaction to invalid handle [ 832.512028] binder: 4703:4710 transaction failed 29201/-22, size 72-24 line 3011 [ 832.512267] binder_alloc: 5895: binder_alloc_buf, no vma ** 11 printk messages dropped ** [ 832.568746] binder: 4702:4709 got reply transaction with no transaction stack ** 23 printk messages dropped ** [ 832.648620] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:11:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4}], &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x0, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 2018/03/30 07:11:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xa2, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c70947"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') [ 832.648626] binder: 4722:4724 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 832.648873] binder: 4720:4727 transaction failed 29189/-3, size 0-0 line 3134 ** 1 printk messages dropped ** [ 832.649329] binder: 4722:4724 transaction failed 29201/-22, size 72-24 line 3011 [ 832.649506] binder_alloc: 5895: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 832.649760] binder: 4720:4727 unknown command 109446913 [ 832.649766] binder: 4720:4727 ioctl c0306201 20004000 returned -22 [ 832.649881] binder_alloc: 5895: binder_alloc_buf, no vma 2018/03/30 07:11:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f00000000c0)=[0x18, 0x0]}}, @enter_looper={0x630c}], 0xc7, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797f60b8b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000580)={r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2018/03/30 07:11:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = dup2(r0, 0xffffffffffffffff) r4 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r4}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8020014, r2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0), 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xc4, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea43851648172fabe1ef0fc797"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=ANY=[@ANYBLOB="01078606"], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000580)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x111002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x10, 0x70bd25, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2018/03/30 07:11:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000003c0)={{}, {r2, r3+30000000}}, &(0x7f0000000400)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000000640)=""/45, 0x2d, 0x0, &(0x7f0000000700)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) r5 = fcntl$getown(r0, 0x9) flistxattr(0xffffffffffffffff, &(0x7f0000000540)=""/3, 0x3) fcntl$lock(r0, 0x6, &(0x7f0000000500)={0x2, 0x2, 0xfff, 0x2, r5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000600)=0x20000000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x5dae5a9) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000740)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0xa, 0x4, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2}], &(0x7f00000000c0)=[0x18, 0x40, 0x0]}}, @enter_looper={0x630c}], 0xbb, 0x0, &(0x7f00000001c0)="ce31767103fc577764c735bb18e92f18bafc56524684170426f7db35c9f636b174b3139c6c589ce2a574a6c276f39826ef968d1ba6cdabd56ac3795d2aea6ae3ff97541e96ba35c4e82736a5205c5b546dc4c597b2ddd576c5d1dfe7c9016cf1fe29fefbd025fe495800b2cb876689239a2c128d13fcd3922f085d2897ef6598f376687a27abdfd32af2c8dced0db2494be88c874bdb6a4a73b55eca164c28c709471c58fc18059a0c4d6727ba3292d2357bd2f2c17a74ea438516"}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000005c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x13, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0xfffffffffffffec4, 0x0, &(0x7f0000008000)}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010786e85a46c2cf002cd0e571696231"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r6}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000580)={r7}) [ 832.649915] binder: 4722:4724 transaction failed 29189/-3, size 0-0 line 3134 [ 832.650156] binder_alloc: 5895: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 832.651975] binder: 4722:4724 ioctl c0306201 20004000 returned -22 [ 832.654869] binder: BINDER_SET_CONTEXT_MGR already set [ 832.654875] binder: 4719:4726 ioctl 40046207 0 returned -16 [ 832.655064] binder: 4719:4726 got transaction to invalid handle [ 832.655071] binder: 4719:4726 transaction failed 29201/-22, size 72-24 line 3011 [ 832.655333] binder_alloc: 5895: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 832.657022] binder: 4719:4726 ioctl c0306201 20004000 returned -22 ** 9 printk messages dropped ** [ 832.673291] binder: 4723:4730 transaction failed 29189/-3, size 32-16 line 3134 ** 8 printk messages dropped ** [ 832.699087] binder: 4721:4732 got transaction to invalid handle ** 9 printk messages dropped ** [ 832.792426] binder: 4733:4737 got transaction to invalid handle ** 169 printk messages dropped ** [ 834.529736] binder: BINDER_SET_CONTEXT_MGR already set [ 834.529744] binder: 4776:4788 ioctl 40046207 0 returned -16 [ 834.530099] binder: 4776:4788 got transaction to invalid handle [ 834.530106] binder: 4776:4788 transaction failed 29201/-22, size 72-24 line 3011 [ 834.534927] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.534963] binder: 4776:4788 transaction failed 29189/-3, size 0-0 line 3134 [ 834.535448] binder: 4776:4788 unknown command 109446913 [ 834.535455] binder: 4776:4788 ioctl c0306201 20004000 returned -22 [ 834.537522] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.537559] binder: 4782:4789 transaction failed 29189/-3, size 32-16 line 3134 [ 834.537688] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.537721] binder: 4782:4789 transaction failed 29189/-3, size 0-0 line 3134 [ 834.550010] binder: BINDER_SET_CONTEXT_MGR already set [ 834.550021] binder: 4780:4791 ioctl 40046207 0 returned -16 [ 834.552714] binder: 4780:4791 got transaction to invalid handle [ 834.552722] binder: 4780:4791 transaction failed 29201/-22, size 72-24 line 3011 [ 834.557542] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.557580] binder: 4780:4791 transaction failed 29189/-3, size 0-0 line 3134 [ 834.566753] binder: 4780:4791 unknown command -393869567 [ 834.566760] binder: 4780:4791 ioctl c0306201 20004000 returned -22 [ 834.570592] binder: 4780:4791 got reply transaction with no transaction stack [ 834.570598] binder: 4780:4791 transaction failed 29201/-71, size 0-0 line 2927 [ 834.882654] binder: BINDER_SET_CONTEXT_MGR already set [ 834.882661] binder: 4792:4793 ioctl 40046207 0 returned -16 [ 834.882796] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.882834] binder: 4792:4793 transaction failed 29189/-3, size 72-24 line 3134 [ 834.882967] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.883001] binder: 4792:4793 transaction failed 29189/-3, size 0-0 line 3134 [ 834.883149] binder: 4792:4793 unknown command 109446913 [ 834.883155] binder: 4792:4793 ioctl c0306201 20004000 returned -22 [ 834.883826] binder: 4792:4793 got reply transaction with no transaction stack [ 834.883832] binder: 4792:4793 transaction failed 29201/-71, size 0-0 line 2927 [ 834.925747] binder: 4797:4802 got transaction to invalid handle [ 834.925755] binder: 4797:4802 transaction failed 29201/-22, size 72-24 line 3011 [ 834.925985] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.926088] binder: 4797:4802 transaction failed 29189/-3, size 0-0 line 3134 [ 834.926619] binder: BINDER_SET_CONTEXT_MGR already set [ 834.926625] binder: 4798:4801 ioctl 40046207 0 returned -16 [ 834.926876] binder: 4798:4801 got transaction to invalid handle [ 834.926882] binder: 4798:4801 transaction failed 29201/-22, size 72-24 line 3011 [ 834.928098] binder: BINDER_SET_CONTEXT_MGR already set [ 834.928104] binder: 4795:4803 ioctl 40046207 0 returned -16 [ 834.928291] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.928326] binder: 4798:4801 transaction failed 29189/-3, size 0-0 line 3134 [ 834.930065] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.930101] binder: 4795:4803 transaction failed 29189/-3, size 32-16 line 3134 [ 834.930336] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.930370] binder: 4795:4803 transaction failed 29189/-3, size 0-0 line 3134 [ 834.930429] binder: 4798:4801 unknown command 109446913 [ 834.930435] binder: 4798:4801 ioctl c0306201 20004000 returned -22 [ 834.931587] binder: 4795:4803 unknown command 109446913 [ 834.931594] binder: 4795:4803 ioctl c0306201 20004000 returned -22 [ 834.932615] binder: 4795:4803 got reply transaction with no transaction stack [ 834.932621] binder: 4795:4803 transaction failed 29201/-71, size 0-0 line 2927 [ 834.932881] binder: BINDER_SET_CONTEXT_MGR already set [ 834.932886] binder: 4799:4806 ioctl 40046207 0 returned -16 [ 834.933283] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.933318] binder: 4799:4806 transaction failed 29189/-3, size 32-16 line 3134 [ 834.933596] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.933631] binder: 4799:4806 transaction failed 29189/-3, size 0-0 line 3134 [ 834.933829] binder: 4799:4806 unknown command 109446913 [ 834.933834] binder: 4799:4806 ioctl c0306201 20004000 returned -22 [ 834.934799] binder: 4799:4806 got reply transaction with no transaction stack [ 834.934808] binder: 4799:4806 transaction failed 29201/-71, size 0-0 line 2927 [ 834.934929] binder: BINDER_SET_CONTEXT_MGR already set [ 834.934934] binder: 4796:4804 ioctl 40046207 0 returned -16 [ 834.935047] binder: 4796:4804 got transaction to invalid handle [ 834.935053] binder: 4796:4804 transaction failed 29201/-22, size 72-24 line 3011 [ 834.935210] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.935374] binder: 4796:4804 transaction failed 29189/-3, size 0-0 line 3134 [ 834.936835] binder: 4796:4804 unknown command 109446913 [ 834.936841] binder: 4796:4804 ioctl c0306201 20004000 returned -22 [ 834.947251] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.947290] binder: 4794:4807 transaction failed 29189/-3, size 32-16 line 3134 [ 834.949888] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.949924] binder: 4794:4807 transaction failed 29189/-3, size 0-0 line 3134 [ 834.969678] binder: BINDER_SET_CONTEXT_MGR already set [ 834.969686] binder: 4800:4809 ioctl 40046207 0 returned -16 [ 834.977151] binder: 4800:4809 got transaction to invalid handle [ 834.977159] binder: 4800:4809 transaction failed 29201/-22, size 72-24 line 3011 [ 834.986752] binder_alloc: 5895: binder_alloc_buf, no vma [ 834.986793] binder: 4800:4809 transaction failed 29189/-3, size 0-0 line 3134 [ 835.005512] binder: 4800:4809 unknown command -393869567 [ 835.005520] binder: 4800:4809 ioctl c0306201 20004000 returned -22 [ 835.007338] binder: 4800:4809 got reply transaction with no transaction stack [ 835.007345] binder: 4800:4809 transaction failed 29201/-71, size 0-0 line 2927 [ 835.036435] binder: BINDER_SET_CONTEXT_MGR already set [ 835.036443] binder: 4810:4815 ioctl 40046207 0 returned -16 [ 835.036576] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.036749] binder: 4810:4815 transaction failed 29189/-3, size 32-16 line 3134 [ 835.041548] binder: BINDER_SET_CONTEXT_MGR already set [ 835.041554] binder: 4811:4816 ioctl 40046207 0 returned -16 [ 835.041640] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.041677] binder: 4810:4815 transaction failed 29189/-3, size 0-0 line 3134 [ 835.041806] binder: 4811:4816 got transaction to invalid handle [ 835.041812] binder: 4811:4816 transaction failed 29201/-22, size 72-24 line 3011 [ 835.041939] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.041973] binder: 4811:4816 transaction failed 29189/-3, size 0-0 line 3134 [ 835.042427] binder: 4811:4816 unknown command 109446913 [ 835.042433] binder: 4811:4816 ioctl c0306201 20004000 returned -22 [ 835.043906] binder: 4810:4815 unknown command 109446913 [ 835.043912] binder: 4810:4815 ioctl c0306201 20004000 returned -22 [ 835.044772] binder: 4810:4815 got reply transaction with no transaction stack [ 835.044778] binder: 4810:4815 transaction failed 29201/-71, size 0-0 line 2927 [ 835.053928] binder: BINDER_SET_CONTEXT_MGR already set [ 835.053935] binder: 4813:4818 ioctl 40046207 0 returned -16 [ 835.054126] binder: 4813:4818 got transaction to invalid handle [ 835.054133] binder: 4813:4818 transaction failed 29201/-22, size 72-24 line 3011 [ 835.054260] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.054296] binder: 4813:4818 transaction failed 29189/-3, size 0-0 line 3134 [ 835.058643] binder: 4813:4818 unknown command 109446913 [ 835.058650] binder: 4813:4818 ioctl c0306201 20004000 returned -22 [ 835.058724] binder: BINDER_SET_CONTEXT_MGR already set [ 835.058730] binder: 4812:4819 ioctl 40046207 0 returned -16 [ 835.058928] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.058965] binder: 4812:4819 transaction failed 29189/-3, size 32-16 line 3134 [ 835.059941] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.060016] binder: 4812:4819 transaction failed 29189/-3, size 0-0 line 3134 [ 835.060129] binder: 4812:4819 unknown command 109446913 [ 835.060135] binder: 4812:4819 ioctl c0306201 20004000 returned -22 [ 835.060977] binder: 4812:4819 got reply transaction with no transaction stack [ 835.060983] binder: 4812:4819 transaction failed 29201/-71, size 0-0 line 2927 [ 835.080048] binder: BINDER_SET_CONTEXT_MGR already set [ 835.080055] binder: 4814:4820 ioctl 40046207 0 returned -16 [ 835.080133] binder: 4814:4820 got transaction to invalid handle [ 835.080139] binder: 4814:4820 transaction failed 29201/-22, size 72-24 line 3011 [ 835.080267] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.080304] binder: 4814:4820 transaction failed 29189/-3, size 0-0 line 3134 [ 835.080415] binder: 4814:4820 unknown command 109446913 [ 835.080421] binder: 4814:4820 ioctl c0306201 20004000 returned -22 [ 835.088331] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.088369] binder: 4817:4821 transaction failed 29189/-3, size 32-16 line 3134 [ 835.088541] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.088576] binder: 4817:4821 transaction failed 29189/-3, size 0-0 line 3134 [ 835.133729] binder: BINDER_SET_CONTEXT_MGR already set [ 835.133737] binder: 4822:4825 ioctl 40046207 0 returned -16 [ 835.133892] binder: 4822:4825 got transaction to invalid handle [ 835.133900] binder: 4822:4825 transaction failed 29201/-22, size 72-24 line 3011 [ 835.134147] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.134184] binder: 4822:4825 transaction failed 29189/-3, size 0-0 line 3134 [ 835.134297] binder: 4822:4825 unknown command -393869567 [ 835.134303] binder: 4822:4825 ioctl c0306201 20004000 returned -22 [ 835.134986] binder: 4822:4825 got reply transaction with no transaction stack [ 835.134992] binder: 4822:4825 transaction failed 29201/-71, size 0-0 line 2927 [ 835.146105] binder: BINDER_SET_CONTEXT_MGR already set [ 835.146111] binder: 4826:4828 ioctl 40046207 0 returned -16 [ 835.146235] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.146273] binder: 4826:4828 transaction failed 29189/-3, size 32-16 line 3134 [ 835.146393] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.146427] binder: 4826:4828 transaction failed 29189/-3, size 0-0 line 3134 [ 835.146514] binder: 4826:4828 unknown command 109446913 [ 835.146520] binder: 4826:4828 ioctl c0306201 20004000 returned -22 [ 835.147209] binder: 4826:4828 got reply transaction with no transaction stack [ 835.147216] binder: 4826:4828 transaction failed 29201/-71, size 0-0 line 2927 [ 835.164173] binder: BINDER_SET_CONTEXT_MGR already set [ 835.164181] binder: 4829:4830 ioctl 40046207 0 returned -16 [ 835.164315] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.164354] binder: 4829:4830 transaction failed 29189/-3, size 72-24 line 3134 [ 835.164483] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.164517] binder: 4829:4830 transaction failed 29189/-3, size 0-0 line 3134 [ 835.164627] binder: 4829:4830 unknown command 109446913 [ 835.164633] binder: 4829:4830 ioctl c0306201 20004000 returned -22 [ 835.165344] binder: 4829:4830 got reply transaction with no transaction stack [ 835.165350] binder: 4829:4830 transaction failed 29201/-71, size 0-0 line 2927 [ 835.210656] binder: BINDER_SET_CONTEXT_MGR already set [ 835.210663] binder: 4837:4838 ioctl 40046207 0 returned -16 [ 835.210811] binder: BINDER_SET_CONTEXT_MGR already set [ 835.210817] binder: 4835:4840 ioctl 40046207 0 returned -16 [ 835.211635] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.211674] binder: 4837:4838 transaction failed 29189/-3, size 32-16 line 3134 [ 835.211867] binder: 4835:4840 got transaction to invalid handle [ 835.211874] binder: 4835:4840 transaction failed 29201/-22, size 72-24 line 3011 [ 835.212070] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.212105] binder: 4834:4843 transaction failed 29189/-3, size 32-16 line 3134 [ 835.212279] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.212313] binder: 4837:4838 transaction failed 29189/-3, size 0-0 line 3134 [ 835.212385] binder: BINDER_SET_CONTEXT_MGR already set [ 835.212391] binder: 4832:4841 ioctl 40046207 0 returned -16 [ 835.212731] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.212765] binder: 4834:4843 transaction failed 29189/-3, size 0-0 line 3134 [ 835.212947] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.212981] binder: 4832:4841 transaction failed 29189/-3, size 32-16 line 3134 [ 835.213172] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.213205] binder: 4835:4840 transaction failed 29189/-3, size 0-0 line 3134 [ 835.213443] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.213476] binder: 4832:4841 transaction failed 29189/-3, size 0-0 line 3134 [ 835.213721] binder: BINDER_SET_CONTEXT_MGR already set [ 835.213726] binder: 4833:4842 ioctl 40046207 0 returned -16 [ 835.213780] binder: 4837:4838 unknown command 109446913 [ 835.213785] binder: 4837:4838 ioctl c0306201 20004000 returned -22 [ 835.213911] binder: 4833:4842 got transaction to invalid handle [ 835.213917] binder: 4833:4842 transaction failed 29201/-22, size 72-24 line 3011 [ 835.214859] binder: 4837:4838 got reply transaction with no transaction stack [ 835.214865] binder: 4837:4838 transaction failed 29201/-71, size 0-0 line 2927 [ 835.215862] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.215897] binder: 4833:4842 transaction failed 29189/-3, size 0-0 line 3134 [ 835.215961] binder: 4832:4841 unknown command 109446913 [ 835.215967] binder: 4832:4841 ioctl c0306201 20004000 returned -22 [ 835.216021] binder: 4835:4840 unknown command 109446913 [ 835.216027] binder: 4835:4840 ioctl c0306201 20004000 returned -22 [ 835.216788] binder: 4832:4841 got reply transaction with no transaction stack [ 835.216794] binder: 4832:4841 transaction failed 29201/-71, size 0-0 line 2927 [ 835.217827] binder: 4833:4842 unknown command 109446913 [ 835.217833] binder: 4833:4842 ioctl c0306201 20004000 returned -22 [ 835.235027] binder: BINDER_SET_CONTEXT_MGR already set [ 835.235035] binder: 4831:4844 ioctl 40046207 0 returned -16 [ 835.239114] binder: 4831:4844 got transaction to invalid handle [ 835.239122] binder: 4831:4844 transaction failed 29201/-22, size 72-24 line 3011 [ 835.239265] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.239367] binder: 4831:4844 transaction failed 29189/-3, size 0-0 line 3134 [ 835.243532] binder: 4831:4844 unknown command 109446913 [ 835.243539] binder: 4831:4844 ioctl c0306201 20004000 returned -22 [ 835.254759] binder: BINDER_SET_CONTEXT_MGR already set [ 835.254767] binder: 4836:4846 ioctl 40046207 0 returned -16 [ 835.261771] binder: 4836:4846 got transaction to invalid handle [ 835.261780] binder: 4836:4846 transaction failed 29201/-22, size 72-24 line 3011 [ 835.269568] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.269607] binder: 4836:4846 transaction failed 29189/-3, size 0-0 line 3134 [ 835.283279] binder: 4836:4846 unknown command -393869567 [ 835.283287] binder: 4836:4846 ioctl c0306201 20004000 returned -22 [ 835.290725] binder: 4836:4846 got reply transaction with no transaction stack [ 835.290736] binder: 4836:4846 transaction failed 29201/-71, size 0-0 line 2927 [ 835.329874] binder: BINDER_SET_CONTEXT_MGR already set [ 835.329882] binder: 4847:4853 ioctl 40046207 0 returned -16 [ 835.330018] binder: 4847:4853 got transaction to invalid handle [ 835.330025] binder: 4847:4853 transaction failed 29201/-22, size 72-24 line 3011 [ 835.330550] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.330588] binder: 4847:4853 transaction failed 29189/-3, size 0-0 line 3134 [ 835.330915] binder: 4847:4853 unknown command 109446913 [ 835.330921] binder: 4847:4853 ioctl c0306201 20004000 returned -22 [ 835.332285] binder: BINDER_SET_CONTEXT_MGR already set [ 835.332290] binder: 4848:4854 ioctl 40046207 0 returned -16 [ 835.332450] binder: 4848:4854 got transaction to invalid handle [ 835.332457] binder: 4848:4854 transaction failed 29201/-22, size 72-24 line 3011 [ 835.333023] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.333122] binder: 4848:4854 transaction failed 29189/-3, size 0-0 line 3134 [ 835.333359] binder: BINDER_SET_CONTEXT_MGR already set [ 835.333364] binder: 4850:4856 ioctl 40046207 0 returned -16 [ 835.333614] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.333736] binder: 4850:4856 transaction failed 29189/-3, size 32-16 line 3134 [ 835.333951] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.333985] binder: 4850:4856 transaction failed 29189/-3, size 0-0 line 3134 [ 835.336066] binder: 4848:4854 unknown command 109446913 [ 835.336073] binder: 4848:4854 ioctl c0306201 20004000 returned -22 [ 835.337110] binder: 4850:4856 unknown command 109446913 [ 835.337117] binder: 4850:4856 ioctl c0306201 20004000 returned -22 [ 835.337980] binder: 4850:4856 got reply transaction with no transaction stack [ 835.337986] binder: 4850:4856 transaction failed 29201/-71, size 0-0 line 2927 [ 835.338222] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.338259] binder: 4849:4855 transaction failed 29189/-3, size 32-16 line 3134 [ 835.338446] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.338480] binder: 4849:4855 transaction failed 29189/-3, size 0-0 line 3134 [ 835.356484] binder: BINDER_SET_CONTEXT_MGR already set [ 835.356491] binder: 4852:4858 ioctl 40046207 0 returned -16 [ 835.362991] binder: 4852:4858 got transaction to invalid handle [ 835.362998] binder: 4852:4858 transaction failed 29201/-22, size 32-24 line 3011 [ 835.363960] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.363997] binder: 4852:4858 transaction failed 29189/-3, size 0-0 line 3134 [ 835.368261] binder: 4852:4858 unknown command 109446913 [ 835.368268] binder: 4852:4858 ioctl c0306201 20004000 returned -22 [ 835.376050] binder: BINDER_SET_CONTEXT_MGR already set [ 835.376060] binder: 4851:4859 ioctl 40046207 0 returned -16 [ 835.376226] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.376264] binder: 4851:4859 transaction failed 29189/-3, size 32-16 line 3134 [ 835.376458] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.376492] binder: 4851:4859 transaction failed 29189/-3, size 0-0 line 3134 [ 835.376600] binder: 4851:4859 unknown command 109446913 [ 835.376606] binder: 4851:4859 ioctl c0306201 20004000 returned -22 [ 835.377467] binder: 4851:4859 got reply transaction with no transaction stack [ 835.377473] binder: 4851:4859 transaction failed 29201/-71, size 0-0 line 2927 [ 835.410440] binder: BINDER_SET_CONTEXT_MGR already set [ 835.410447] binder: 4862:4863 ioctl 40046207 0 returned -16 [ 835.410584] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.410621] binder: 4862:4863 transaction failed 29189/-3, size 32-16 line 3134 [ 835.411152] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.411186] binder: 4862:4863 transaction failed 29189/-3, size 0-0 line 3134 [ 835.411556] binder: 4862:4863 unknown command 109446913 [ 835.411562] binder: 4862:4863 ioctl c0306201 20004000 returned -22 [ 835.412700] binder: 4862:4863 got reply transaction with no transaction stack [ 835.412706] binder: 4862:4863 transaction failed 29201/-71, size 0-0 line 2927 [ 835.421755] binder: BINDER_SET_CONTEXT_MGR already set [ 835.421763] binder: 4857:4865 ioctl 40046207 0 returned -16 [ 835.423624] binder: 4857:4865 got transaction to invalid handle [ 835.423631] binder: 4857:4865 transaction failed 29201/-22, size 72-24 line 3011 [ 835.425213] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.425250] binder: 4857:4860 transaction failed 29189/-3, size 0-0 line 3134 [ 835.425382] binder: 4857:4860 unknown command -393869567 [ 835.425388] binder: 4857:4860 ioctl c0306201 20004000 returned -22 [ 835.426037] binder: 4857:4860 got reply transaction with no transaction stack [ 835.426043] binder: 4857:4860 transaction failed 29201/-71, size 0-0 line 2927 [ 835.446997] binder: BINDER_SET_CONTEXT_MGR already set [ 835.447004] binder: 4866:4867 ioctl 40046207 0 returned -16 [ 835.447140] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.447178] binder: 4866:4867 transaction failed 29189/-3, size 72-24 line 3134 [ 835.447305] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.447339] binder: 4866:4867 transaction failed 29189/-3, size 0-0 line 3134 [ 835.447487] binder: 4866:4867 unknown command 109446913 [ 835.447493] binder: 4866:4867 ioctl c0306201 20004000 returned -22 [ 835.448168] binder: 4866:4867 got reply transaction with no transaction stack [ 835.448174] binder: 4866:4867 transaction failed 29201/-71, size 0-0 line 2927 [ 835.495621] binder: BINDER_SET_CONTEXT_MGR already set [ 835.495628] binder: 4870:4879 ioctl 40046207 0 returned -16 [ 835.495945] binder: 4870:4879 got transaction to invalid handle [ 835.495953] binder: 4870:4879 transaction failed 29201/-22, size 72-24 line 3011 [ 835.496250] binder: BINDER_SET_CONTEXT_MGR already set [ 835.496256] binder: 4869:4878 ioctl 40046207 0 returned -16 [ 835.496650] binder: BINDER_SET_CONTEXT_MGR already set [ 835.496656] binder: 4872:4877 ioctl 40046207 0 returned -16 [ 835.496849] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.496887] binder: 4869:4878 transaction failed 29189/-3, size 32-16 line 3134 [ 835.497101] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.497135] binder: 4870:4879 transaction failed 29189/-3, size 0-0 line 3134 [ 835.497263] binder: 4872:4877 got transaction to invalid handle [ 835.497269] binder: 4872:4877 transaction failed 29201/-22, size 32-24 line 3011 [ 835.497785] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.497819] binder: 4869:4878 transaction failed 29189/-3, size 0-0 line 3134 [ 835.498377] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.498411] binder: 4872:4877 transaction failed 29189/-3, size 0-0 line 3134 [ 835.498779] binder: 4870:4879 unknown command 109446913 [ 835.498785] binder: 4870:4879 ioctl c0306201 20004000 returned -22 [ 835.499090] binder: 4869:4878 unknown command 109446913 [ 835.499096] binder: 4869:4878 ioctl c0306201 20004000 returned -22 [ 835.499236] binder: 4872:4877 unknown command 109446913 [ 835.499242] binder: 4872:4877 ioctl c0306201 20004000 returned -22 [ 835.500189] binder: 4869:4878 got reply transaction with no transaction stack [ 835.500199] binder: 4869:4878 transaction failed 29201/-71, size 0-0 line 2927 [ 835.500355] binder: BINDER_SET_CONTEXT_MGR already set [ 835.500360] binder: 4873:4876 ioctl 40046207 0 returned -16 [ 835.501886] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.501922] binder: 4873:4876 transaction failed 29189/-3, size 32-16 line 3134 [ 835.503744] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.503780] binder: 4873:4876 transaction failed 29189/-3, size 0-0 line 3134 [ 835.504019] binder: 4873:4876 unknown command 109446913 [ 835.504026] binder: 4873:4876 ioctl c0306201 20004000 returned -22 [ 835.504987] binder: 4873:4876 got reply transaction with no transaction stack [ 835.504993] binder: 4873:4876 transaction failed 29201/-71, size 0-0 line 2927 [ 835.505206] binder: 4871:4880 got transaction to invalid handle [ 835.505213] binder: 4871:4880 transaction failed 29201/-22, size 72-24 line 3011 [ 835.505715] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.505750] binder: 4871:4880 transaction failed 29189/-3, size 0-0 line 3134 [ 835.506204] binder: 4871:4880 unknown command 109446913 [ 835.506210] binder: 4871:4880 ioctl c0306201 20004000 returned -22 [ 835.508173] binder: 4871:4880 got reply transaction with no transaction stack [ 835.508179] binder: 4871:4880 transaction failed 29201/-71, size 0-0 line 2927 [ 835.520296] binder: BINDER_SET_CONTEXT_MGR already set [ 835.520304] binder: 4868:4881 ioctl 40046207 0 returned -16 [ 835.527510] binder: 4868:4881 got transaction to invalid handle [ 835.527517] binder: 4868:4881 transaction failed 29201/-22, size 72-24 line 3011 [ 835.528252] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.528288] binder: 4868:4881 transaction failed 29189/-3, size 0-0 line 3134 [ 835.528591] binder: 4868:4881 unknown command 109446913 [ 835.528597] binder: 4868:4881 ioctl c0306201 20004000 returned -22 [ 835.541494] binder: BINDER_SET_CONTEXT_MGR already set [ 835.541502] binder: 4874:4883 ioctl 40046207 0 returned -16 [ 835.548208] binder: 4874:4883 got transaction to invalid handle [ 835.548216] binder: 4874:4883 transaction failed 29201/-22, size 72-24 line 3011 [ 835.556955] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.556993] binder: 4874:4883 transaction failed 29189/-3, size 0-0 line 3134 [ 835.566222] binder: 4874:4883 unknown command -393869567 [ 835.566230] binder: 4874:4883 ioctl c0306201 20004000 returned -22 [ 835.578408] binder: 4874:4883 got reply transaction with no transaction stack [ 835.578415] binder: 4874:4883 transaction failed 29201/-71, size 0-0 line 2927 [ 835.625648] binder: 4884:4890 got transaction to invalid handle [ 835.625656] binder: 4884:4890 transaction failed 29201/-22, size 72-24 line 3011 [ 835.625864] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.625902] binder: 4884:4890 transaction failed 29189/-3, size 0-0 line 3134 [ 835.626176] binder: 4884:4890 unknown command 109446913 [ 835.626182] binder: 4884:4890 ioctl c0306201 20004000 returned -22 [ 835.627262] binder: 4884:4890 got reply transaction with no transaction stack [ 835.627268] binder: 4884:4890 transaction failed 29201/-71, size 0-0 line 2927 [ 835.628248] binder: BINDER_SET_CONTEXT_MGR already set [ 835.628254] binder: 4885:4891 ioctl 40046207 0 returned -16 [ 835.628421] binder: 4885:4891 got transaction to invalid handle [ 835.628428] binder: 4885:4891 transaction failed 29201/-22, size 32-24 line 3011 [ 835.628475] binder: BINDER_SET_CONTEXT_MGR already set [ 835.628481] binder: 4886:4892 ioctl 40046207 0 returned -16 [ 835.628996] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.629032] binder: 4885:4891 transaction failed 29189/-3, size 0-0 line 3134 [ 835.629136] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.629171] binder: 4886:4892 transaction failed 29189/-3, size 32-16 line 3134 [ 835.629375] binder: 4885:4891 unknown command 109446913 [ 835.629381] binder: 4885:4891 ioctl c0306201 20004000 returned -22 [ 835.630458] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.630493] binder: 4886:4892 transaction failed 29189/-3, size 0-0 line 3134 [ 835.632209] binder: 4886:4892 unknown command 109446913 [ 835.632215] binder: 4886:4892 ioctl c0306201 20004000 returned -22 [ 835.633069] binder: BINDER_SET_CONTEXT_MGR already set [ 835.633078] binder: 4888:4894 ioctl 40046207 0 returned -16 [ 835.633287] binder: 4886:4892 got reply transaction with no transaction stack [ 835.633293] binder: 4886:4892 transaction failed 29201/-71, size 0-0 line 2927 [ 835.633576] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.633611] binder: 4888:4894 transaction failed 29189/-3, size 32-16 line 3134 [ 835.634957] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.634993] binder: 4888:4894 transaction failed 29189/-3, size 0-0 line 3134 [ 835.635274] binder: BINDER_SET_CONTEXT_MGR already set [ 835.635283] binder: 4889:4896 ioctl 40046207 0 returned -16 [ 835.635655] binder: 4889:4896 got transaction to invalid handle [ 835.635661] binder: 4889:4896 transaction failed 29201/-22, size 72-24 line 3011 [ 835.635834] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.635869] binder: 4889:4896 transaction failed 29189/-3, size 0-0 line 3134 [ 835.636986] binder: 4889:4896 unknown command 109446913 [ 835.636993] binder: 4889:4896 ioctl c0306201 20004000 returned -22 [ 835.637019] binder: 4888:4894 unknown command 109446913 [ 835.637025] binder: 4888:4894 ioctl c0306201 20004000 returned -22 [ 835.638757] binder: 4888:4894 got reply transaction with no transaction stack [ 835.638763] binder: 4888:4894 transaction failed 29201/-71, size 0-0 line 2927 [ 835.638980] binder: BINDER_SET_CONTEXT_MGR already set [ 835.638986] binder: 4887:4897 ioctl 40046207 0 returned -16 [ 835.639157] binder: 4887:4897 got transaction to invalid handle [ 835.639163] binder: 4887:4897 transaction failed 29201/-22, size 72-24 line 3011 [ 835.643453] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.643491] binder: 4887:4897 transaction failed 29189/-3, size 0-0 line 3134 [ 835.647286] binder: 4887:4897 unknown command 109446913 [ 835.647292] binder: 4887:4897 ioctl c0306201 20004000 returned -22 [ 835.700639] binder: BINDER_SET_CONTEXT_MGR already set [ 835.700647] binder: 4893:4899 ioctl 40046207 0 returned -16 [ 835.701831] binder: 4893:4899 got transaction to invalid handle [ 835.701839] binder: 4893:4899 transaction failed 29201/-22, size 72-24 line 3011 [ 835.704509] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.704549] binder: 4893:4899 transaction failed 29189/-3, size 0-0 line 3134 [ 835.706910] binder: 4893:4899 unknown command -393869567 [ 835.706917] binder: 4893:4899 ioctl c0306201 20004000 returned -22 [ 835.717264] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.717302] binder: 4901:4902 transaction failed 29189/-3, size 32-16 line 3134 [ 835.717468] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.717503] binder: 4901:4902 transaction failed 29189/-3, size 0-0 line 3134 [ 835.717606] binder: 4901:4902 unknown command 109446913 [ 835.717612] binder: 4901:4902 ioctl c0306201 20004000 returned -22 [ 835.718266] binder: 4901:4902 got reply transaction with no transaction stack [ 835.718272] binder: 4901:4902 transaction failed 29201/-71, size 0-0 line 2927 [ 835.735392] binder: BINDER_SET_CONTEXT_MGR already set [ 835.735398] binder: 4903:4904 ioctl 40046207 0 returned -16 [ 835.735530] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.735569] binder: 4903:4904 transaction failed 29189/-3, size 72-24 line 3134 [ 835.735696] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.735731] binder: 4903:4904 transaction failed 29189/-3, size 0-0 line 3134 [ 835.735873] binder: 4903:4904 unknown command 109446913 [ 835.735879] binder: 4903:4904 ioctl c0306201 20004000 returned -22 [ 835.736585] binder: 4903:4904 got reply transaction with no transaction stack [ 835.736592] binder: 4903:4904 transaction failed 29201/-71, size 0-0 line 2927 [ 835.779913] binder: BINDER_SET_CONTEXT_MGR already set [ 835.779920] binder: 4909:4914 ioctl 40046207 0 returned -16 [ 835.780310] binder: 4909:4914 got transaction to invalid handle [ 835.780317] binder: 4909:4914 transaction failed 29201/-22, size 72-24 line 3011 [ 835.781597] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.781635] binder: 4909:4914 transaction failed 29189/-3, size 0-0 line 3134 [ 835.781804] binder: BINDER_SET_CONTEXT_MGR already set [ 835.781810] binder: 4910:4913 ioctl 40046207 0 returned -16 [ 835.781939] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.781973] binder: 4911:4912 transaction failed 29189/-3, size 32-16 line 3134 [ 835.782061] binder: 4910:4913 got transaction to invalid handle [ 835.782067] binder: 4910:4913 transaction failed 29201/-22, size 72-24 line 3011 [ 835.782472] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.782505] binder: 4911:4912 transaction failed 29189/-3, size 0-0 line 3134 [ 835.782940] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.782973] binder: 4910:4913 transaction failed 29189/-3, size 0-0 line 3134 [ 835.783035] binder: 4909:4914 unknown command 109446913 [ 835.783042] binder: 4909:4914 ioctl c0306201 20004000 returned -22 [ 835.784128] binder: 4910:4913 unknown command 109446913 [ 835.784134] binder: 4910:4913 ioctl c0306201 20004000 returned -22 [ 835.785170] binder: BINDER_SET_CONTEXT_MGR already set [ 835.785175] binder: 4907:4916 ioctl 40046207 0 returned -16 [ 835.785251] binder: 4907:4916 got transaction to invalid handle [ 835.785257] binder: 4907:4916 transaction failed 29201/-22, size 72-24 line 3011 [ 835.785380] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.785414] binder: 4907:4916 transaction failed 29189/-3, size 0-0 line 3134 [ 835.785764] binder: 4911:4912 unknown command 109446913 [ 835.785770] binder: 4911:4912 ioctl c0306201 20004000 returned -22 [ 835.786483] binder: 4907:4916 unknown command 109446913 [ 835.786489] binder: 4907:4916 ioctl c0306201 20004000 returned -22 [ 835.787374] binder: 4911:4912 got reply transaction with no transaction stack [ 835.787380] binder: 4911:4912 transaction failed 29201/-71, size 0-0 line 2927 [ 835.804014] binder: BINDER_SET_CONTEXT_MGR already set [ 835.804021] binder: 4905:4917 ioctl 40046207 0 returned -16 [ 835.804222] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.804329] binder: 4905:4917 transaction failed 29189/-3, size 32-16 line 3134 [ 835.810251] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.810290] binder: 4905:4917 transaction failed 29189/-3, size 0-0 line 3134 [ 835.810413] binder: 4905:4917 unknown command 109446913 [ 835.810419] binder: 4905:4917 ioctl c0306201 20004000 returned -22 [ 835.811296] binder: 4905:4917 got reply transaction with no transaction stack [ 835.811303] binder: 4905:4917 transaction failed 29201/-71, size 0-0 line 2927 [ 835.835895] binder: BINDER_SET_CONTEXT_MGR already set [ 835.835904] binder: 4906:4921 ioctl 40046207 0 returned -16 [ 835.838039] binder: 4908:4919 got transaction to invalid handle [ 835.838047] binder: 4908:4919 transaction failed 29201/-22, size 72-24 line 3011 [ 835.838249] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.838286] binder: 4908:4919 transaction failed 29189/-3, size 0-0 line 3134 [ 835.838552] binder: 4908:4919 unknown command 109446913 [ 835.838558] binder: 4908:4919 ioctl c0306201 20004000 returned -22 [ 835.839503] binder: 4908:4919 got reply transaction with no transaction stack [ 835.839509] binder: 4908:4919 transaction failed 29201/-71, size 0-0 line 2927 [ 835.863636] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.863676] binder: 4906:4921 transaction failed 29189/-3, size 0-0 line 3134 [ 835.863888] binder: 4906:4924 got transaction to invalid handle [ 835.863896] binder: 4906:4924 transaction failed 29201/-22, size 72-24 line 3011 [ 835.866249] binder: 4906:4915 unknown command -393869567 [ 835.866255] binder: 4906:4915 ioctl c0306201 20004000 returned -22 [ 835.909641] binder: BINDER_SET_CONTEXT_MGR already set [ 835.909648] binder: 4925:4929 ioctl 40046207 0 returned -16 [ 835.910630] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.910668] binder: 4922:4927 transaction failed 29189/-3, size 32-16 line 3134 [ 835.910800] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.910838] binder: 4922:4927 transaction failed 29189/-3, size 0-0 line 3134 [ 835.910961] binder: 4922:4927 unknown command 109446913 [ 835.910968] binder: 4922:4927 ioctl c0306201 20004000 returned -22 [ 835.911835] binder: 4922:4927 got reply transaction with no transaction stack [ 835.911842] binder: 4922:4927 transaction failed 29201/-71, size 0-0 line 2927 [ 835.915991] binder: 4925:4929 got transaction to invalid handle [ 835.915999] binder: 4925:4929 transaction failed 29201/-22, size 72-24 line 3011 [ 835.916459] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.916495] binder: 4925:4929 transaction failed 29189/-3, size 0-0 line 3134 [ 835.916978] binder: 4925:4929 unknown command 109446913 [ 835.916985] binder: 4925:4929 ioctl c0306201 20004000 returned -22 [ 835.917752] binder: BINDER_SET_CONTEXT_MGR already set [ 835.917757] binder: 4923:4930 ioctl 40046207 0 returned -16 [ 835.918066] binder: BINDER_SET_CONTEXT_MGR already set [ 835.918072] binder: 4926:4931 ioctl 40046207 0 returned -16 [ 835.918178] binder: 4923:4930 got transaction to invalid handle [ 835.918185] binder: 4923:4930 transaction failed 29201/-22, size 72-24 line 3011 [ 835.918299] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.918333] binder: 4923:4930 transaction failed 29189/-3, size 0-0 line 3134 [ 835.918515] binder: 4923:4930 unknown command 109446913 [ 835.918521] binder: 4923:4930 ioctl c0306201 20004000 returned -22 [ 835.919390] binder: 4926:4931 got transaction to invalid handle [ 835.919396] binder: 4926:4931 transaction failed 29201/-22, size 72-24 line 3011 [ 835.920598] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.920633] binder: 4926:4931 transaction failed 29189/-3, size 0-0 line 3134 [ 835.920798] binder: 4926:4931 unknown command 109446913 [ 835.920804] binder: 4926:4931 ioctl c0306201 20004000 returned -22 [ 835.945758] binder: BINDER_SET_CONTEXT_MGR already set [ 835.945765] binder: 4928:4934 ioctl 40046207 0 returned -16 [ 835.945904] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.945940] binder: 4928:4934 transaction failed 29189/-3, size 32-16 line 3134 [ 835.946137] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.946171] binder: 4928:4934 transaction failed 29189/-3, size 0-0 line 3134 [ 835.946345] binder: 4928:4934 unknown command 109446913 [ 835.946351] binder: 4928:4934 ioctl c0306201 20004000 returned -22 [ 835.947150] binder: 4928:4934 got reply transaction with no transaction stack [ 835.947157] binder: 4928:4934 transaction failed 29201/-71, size 0-0 line 2927 [ 835.959324] binder: 4932:4936 got transaction to invalid handle [ 835.959331] binder: 4932:4936 transaction failed 29201/-22, size 72-24 line 3011 [ 835.959460] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.959496] binder: 4932:4936 transaction failed 29189/-3, size 0-0 line 3134 [ 835.959708] binder: 4932:4936 unknown command 109446913 [ 835.959714] binder: 4932:4936 ioctl c0306201 20004000 returned -22 [ 835.960487] binder: 4932:4936 got reply transaction with no transaction stack [ 835.960493] binder: 4932:4936 transaction failed 29201/-71, size 0-0 line 2927 [ 835.995355] binder: BINDER_SET_CONTEXT_MGR already set [ 835.995361] binder: 4940:4942 ioctl 40046207 0 returned -16 [ 835.996263] binder: 4940:4942 got transaction to invalid handle [ 835.996270] binder: 4940:4942 transaction failed 29201/-22, size 72-24 line 3011 [ 835.996406] binder_alloc: 5895: binder_alloc_buf, no vma [ 835.996442] binder: 4940:4942 transaction failed 29189/-3, size 0-0 line 3134 [ 835.996604] binder: 4940:4942 unknown command 109446913 [ 835.996610] binder: 4940:4942 ioctl c0306201 20004000 returned -22 [ 836.001762] binder: BINDER_SET_CONTEXT_MGR already set [ 836.001769] binder: 4935:4943 ioctl 40046207 0 returned -16 [ 836.004110] binder: 4935:4938 got transaction to invalid handle [ 836.004117] binder: 4935:4938 transaction failed 29201/-22, size 72-24 line 3011 [ 836.004293] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.004329] binder: 4935:4938 transaction failed 29189/-3, size 0-0 line 3134 [ 836.004457] binder: 4935:4938 unknown command -393869567 [ 836.004463] binder: 4935:4938 ioctl c0306201 20004000 returned -22 [ 836.024521] binder: BINDER_SET_CONTEXT_MGR already set [ 836.024528] binder: 4944:4945 ioctl 40046207 0 returned -16 [ 836.024660] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.024697] binder: 4944:4945 transaction failed 29189/-3, size 72-24 line 3134 [ 836.024827] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.024861] binder: 4944:4945 transaction failed 29189/-3, size 0-0 line 3134 [ 836.024969] binder: 4944:4945 unknown command 109446913 [ 836.024975] binder: 4944:4945 ioctl c0306201 20004000 returned -22 [ 836.025675] binder: 4944:4945 got reply transaction with no transaction stack [ 836.025681] binder: 4944:4945 transaction failed 29201/-71, size 0-0 line 2927 [ 836.069225] binder: BINDER_SET_CONTEXT_MGR already set [ 836.069232] binder: 4951:4954 ioctl 40046207 0 returned -16 [ 836.069791] binder: 4951:4954 got transaction to invalid handle [ 836.069798] binder: 4951:4954 transaction failed 29201/-22, size 72-16 line 3011 [ 836.070315] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.070353] binder: 4951:4954 transaction failed 29189/-3, size 0-0 line 3134 [ 836.071132] binder: BINDER_SET_CONTEXT_MGR already set [ 836.071138] binder: 4947:4956 ioctl 40046207 0 returned -16 [ 836.071760] binder: BINDER_SET_CONTEXT_MGR already set [ 836.071766] binder: 4948:4957 ioctl 40046207 0 returned -16 [ 836.071894] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.071931] binder: 4947:4956 transaction failed 29189/-3, size 0-0 line 3134 [ 836.072005] binder: BINDER_SET_CONTEXT_MGR already set [ 836.072011] binder: 4950:4955 ioctl 40046207 0 returned -16 [ 836.072127] binder: 4948:4957 got transaction to invalid handle [ 836.072134] binder: 4948:4957 transaction failed 29201/-22, size 72-24 line 3011 [ 836.072371] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.072472] binder: 4950:4955 transaction failed 29189/-3, size 32-16 line 3134 [ 836.072977] binder: 4949:4958 got transaction to invalid handle [ 836.072984] binder: 4949:4958 transaction failed 29201/-22, size 72-24 line 3011 [ 836.073019] binder: 4951:4954 unknown command 109446913 [ 836.073025] binder: 4951:4954 ioctl c0306201 20004000 returned -22 [ 836.073187] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.073221] binder: 4950:4955 transaction failed 29189/-3, size 0-0 line 3134 [ 836.073282] binder: 4947:4956 unknown command 109446913 [ 836.073288] binder: 4947:4956 ioctl c0306201 20004000 returned -22 [ 836.073404] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.073437] binder: 4948:4957 transaction failed 29189/-3, size 0-0 line 3134 [ 836.073627] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.073660] binder: 4949:4958 transaction failed 29189/-3, size 0-0 line 3134 [ 836.074479] binder: 4947:4956 got reply transaction with no transaction stack [ 836.074485] binder: 4947:4956 transaction failed 29201/-71, size 0-0 line 2927 [ 836.074715] binder: 4950:4955 unknown command 109446913 [ 836.074721] binder: 4950:4955 ioctl c0306201 20004000 returned -22 [ 836.075587] binder: 4950:4955 got reply transaction with no transaction stack [ 836.075593] binder: 4950:4955 transaction failed 29201/-71, size 0-0 line 2927 [ 836.075646] binder: 4948:4957 unknown command 109446913 [ 836.075652] binder: 4948:4957 ioctl c0306201 20004000 returned -22 [ 836.075782] binder: 4949:4958 unknown command 109446913 [ 836.075788] binder: 4949:4958 ioctl c0306201 20004000 returned -22 [ 836.077538] binder: 4949:4958 got reply transaction with no transaction stack [ 836.077544] binder: 4949:4958 transaction failed 29201/-71, size 0-0 line 2927 [ 836.111506] binder: BINDER_SET_CONTEXT_MGR already set [ 836.111514] binder: 4952:4961 ioctl 40046207 0 returned -16 [ 836.114164] binder: 4952:4961 got transaction to invalid handle [ 836.114172] binder: 4952:4961 transaction failed 29201/-22, size 72-24 line 3011 [ 836.129366] binder: BINDER_SET_CONTEXT_MGR already set [ 836.129375] binder: 4946:4959 ioctl 40046207 0 returned -16 [ 836.129597] binder: 4946:4959 got transaction to invalid handle [ 836.129604] binder: 4946:4959 transaction failed 29201/-22, size 72-24 line 3011 [ 836.129741] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.129779] binder: 4946:4959 transaction failed 29189/-3, size 0-0 line 3134 [ 836.129978] binder: 4946:4959 unknown command 109446913 [ 836.129984] binder: 4946:4959 ioctl c0306201 20004000 returned -22 [ 836.135444] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.135483] binder: 4952:4961 transaction failed 29189/-3, size 0-0 line 3134 [ 836.146620] binder: 4952:4961 got reply transaction with no transaction stack [ 836.146628] binder: 4952:4961 transaction failed 29201/-71, size 0-0 line 2927 [ 836.190950] binder: 4965:4968 got transaction to invalid handle [ 836.190957] binder: 4965:4968 transaction failed 29201/-22, size 72-24 line 3011 [ 836.191091] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.191129] binder: 4965:4968 transaction failed 29189/-3, size 0-0 line 3134 [ 836.191256] binder: 4965:4968 unknown command 109446913 [ 836.191262] binder: 4965:4968 ioctl c0306201 20004000 returned -22 [ 836.192166] binder: 4965:4968 got reply transaction with no transaction stack [ 836.192172] binder: 4965:4968 transaction failed 29201/-71, size 0-0 line 2927 [ 836.204850] binder: BINDER_SET_CONTEXT_MGR already set [ 836.204857] binder: 4963:4970 ioctl 40046207 0 returned -16 [ 836.205112] binder: BINDER_SET_CONTEXT_MGR already set [ 836.205118] binder: 4966:4969 ioctl 40046207 0 returned -16 [ 836.205262] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.205300] binder: 4963:4970 transaction failed 29189/-3, size 32-16 line 3134 [ 836.205533] binder: 4966:4969 got transaction to invalid handle [ 836.205540] binder: 4966:4969 transaction failed 29201/-22, size 72-24 line 3011 [ 836.205719] binder: BINDER_SET_CONTEXT_MGR already set [ 836.205724] binder: 4964:4971 ioctl 40046207 0 returned -16 [ 836.205877] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.205912] binder: 4966:4969 transaction failed 29189/-3, size 0-0 line 3134 [ 836.206171] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.206205] binder: 4964:4971 transaction failed 29189/-3, size 0-0 line 3134 [ 836.206330] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.206363] binder: 4963:4970 transaction failed 29189/-3, size 0-0 line 3134 [ 836.206475] binder: 4966:4969 unknown command 109446913 [ 836.206481] binder: 4966:4969 ioctl c0306201 20004000 returned -22 [ 836.207432] binder: 4964:4971 unknown command 109446913 [ 836.207438] binder: 4964:4971 ioctl c0306201 20004000 returned -22 [ 836.208348] binder: 4963:4970 unknown command 109446913 [ 836.208354] binder: 4963:4970 ioctl c0306201 20004000 returned -22 [ 836.209158] binder: 4964:4971 got reply transaction with no transaction stack [ 836.209164] binder: 4964:4971 transaction failed 29201/-71, size 0-0 line 2927 [ 836.209193] binder: 4963:4970 got reply transaction with no transaction stack [ 836.209198] binder: 4963:4970 transaction failed 29201/-71, size 0-0 line 2927 [ 836.222396] binder: BINDER_SET_CONTEXT_MGR already set [ 836.222403] binder: 4967:4974 ioctl 40046207 0 returned -16 [ 836.222482] binder: 4967:4974 got transaction to invalid handle [ 836.222488] binder: 4967:4974 transaction failed 29201/-22, size 72-16 line 3011 [ 836.222671] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.222707] binder: 4967:4974 transaction failed 29189/-3, size 0-0 line 3134 [ 836.222873] binder: 4967:4974 unknown command 109446913 [ 836.222879] binder: 4967:4974 ioctl c0306201 20004000 returned -22 [ 836.246070] binder: BINDER_SET_CONTEXT_MGR already set [ 836.246078] binder: 4972:4978 ioctl 40046207 0 returned -16 [ 836.246308] binder: 4972:4978 got transaction to invalid handle [ 836.246315] binder: 4972:4978 transaction failed 29201/-22, size 72-24 line 3011 [ 836.246444] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.246480] binder: 4972:4978 transaction failed 29189/-3, size 0-0 line 3134 [ 836.248057] binder: 4972:4978 unknown command 109446913 [ 836.248063] binder: 4972:4978 ioctl c0306201 20004000 returned -22 [ 836.271397] binder: BINDER_SET_CONTEXT_MGR already set [ 836.271406] binder: 4973:4982 ioctl 40046207 0 returned -16 [ 836.273482] binder: 4973:4982 got transaction to invalid handle [ 836.273493] binder: 4973:4982 transaction failed 29201/-22, size 72-24 line 3011 [ 836.279425] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.279466] binder: 4973:4982 transaction failed 29189/-3, size 0-0 line 3134 [ 836.282416] binder: 4973:4982 got reply transaction with no transaction stack [ 836.282424] binder: 4973:4982 transaction failed 29201/-71, size 0-0 line 2927 [ 836.283042] binder: 4980:4983 got transaction to invalid handle [ 836.283049] binder: 4980:4983 transaction failed 29201/-22, size 72-24 line 3011 [ 836.283176] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.283213] binder: 4980:4983 transaction failed 29189/-3, size 0-0 line 3134 [ 836.283338] binder: 4980:4983 unknown command 109446913 [ 836.283344] binder: 4980:4983 ioctl c0306201 20004000 returned -22 [ 836.284163] binder: 4980:4983 got reply transaction with no transaction stack [ 836.284169] binder: 4980:4983 transaction failed 29201/-71, size 0-0 line 2927 [ 836.307777] binder: BINDER_SET_CONTEXT_MGR already set [ 836.307783] binder: 4984:4985 ioctl 40046207 0 returned -16 [ 836.307921] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.307958] binder: 4984:4985 transaction failed 29189/-3, size 72-24 line 3134 [ 836.308085] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.308119] binder: 4984:4985 transaction failed 29189/-3, size 0-0 line 3134 [ 836.308227] binder: 4984:4985 unknown command 109446913 [ 836.308232] binder: 4984:4985 ioctl c0306201 20004000 returned -22 [ 836.308933] binder: 4984:4985 got reply transaction with no transaction stack [ 836.308939] binder: 4984:4985 transaction failed 29201/-71, size 0-0 line 2927 [ 836.350597] binder: BINDER_SET_CONTEXT_MGR already set [ 836.350604] binder: 4989:4996 ioctl 40046207 0 returned -16 [ 836.350786] binder: 4989:4996 unknown command 109446913 [ 836.350793] binder: 4989:4996 ioctl c0306201 20004000 returned -22 [ 836.354611] binder: BINDER_SET_CONTEXT_MGR already set [ 836.354617] binder: 4987:4997 ioctl 40046207 0 returned -16 [ 836.354906] binder: BINDER_SET_CONTEXT_MGR already set [ 836.354911] binder: 4988:4998 ioctl 40046207 0 returned -16 [ 836.355255] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.355292] binder: 4988:4998 transaction failed 29189/-3, size 32-16 line 3134 [ 836.355451] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.355485] binder: 4987:4997 transaction failed 29189/-3, size 0-0 line 3134 [ 836.356045] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.356079] binder: 4988:4998 transaction failed 29189/-3, size 0-0 line 3134 [ 836.356127] binder: BINDER_SET_CONTEXT_MGR already set [ 836.356133] binder: 4990:4995 ioctl 40046207 0 returned -16 [ 836.356335] binder: 4987:4997 unknown command 109446913 [ 836.356341] binder: 4987:4997 ioctl c0306201 20004000 returned -22 [ 836.358211] binder: 4987:4997 got reply transaction with no transaction stack [ 836.358217] binder: 4987:4997 transaction failed 29201/-71, size 0-0 line 2927 [ 836.358567] binder: 4988:4998 unknown command 109446913 [ 836.358573] binder: 4988:4998 ioctl c0306201 20004000 returned -22 [ 836.358661] binder: 4990:4995 got transaction to invalid handle [ 836.358667] binder: 4990:4995 transaction failed 29201/-22, size 72-16 line 3011 [ 836.359469] binder: 4988:4998 got reply transaction with no transaction stack [ 836.359587] binder: 4988:4998 transaction failed 29201/-71, size 0-0 line 2927 [ 836.362314] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.362352] binder: 4990:4995 transaction failed 29189/-3, size 0-0 line 3134 [ 836.362693] binder: 4990:4995 unknown command 109446913 [ 836.362699] binder: 4990:4995 ioctl c0306201 20004000 returned -22 [ 836.364303] binder: 4991:4994 got transaction to invalid handle [ 836.364310] binder: 4991:4994 transaction failed 29201/-22, size 72-24 line 3011 [ 836.364501] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.364537] binder: 4991:4994 transaction failed 29189/-3, size 0-0 line 3134 [ 836.365847] binder: 4991:4994 unknown command 109446913 [ 836.365854] binder: 4991:4994 ioctl c0306201 20004000 returned -22 [ 836.366763] binder: 4991:4994 got reply transaction with no transaction stack [ 836.366770] binder: 4991:4994 transaction failed 29201/-71, size 0-0 line 2927 [ 836.376677] binder: BINDER_SET_CONTEXT_MGR already set [ 836.376684] binder: 4986:4999 ioctl 40046207 0 returned -16 [ 836.380593] binder: 4986:4999 got transaction to invalid handle [ 836.380600] binder: 4986:4999 transaction failed 29201/-22, size 72-24 line 3011 [ 836.380736] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.380842] binder: 4986:4999 transaction failed 29189/-3, size 0-0 line 3134 [ 836.385016] binder: 4986:4999 unknown command 109446913 [ 836.385023] binder: 4986:4999 ioctl c0306201 20004000 returned -22 [ 836.393936] binder: BINDER_SET_CONTEXT_MGR already set [ 836.393944] binder: 4992:5001 ioctl 40046207 0 returned -16 [ 836.401171] binder: 4992:5001 got transaction to invalid handle [ 836.401179] binder: 4992:5001 transaction failed 29201/-22, size 72-24 line 3011 [ 836.409982] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.410020] binder: 4992:5001 transaction failed 29189/-3, size 0-0 line 3134 [ 836.426560] binder: 4992:5001 got reply transaction with no transaction stack [ 836.426568] binder: 4992:5001 transaction failed 29201/-71, size 0-0 line 2927 [ 836.474034] binder: BINDER_SET_CONTEXT_MGR already set [ 836.474042] binder: 5002:5009 ioctl 40046207 0 returned -16 [ 836.474225] binder: 5002:5009 got transaction to invalid handle [ 836.474232] binder: 5002:5009 transaction failed 29201/-22, size 72-24 line 3011 [ 836.474903] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.474941] binder: 5002:5009 transaction failed 29189/-3, size 0-0 line 3134 [ 836.476104] binder: BINDER_SET_CONTEXT_MGR already set [ 836.476110] binder: 5003:5008 ioctl 40046207 0 returned -16 [ 836.476394] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.476431] binder: 5003:5008 transaction failed 29189/-3, size 0-0 line 3134 [ 836.476467] binder: 5002:5009 unknown command 109446913 [ 836.476473] binder: 5002:5009 ioctl c0306201 20004000 returned -22 [ 836.477536] binder: 5003:5008 unknown command 109446913 [ 836.477542] binder: 5003:5008 ioctl c0306201 20004000 returned -22 [ 836.478439] binder: 5003:5008 got reply transaction with no transaction stack [ 836.478445] binder: 5003:5008 transaction failed 29201/-71, size 0-0 line 2927 [ 836.489181] binder: 5004:5011 got transaction to invalid handle [ 836.489190] binder: 5004:5011 transaction failed 29201/-22, size 72-24 line 3011 [ 836.489519] binder: BINDER_SET_CONTEXT_MGR already set [ 836.489525] binder: 5006:5012 ioctl 40046207 0 returned -16 [ 836.489793] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.489845] binder: 5004:5011 transaction failed 29189/-3, size 0-0 line 3134 [ 836.490290] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.490325] binder: 5006:5012 transaction failed 29189/-3, size 32-16 line 3134 [ 836.491728] binder: BINDER_SET_CONTEXT_MGR already set [ 836.491735] binder: 5005:5010 ioctl 40046207 0 returned -16 [ 836.491825] binder: 5005:5010 got transaction to invalid handle [ 836.491831] binder: 5005:5010 transaction failed 29201/-22, size 72-24 line 3011 [ 836.492100] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.492139] binder: 5005:5010 transaction failed 29189/-3, size 0-0 line 3134 [ 836.492450] binder: 5004:5011 unknown command 109446913 [ 836.492457] binder: 5004:5011 ioctl c0306201 20004000 returned -22 [ 836.494183] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.494220] binder: 5006:5012 transaction failed 29189/-3, size 0-0 line 3134 [ 836.494363] binder: 5004:5011 got reply transaction with no transaction stack [ 836.494369] binder: 5004:5011 transaction failed 29201/-71, size 0-0 line 2927 [ 836.498009] binder: 5005:5010 unknown command 109446913 [ 836.498017] binder: 5005:5010 ioctl c0306201 20004000 returned -22 [ 836.499032] binder: 5006:5012 unknown command 109446913 [ 836.499039] binder: 5006:5012 ioctl c0306201 20004000 returned -22 [ 836.499810] binder: BINDER_SET_CONTEXT_MGR already set [ 836.499815] binder: 5007:5013 ioctl 40046207 0 returned -16 [ 836.502752] binder: 5006:5012 got reply transaction with no transaction stack [ 836.502759] binder: 5006:5012 transaction failed 29201/-71, size 0-0 line 2927 [ 836.502815] binder: 5007:5013 got transaction to invalid handle [ 836.502821] binder: 5007:5013 transaction failed 29201/-22, size 72-24 line 3011 [ 836.503016] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.503055] binder: 5007:5013 transaction failed 29189/-3, size 0-0 line 3134 [ 836.504066] binder: 5007:5013 unknown command 109446913 [ 836.504073] binder: 5007:5013 ioctl c0306201 20004000 returned -22 [ 836.562975] binder: BINDER_SET_CONTEXT_MGR already set [ 836.562983] binder: 5014:5018 ioctl 40046207 0 returned -16 [ 836.564939] binder: 5014:5018 got transaction to invalid handle [ 836.564987] binder: 5014:5018 transaction failed 29201/-22, size 72-24 line 3011 [ 836.565663] binder: BINDER_SET_CONTEXT_MGR already set [ 836.565669] binder: 5016:5019 ioctl 40046207 0 returned -16 [ 836.565733] binder: 5016:5019 got transaction to invalid handle [ 836.565739] binder: 5016:5019 transaction failed 29201/-22, size 72-24 line 3011 [ 836.565884] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.565922] binder: 5016:5019 transaction failed 29189/-3, size 0-0 line 3134 [ 836.566013] binder: 5016:5019 unknown command 109446913 [ 836.566019] binder: 5016:5019 ioctl c0306201 20004000 returned -22 [ 836.566351] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.566388] binder: 5014:5015 transaction failed 29189/-3, size 0-0 line 3134 [ 836.566476] binder: 5014:5015 unknown command -393869567 [ 836.566482] binder: 5014:5015 ioctl c0306201 20004000 returned -22 [ 836.567172] binder: 5014:5015 got reply transaction with no transaction stack [ 836.567178] binder: 5014:5015 transaction failed 29201/-71, size 0-0 line 2927 [ 836.594125] binder: BINDER_SET_CONTEXT_MGR already set [ 836.594132] binder: 5020:5021 ioctl 40046207 0 returned -16 [ 836.594270] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.594308] binder: 5020:5021 transaction failed 29189/-3, size 72-24 line 3134 [ 836.594437] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.594472] binder: 5020:5021 transaction failed 29189/-3, size 0-0 line 3134 [ 836.594580] binder: 5020:5021 unknown command 109446913 [ 836.594586] binder: 5020:5021 ioctl c0306201 20004000 returned -22 [ 836.595292] binder: 5020:5021 got reply transaction with no transaction stack [ 836.595298] binder: 5020:5021 transaction failed 29201/-71, size 0-0 line 2927 [ 836.639135] binder: BINDER_SET_CONTEXT_MGR already set [ 836.639143] binder: 5026:5033 ioctl 40046207 0 returned -16 [ 836.639292] binder: BINDER_SET_CONTEXT_MGR already set [ 836.639297] binder: 5028:5031 ioctl 40046207 0 returned -16 [ 836.639427] binder: 5026:5033 got transaction to invalid handle [ 836.639435] binder: 5026:5033 transaction failed 29201/-22, size 72-24 line 3011 [ 836.639657] binder: 5028:5031 got transaction to invalid handle [ 836.639663] binder: 5028:5031 transaction failed 29201/-22, size 72-24 line 3011 [ 836.639932] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.639970] binder: 5026:5033 transaction failed 29189/-3, size 0-0 line 3134 [ 836.640272] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.640348] binder: 5028:5031 transaction failed 29189/-3, size 0-0 line 3134 [ 836.640873] binder: 5024:5030 got transaction to invalid handle [ 836.640880] binder: 5024:5030 transaction failed 29201/-22, size 72-24 line 3011 [ 836.640986] binder: 5026:5033 unknown command 109446913 [ 836.640992] binder: 5026:5033 ioctl c0306201 20004000 returned -22 [ 836.641436] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.641471] binder: 5024:5030 transaction failed 29189/-3, size 0-0 line 3134 [ 836.642419] binder: BINDER_SET_CONTEXT_MGR already set [ 836.642425] binder: 5025:5034 ioctl 40046207 0 returned -16 [ 836.642686] binder: 5028:5031 unknown command 109446913 [ 836.642692] binder: 5028:5031 ioctl c0306201 20004000 returned -22 [ 836.643024] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.643059] binder: 5025:5034 transaction failed 29189/-3, size 32-16 line 3134 [ 836.643134] binder: BINDER_SET_CONTEXT_MGR already set [ 836.643139] binder: 5023:5029 ioctl 40046207 0 returned -16 [ 836.643301] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.643335] binder: 5025:5034 transaction failed 29189/-3, size 0-0 line 3134 [ 836.643492] binder: 5024:5030 unknown command 109446913 [ 836.643497] binder: 5024:5030 ioctl c0306201 20004000 returned -22 [ 836.643691] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.643725] binder: 5023:5029 transaction failed 29189/-3, size 0-16 line 3134 [ 836.644710] binder: 5024:5030 got reply transaction with no transaction stack [ 836.644716] binder: 5024:5030 transaction failed 29201/-71, size 0-0 line 2927 [ 836.645822] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.645858] binder: 5023:5029 transaction failed 29189/-3, size 0-0 line 3134 [ 836.645920] binder: 5025:5034 unknown command 109446913 [ 836.645926] binder: 5025:5034 ioctl c0306201 20004000 returned -22 [ 836.646953] binder: 5025:5034 got reply transaction with no transaction stack [ 836.646959] binder: 5025:5034 transaction failed 29201/-71, size 0-0 line 2927 [ 836.647069] binder: 5023:5029 unknown command 109446913 [ 836.647074] binder: 5023:5029 ioctl c0306201 20004000 returned -22 [ 836.647991] binder: 5023:5029 got reply transaction with no transaction stack [ 836.647996] binder: 5023:5029 transaction failed 29201/-71, size 0-0 line 2927 [ 836.668055] binder: BINDER_SET_CONTEXT_MGR already set [ 836.668063] binder: 5022:5035 ioctl 40046207 0 returned -16 [ 836.672024] binder: 5022:5035 got transaction to invalid handle [ 836.672032] binder: 5022:5035 transaction failed 29201/-22, size 72-24 line 3011 [ 836.672285] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.672322] binder: 5022:5035 transaction failed 29189/-3, size 0-0 line 3134 [ 836.672487] binder: 5022:5035 unknown command 109446913 [ 836.672493] binder: 5022:5035 ioctl c0306201 20004000 returned -22 [ 836.682703] binder: BINDER_SET_CONTEXT_MGR already set [ 836.682711] binder: 5027:5037 ioctl 40046207 0 returned -16 [ 836.689175] binder: 5027:5037 got transaction to invalid handle [ 836.689184] binder: 5027:5037 transaction failed 29201/-22, size 72-24 line 3011 [ 836.697787] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.697831] binder: 5027:5037 transaction failed 29189/-3, size 0-0 line 3134 [ 836.699094] binder: 5027:5037 unknown command -393869567 [ 836.699100] binder: 5027:5037 ioctl c0306201 20004000 returned -22 [ 836.707534] binder: 5027:5037 got reply transaction with no transaction stack [ 836.707541] binder: 5027:5037 transaction failed 29201/-71, size 0-0 line 2927 [ 836.758376] binder: BINDER_SET_CONTEXT_MGR already set [ 836.758383] binder: 5038:5043 ioctl 40046207 0 returned -16 [ 836.758461] binder: 5038:5043 got transaction to invalid handle [ 836.758468] binder: 5038:5043 transaction failed 29201/-22, size 72-24 line 3011 [ 836.758599] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.758636] binder: 5038:5043 transaction failed 29189/-3, size 0-0 line 3134 [ 836.761447] binder: 5038:5043 unknown command 109446913 [ 836.761454] binder: 5038:5043 ioctl c0306201 20004000 returned -22 [ 836.767498] binder: BINDER_SET_CONTEXT_MGR already set [ 836.767504] binder: 5039:5046 ioctl 40046207 0 returned -16 [ 836.767795] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.767834] binder: 5039:5046 transaction failed 29189/-3, size 32-16 line 3134 [ 836.768199] binder: 5041:5047 got transaction to invalid handle [ 836.768205] binder: 5041:5047 transaction failed 29201/-22, size 72-24 line 3011 [ 836.768329] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.768364] binder: 5041:5047 transaction failed 29189/-3, size 0-0 line 3134 [ 836.772939] binder: 5041:5047 unknown command 109446913 [ 836.772946] binder: 5041:5047 ioctl c0306201 20004000 returned -22 [ 836.773826] binder: 5041:5047 got reply transaction with no transaction stack [ 836.773833] binder: 5041:5047 transaction failed 29201/-71, size 0-0 line 2927 [ 836.775175] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.775214] binder: 5039:5046 transaction failed 29189/-3, size 0-0 line 3134 [ 836.775713] binder: 5039:5046 unknown command 109446913 [ 836.775808] binder: 5039:5046 ioctl c0306201 20004000 returned -22 [ 836.776685] binder: BINDER_SET_CONTEXT_MGR already set [ 836.776690] binder: 5040:5049 ioctl 40046207 0 returned -16 [ 836.776910] binder: 5039:5046 got reply transaction with no transaction stack [ 836.776917] binder: 5039:5046 transaction failed 29201/-71, size 0-0 line 2927 [ 836.777444] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.777479] binder: 5040:5049 transaction failed 29189/-3, size 0-16 line 3134 [ 836.778731] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.778813] binder: 5040:5049 transaction failed 29189/-3, size 0-0 line 3134 [ 836.780520] binder: BINDER_SET_CONTEXT_MGR already set [ 836.780526] binder: 5042:5048 ioctl 40046207 0 returned -16 [ 836.780678] binder: 5040:5049 unknown command 109446913 [ 836.780684] binder: 5040:5049 ioctl c0306201 20004000 returned -22 [ 836.781707] binder: 5042:5048 got transaction to invalid handle [ 836.781713] binder: 5042:5048 transaction failed 29201/-22, size 72-24 line 3011 [ 836.781794] binder: 5040:5049 got reply transaction with no transaction stack [ 836.781800] binder: 5040:5049 transaction failed 29201/-71, size 0-0 line 2927 [ 836.782446] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.782483] binder: 5042:5048 transaction failed 29189/-3, size 0-0 line 3134 [ 836.788334] binder: 5042:5048 unknown command 109446913 [ 836.788342] binder: 5042:5048 ioctl c0306201 20004000 returned -22 [ 836.792625] binder: BINDER_SET_CONTEXT_MGR already set [ 836.792631] binder: 5044:5050 ioctl 40046207 0 returned -16 [ 836.792801] binder: 5044:5050 got transaction to invalid handle [ 836.792808] binder: 5044:5050 transaction failed 29201/-22, size 72-24 line 3011 [ 836.794186] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.794224] binder: 5044:5050 transaction failed 29189/-3, size 0-0 line 3134 [ 836.794548] binder: 5044:5050 unknown command 109446913 [ 836.794554] binder: 5044:5050 ioctl c0306201 20004000 returned -22 [ 836.843644] binder: BINDER_SET_CONTEXT_MGR already set [ 836.843652] binder: 5045:5054 ioctl 40046207 0 returned -16 [ 836.844749] binder: 5045:5054 got transaction to invalid handle [ 836.844757] binder: 5045:5054 transaction failed 29201/-22, size 72-24 line 3011 [ 836.850512] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.850552] binder: 5045:5054 transaction failed 29189/-3, size 0-0 line 3134 [ 836.851976] binder: 5045:5051 unknown command -393869567 [ 836.851983] binder: 5045:5051 ioctl c0306201 20004000 returned -22 [ 836.852720] binder: 5045:5051 got reply transaction with no transaction stack [ 836.852727] binder: 5045:5051 transaction failed 29201/-71, size 0-0 line 2927 [ 836.858329] binder: BINDER_SET_CONTEXT_MGR already set [ 836.858335] binder: 5053:5055 ioctl 40046207 0 returned -16 [ 836.858401] binder: 5053:5055 got transaction to invalid handle [ 836.858408] binder: 5053:5055 transaction failed 29201/-22, size 72-24 line 3011 [ 836.862452] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.862491] binder: 5053:5055 transaction failed 29189/-3, size 0-0 line 3134 [ 836.864245] binder: 5053:5055 unknown command 109446913 [ 836.864252] binder: 5053:5055 ioctl c0306201 20004000 returned -22 [ 836.879101] binder: BINDER_SET_CONTEXT_MGR already set [ 836.879108] binder: 5056:5057 ioctl 40046207 0 returned -16 [ 836.879246] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.879284] binder: 5056:5057 transaction failed 29189/-3, size 72-24 line 3134 [ 836.879411] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.879445] binder: 5056:5057 transaction failed 29189/-3, size 0-0 line 3134 [ 836.879577] binder: 5056:5057 unknown command 109446913 [ 836.879587] binder: 5056:5057 ioctl c0306201 20004000 returned -22 [ 836.880330] binder: 5056:5057 got reply transaction with no transaction stack [ 836.880336] binder: 5056:5057 transaction failed 29201/-71, size 0-0 line 2927 [ 836.924897] binder: BINDER_SET_CONTEXT_MGR already set [ 836.924993] binder: 5060:5069 ioctl 40046207 0 returned -16 [ 836.925059] binder: BINDER_SET_CONTEXT_MGR already set [ 836.925064] binder: 5064:5065 ioctl 40046207 0 returned -16 [ 836.925346] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.925384] binder: 5060:5069 transaction failed 29189/-3, size 0-16 line 3134 [ 836.925816] binder: 5064:5065 got transaction to invalid handle [ 836.925822] binder: 5064:5065 transaction failed 29201/-22, size 72-24 line 3011 [ 836.926181] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.926217] binder: 5060:5069 transaction failed 29189/-3, size 0-0 line 3134 [ 836.926383] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.926418] binder: 5064:5065 transaction failed 29189/-3, size 0-0 line 3134 [ 836.926642] binder: BINDER_SET_CONTEXT_MGR already set [ 836.926648] binder: 5061:5068 ioctl 40046207 0 returned -16 [ 836.927089] binder: 5059:5070 got transaction to invalid handle [ 836.927095] binder: 5059:5070 transaction failed 29201/-22, size 72-24 line 3011 [ 836.927398] binder: 5061:5068 got transaction to invalid handle [ 836.927405] binder: 5061:5068 transaction failed 29201/-22, size 72-16 line 3011 [ 836.927568] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.927602] binder: 5059:5070 transaction failed 29189/-3, size 0-0 line 3134 [ 836.927937] binder: 5060:5069 unknown command 109446913 [ 836.927943] binder: 5060:5069 ioctl c0306201 20004000 returned -22 [ 836.928095] binder: 5064:5065 unknown command 109446913 [ 836.928100] binder: 5064:5065 ioctl c0306201 20004000 returned -22 [ 836.928179] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.928303] binder: 5061:5068 transaction failed 29189/-3, size 0-0 line 3134 [ 836.929249] binder: 5059:5070 unknown command 109446913 [ 836.929255] binder: 5059:5070 ioctl c0306201 20004000 returned -22 [ 836.930173] binder: 5060:5069 got reply transaction with no transaction stack [ 836.930180] binder: 5060:5069 transaction failed 29201/-71, size 0-0 line 2927 [ 836.931494] binder: 5059:5070 got reply transaction with no transaction stack [ 836.931500] binder: 5059:5070 transaction failed 29201/-71, size 0-0 line 2927 [ 836.931628] binder: BINDER_SET_CONTEXT_MGR already set [ 836.931722] binder: 5062:5067 ioctl 40046207 0 returned -16 [ 836.931838] binder: 5061:5068 unknown command 109446913 [ 836.931843] binder: 5061:5068 ioctl c0306201 20004000 returned -22 [ 836.932712] binder: 5062:5067 got transaction to invalid handle [ 836.932719] binder: 5062:5067 transaction failed 29201/-22, size 72-24 line 3011 [ 836.932963] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.932999] binder: 5062:5067 transaction failed 29189/-3, size 0-0 line 3134 [ 836.934553] binder: 5062:5067 unknown command 109446913 [ 836.934559] binder: 5062:5067 ioctl c0306201 20004000 returned -22 [ 836.946419] binder: BINDER_SET_CONTEXT_MGR already set [ 836.946427] binder: 5058:5071 ioctl 40046207 0 returned -16 [ 836.950156] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.950194] binder: 5058:5071 transaction failed 29189/-3, size 32-16 line 3134 [ 836.956795] binder_alloc: 5895: binder_alloc_buf, no vma [ 836.956833] binder: 5058:5071 transaction failed 29189/-3, size 0-0 line 3134 [ 836.956955] binder: 5058:5071 unknown command 109446913 [ 836.956964] binder: 5058:5071 ioctl c0306201 20004000 returned -22 [ 836.957848] binder: 5058:5071 got reply transaction with no transaction stack [ 836.957855] binder: 5058:5071 transaction failed 29201/-71, size 0-0 line 2927 [ 836.965580] binder: BINDER_SET_CONTEXT_MGR already set [ 836.965588] binder: 5063:5073 ioctl 40046207 0 returned -16 [ 836.967430] binder: 5063:5073 got transaction to invalid handle [ 836.967438] binder: 5063:5073 transaction failed 29201/-22, size 72-24 line 3011 [ 836.983643] binder: 5063:5073 unknown command -393869567 [ 836.983651] binder: 5063:5073 ioctl c0306201 20004000 returned -22 [ 836.992028] binder: 5063:5073 got reply transaction with no transaction stack [ 836.992035] binder: 5063:5073 transaction failed 29201/-71, size 0-0 line 2927 [ 837.050591] binder: 5076:5081 got transaction to invalid handle [ 837.050599] binder: 5076:5081 transaction failed 29201/-22, size 72-24 line 3011 [ 837.050652] binder: BINDER_SET_CONTEXT_MGR already set [ 837.050658] binder: 5075:5083 ioctl 40046207 0 returned -16 [ 837.050821] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.050859] binder: 5076:5081 transaction failed 29189/-3, size 0-0 line 3134 [ 837.050911] binder: 5075:5083 got transaction to invalid handle [ 837.050917] binder: 5075:5083 transaction failed 29201/-22, size 72-16 line 3011 [ 837.051330] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.051365] binder: 5075:5083 transaction failed 29189/-3, size 0-0 line 3134 [ 837.052051] binder: BINDER_SET_CONTEXT_MGR already set [ 837.052056] binder: 5074:5079 ioctl 40046207 0 returned -16 [ 837.052403] binder: 5074:5079 got transaction to invalid handle [ 837.052410] binder: 5074:5079 transaction failed 29201/-22, size 72-24 line 3011 [ 837.052586] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.052620] binder: 5074:5079 transaction failed 29189/-3, size 0-0 line 3134 [ 837.052743] binder: 5074:5079 unknown command 109446913 [ 837.052749] binder: 5074:5079 ioctl c0306201 20004000 returned -22 [ 837.057920] binder: 5076:5081 unknown command 109446913 [ 837.057927] binder: 5076:5081 ioctl c0306201 20004000 returned -22 [ 837.058363] binder: 5076:5081 got reply transaction with no transaction stack [ 837.058370] binder: 5076:5081 transaction failed 29201/-71, size 0-0 line 2927 [ 837.058970] binder: 5075:5083 unknown command 109446913 [ 837.058976] binder: 5075:5083 ioctl c0306201 20004000 returned -22 [ 837.061576] binder: BINDER_SET_CONTEXT_MGR already set [ 837.061583] binder: 5077:5084 ioctl 40046207 0 returned -16 [ 837.061945] binder: 5077:5084 got transaction to invalid handle [ 837.061951] binder: 5077:5084 transaction failed 29201/-22, size 72-24 line 3011 [ 837.062281] binder: BINDER_SET_CONTEXT_MGR already set [ 837.062286] binder: 5078:5085 ioctl 40046207 0 returned -16 [ 837.062474] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.062510] binder: 5078:5085 transaction failed 29189/-3, size 32-16 line 3134 [ 837.065215] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.065251] binder: 5077:5084 transaction failed 29189/-3, size 0-0 line 3134 [ 837.069040] binder: 5077:5084 unknown command 109446913 [ 837.069047] binder: 5077:5084 ioctl c0306201 20004000 returned -22 [ 837.077462] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.077501] binder: 5078:5085 transaction failed 29189/-3, size 0-0 line 3134 [ 837.078236] binder: 5078:5085 unknown command 109446913 [ 837.078242] binder: 5078:5085 ioctl c0306201 20004000 returned -22 [ 837.079178] binder: 5078:5085 got reply transaction with no transaction stack [ 837.079184] binder: 5078:5085 transaction failed 29201/-71, size 0-0 line 2927 [ 837.081342] binder: BINDER_SET_CONTEXT_MGR already set [ 837.081348] binder: 5082:5088 ioctl 40046207 0 returned -16 [ 837.081476] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.081512] binder: 5082:5088 transaction failed 29189/-3, size 32-16 line 3134 [ 837.081638] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.081672] binder: 5082:5088 transaction failed 29189/-3, size 0-0 line 3134 [ 837.081881] binder: 5082:5088 unknown command 109446913 [ 837.081887] binder: 5082:5088 ioctl c0306201 20004000 returned -22 [ 837.085178] binder: 5082:5088 got reply transaction with no transaction stack [ 837.085184] binder: 5082:5088 transaction failed 29201/-71, size 0-0 line 2927 [ 837.119148] binder: BINDER_SET_CONTEXT_MGR already set [ 837.119156] binder: 5080:5091 ioctl 40046207 0 returned -16 [ 837.120345] binder: 5080:5091 got transaction to invalid handle [ 837.120353] binder: 5080:5091 transaction failed 29201/-22, size 72-24 line 3011 [ 837.124907] binder: 5080:5091 unknown command -393869567 [ 837.124914] binder: 5080:5091 ioctl c0306201 20004000 returned -22 [ 837.132419] binder: 5080:5091 got reply transaction with no transaction stack [ 837.132426] binder: 5080:5091 transaction failed 29201/-71, size 0-0 line 2927 [ 837.144701] binder: BINDER_SET_CONTEXT_MGR already set [ 837.144708] binder: 5090:5092 ioctl 40046207 0 returned -16 [ 837.144775] binder: 5090:5092 got transaction to invalid handle [ 837.144786] binder: 5090:5092 transaction failed 29201/-22, size 72-24 line 3011 [ 837.144905] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.144942] binder: 5090:5092 transaction failed 29189/-3, size 0-0 line 3134 [ 837.145048] binder: 5090:5092 unknown command 109446913 [ 837.145053] binder: 5090:5092 ioctl c0306201 20004000 returned -22 [ 837.160359] binder: BINDER_SET_CONTEXT_MGR already set [ 837.160366] binder: 5093:5094 ioctl 40046207 0 returned -16 [ 837.160496] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.160534] binder: 5093:5094 transaction failed 29189/-3, size 72-24 line 3134 [ 837.160662] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.160697] binder: 5093:5094 transaction failed 29189/-3, size 0-0 line 3134 [ 837.160810] binder: 5093:5094 unknown command 109446913 [ 837.160816] binder: 5093:5094 ioctl c0306201 20004000 returned -22 [ 837.161502] binder: 5093:5094 got reply transaction with no transaction stack [ 837.161508] binder: 5093:5094 transaction failed 29201/-71, size 0-0 line 2927 [ 837.203025] binder: BINDER_SET_CONTEXT_MGR already set [ 837.203032] binder: 5098:5105 ioctl 40046207 0 returned -16 [ 837.203215] binder: 5098:5105 unknown command 109446913 [ 837.203221] binder: 5098:5105 ioctl c0306201 20004000 returned -22 [ 837.206864] binder: 5096:5106 got transaction to invalid handle [ 837.206871] binder: 5096:5106 transaction failed 29201/-22, size 72-24 line 3011 [ 837.207133] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.207171] binder: 5096:5106 transaction failed 29189/-3, size 0-0 line 3134 [ 837.207530] binder: BINDER_SET_CONTEXT_MGR already set [ 837.207535] binder: 5100:5103 ioctl 40046207 0 returned -16 [ 837.207598] binder: BINDER_SET_CONTEXT_MGR already set [ 837.207604] binder: 5097:5107 ioctl 40046207 0 returned -16 [ 837.208242] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.208282] binder: 5100:5103 transaction failed 29189/-3, size 32-16 line 3134 [ 837.208529] binder: 5097:5107 got transaction to invalid handle [ 837.208535] binder: 5097:5107 transaction failed 29201/-22, size 72-16 line 3011 [ 837.208685] binder: 5096:5106 unknown command 109446913 [ 837.208691] binder: 5096:5106 ioctl c0306201 20004000 returned -22 [ 837.208897] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.208932] binder: 5100:5103 transaction failed 29189/-3, size 0-0 line 3134 [ 837.209056] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.209089] binder: 5097:5107 transaction failed 29189/-3, size 0-0 line 3134 [ 837.210290] binder: 5096:5106 got reply transaction with no transaction stack [ 837.210296] binder: 5096:5106 transaction failed 29201/-71, size 0-0 line 2927 [ 837.210713] binder: 5097:5107 unknown command 109446913 [ 837.210719] binder: 5097:5107 ioctl c0306201 20004000 returned -22 [ 837.210956] binder: 5100:5103 unknown command 109446913 [ 837.210962] binder: 5100:5103 ioctl c0306201 20004000 returned -22 [ 837.212485] binder: 5100:5103 got reply transaction with no transaction stack [ 837.212491] binder: 5100:5103 transaction failed 29201/-71, size 0-0 line 2927 [ 837.216480] binder: BINDER_SET_CONTEXT_MGR already set [ 837.216487] binder: 5101:5102 ioctl 40046207 0 returned -16 [ 837.216570] binder: 5101:5102 got transaction to invalid handle [ 837.216576] binder: 5101:5102 transaction failed 29201/-22, size 72-24 line 3011 [ 837.216701] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.216738] binder: 5101:5102 transaction failed 29189/-3, size 0-0 line 3134 [ 837.216904] binder: 5101:5102 unknown command 109446913 [ 837.216910] binder: 5101:5102 ioctl c0306201 20004000 returned -22 [ 837.254727] binder: BINDER_SET_CONTEXT_MGR already set [ 837.254734] binder: 5095:5108 ioctl 40046207 0 returned -16 [ 837.254922] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.254961] binder: 5095:5108 transaction failed 29189/-3, size 32-16 line 3134 [ 837.255110] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.255160] binder: 5095:5108 transaction failed 29189/-3, size 0-0 line 3134 [ 837.255465] binder: 5095:5108 unknown command 109446913 [ 837.255472] binder: 5095:5108 ioctl c0306201 20004000 returned -22 [ 837.256335] binder: 5095:5108 got reply transaction with no transaction stack [ 837.256341] binder: 5095:5108 transaction failed 29201/-71, size 0-0 line 2927 [ 837.263053] binder: BINDER_SET_CONTEXT_MGR already set [ 837.263061] binder: 5099:5111 ioctl 40046207 0 returned -16 [ 837.283968] binder: 5099:5111 unknown command -393869567 [ 837.283977] binder: 5099:5111 ioctl c0306201 20004000 returned -22 [ 837.291515] binder: 5099:5111 got reply transaction with no transaction stack [ 837.291523] binder: 5099:5111 transaction failed 29201/-71, size 0-0 line 2927 [ 837.291616] binder: 5099:5114 got transaction to invalid handle [ 837.291623] binder: 5099:5114 transaction failed 29201/-22, size 72-24 line 3011 [ 837.327689] binder: BINDER_SET_CONTEXT_MGR already set [ 837.327697] binder: 5113:5120 ioctl 40046207 0 returned -16 [ 837.328072] binder: 5113:5120 unknown command 109446913 [ 837.328078] binder: 5113:5120 ioctl c0306201 20004000 returned -22 [ 837.329862] binder: BINDER_SET_CONTEXT_MGR already set [ 837.329868] binder: 5112:5117 ioctl 40046207 0 returned -16 [ 837.329945] binder: 5112:5117 got transaction to invalid handle [ 837.329951] binder: 5112:5117 transaction failed 29201/-22, size 72-24 line 3011 [ 837.330083] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.330121] binder: 5112:5117 transaction failed 29189/-3, size 0-0 line 3134 [ 837.330370] binder: 5112:5117 unknown command 109446913 [ 837.330412] binder: 5112:5117 ioctl c0306201 20004000 returned -22 [ 837.341461] binder: 5116:5121 got transaction to invalid handle [ 837.341473] binder: 5116:5121 transaction failed 29201/-22, size 72-24 line 3011 [ 837.341672] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.341712] binder: 5116:5121 transaction failed 29189/-3, size 0-0 line 3134 [ 837.341843] binder: 5116:5121 unknown command 109446913 [ 837.341849] binder: 5116:5121 ioctl c0306201 20004000 returned -22 [ 837.343184] binder: 5116:5121 got reply transaction with no transaction stack [ 837.343191] binder: 5116:5121 transaction failed 29201/-71, size 0-0 line 2927 [ 837.347534] binder: BINDER_SET_CONTEXT_MGR already set [ 837.347541] binder: 5119:5126 ioctl 40046207 0 returned -16 [ 837.348990] binder: BINDER_SET_CONTEXT_MGR already set [ 837.348996] binder: 5115:5123 ioctl 40046207 0 returned -16 [ 837.349284] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.349324] binder: 5115:5123 transaction failed 29189/-3, size 32-16 line 3134 [ 837.349494] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.349530] binder: 5115:5123 transaction failed 29189/-3, size 0-0 line 3134 [ 837.349676] binder: 5115:5123 unknown command 109446913 [ 837.349682] binder: 5115:5123 ioctl c0306201 20004000 returned -22 [ 837.350502] binder: 5115:5123 got reply transaction with no transaction stack [ 837.350508] binder: 5115:5123 transaction failed 29201/-71, size 0-0 line 2927 [ 837.354276] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.354317] binder: 5119:5126 transaction failed 29189/-3, size 32-16 line 3134 [ 837.368398] binder: BINDER_SET_CONTEXT_MGR already set [ 837.368405] binder: 5118:5124 ioctl 40046207 0 returned -16 [ 837.368487] binder: 5118:5124 got transaction to invalid handle [ 837.368494] binder: 5118:5124 transaction failed 29201/-22, size 72-24 line 3011 [ 837.368623] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.368666] binder: 5118:5124 transaction failed 29189/-3, size 0-0 line 3134 [ 837.368886] binder: 5118:5124 unknown command 109446913 [ 837.368892] binder: 5118:5124 ioctl c0306201 20004000 returned -22 [ 837.369863] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.369900] binder: 5119:5126 transaction failed 29189/-3, size 0-0 line 3134 [ 837.373679] binder: 5119:5126 unknown command 109446913 [ 837.373686] binder: 5119:5126 ioctl c0306201 20004000 returned -22 [ 837.374546] binder: 5119:5126 got reply transaction with no transaction stack [ 837.374552] binder: 5119:5126 transaction failed 29201/-71, size 0-0 line 2927 [ 837.411563] binder: BINDER_SET_CONTEXT_MGR already set [ 837.411570] binder: 5130:5132 ioctl 40046207 0 returned -16 [ 837.411647] binder: 5130:5132 got transaction to invalid handle [ 837.411655] binder: 5130:5132 transaction failed 29201/-22, size 72-24 line 3011 [ 837.415920] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.415960] binder: 5130:5132 transaction failed 29189/-3, size 0-0 line 3134 [ 837.416169] binder: 5130:5132 unknown command 109446913 [ 837.416175] binder: 5130:5132 ioctl c0306201 20004000 returned -22 [ 837.419731] binder: BINDER_SET_CONTEXT_MGR already set [ 837.419740] binder: 5125:5131 ioctl 40046207 0 returned -16 [ 837.420921] binder: 5125:5131 got transaction to invalid handle [ 837.420928] binder: 5125:5131 transaction failed 29201/-22, size 72-24 line 3011 [ 837.422149] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.422186] binder: 5125:5131 transaction failed 29189/-3, size 0-0 line 3134 [ 837.424755] binder: 5125:5131 unknown command -393869567 [ 837.424762] binder: 5125:5131 ioctl c0306201 20004000 returned -22 [ 837.426358] binder: 5125:5131 got reply transaction with no transaction stack [ 837.426365] binder: 5125:5131 transaction failed 29201/-71, size 0-0 line 2927 [ 837.447825] binder: BINDER_SET_CONTEXT_MGR already set [ 837.447832] binder: 5134:5135 ioctl 40046207 0 returned -16 [ 837.447965] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.448002] binder: 5134:5135 transaction failed 29189/-3, size 72-24 line 3134 [ 837.448132] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.448167] binder: 5134:5135 transaction failed 29189/-3, size 0-0 line 3134 [ 837.448276] binder: 5134:5135 unknown command 109446913 [ 837.448286] binder: 5134:5135 ioctl c0306201 20004000 returned -22 [ 837.448977] binder: 5134:5135 got reply transaction with no transaction stack [ 837.448983] binder: 5134:5135 transaction failed 29201/-71, size 0-0 line 2927 [ 837.488401] binder: BINDER_SET_CONTEXT_MGR already set [ 837.488408] binder: 5137:5146 ioctl 40046207 0 returned -16 [ 837.488682] binder: 5137:5146 unknown command 109446913 [ 837.488688] binder: 5137:5146 ioctl c0306201 20004000 returned -22 [ 837.492323] binder: BINDER_SET_CONTEXT_MGR already set [ 837.492330] binder: 5141:5143 ioctl 40046207 0 returned -16 [ 837.492618] binder: 5141:5143 got transaction to invalid handle [ 837.492626] binder: 5141:5143 transaction failed 29201/-22, size 72-24 line 3011 [ 837.492710] binder: 5142:5148 got transaction to invalid handle [ 837.492716] binder: 5142:5148 transaction failed 29201/-22, size 72-24 line 3011 [ 837.493029] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.493068] binder: 5142:5148 transaction failed 29189/-3, size 0-0 line 3134 [ 837.493616] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.493651] binder: 5141:5143 transaction failed 29189/-3, size 0-0 line 3134 [ 837.493725] binder: BINDER_SET_CONTEXT_MGR already set [ 837.493731] binder: 5138:5147 ioctl 40046207 0 returned -16 [ 837.494116] binder: 5138:5147 got transaction to invalid handle [ 837.494122] binder: 5138:5147 transaction failed 29201/-22, size 72-24 line 3011 [ 837.494305] binder: BINDER_SET_CONTEXT_MGR already set [ 837.494310] binder: 5140:5145 ioctl 40046207 0 returned -16 [ 837.494378] binder: 5142:5148 unknown command 109446913 [ 837.494384] binder: 5142:5148 ioctl c0306201 20004000 returned -22 [ 837.494591] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.494625] binder: 5138:5147 transaction failed 29189/-3, size 0-0 line 3134 [ 837.495047] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.495082] binder: 5140:5145 transaction failed 29189/-3, size 32-16 line 3134 [ 837.495694] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.495733] binder: 5140:5145 transaction failed 29189/-3, size 0-0 line 3134 [ 837.495914] binder: 5141:5143 unknown command 109446913 [ 837.495921] binder: 5141:5143 ioctl c0306201 20004000 returned -22 [ 837.498488] binder: 5138:5147 unknown command 109446913 [ 837.498495] binder: 5138:5147 ioctl c0306201 20004000 returned -22 [ 837.503101] binder: 5140:5145 unknown command 109446913 [ 837.503107] binder: 5140:5145 ioctl c0306201 20004000 returned -22 [ 837.503984] binder: 5140:5145 got reply transaction with no transaction stack [ 837.503990] binder: 5140:5145 transaction failed 29201/-71, size 0-0 line 2927 [ 837.523122] binder: BINDER_SET_CONTEXT_MGR already set [ 837.523129] binder: 5136:5149 ioctl 40046207 0 returned -16 [ 837.523263] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.523367] binder: 5136:5149 transaction failed 29189/-3, size 32-16 line 3134 [ 837.523590] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.523624] binder: 5136:5149 transaction failed 29189/-3, size 0-0 line 3134 [ 837.523734] binder: 5136:5149 unknown command 109446913 [ 837.523740] binder: 5136:5149 ioctl c0306201 20004000 returned -22 [ 837.524658] binder: 5136:5149 got reply transaction with no transaction stack [ 837.524664] binder: 5136:5149 transaction failed 29201/-71, size 0-0 line 2927 [ 837.557958] binder: BINDER_SET_CONTEXT_MGR already set [ 837.557966] binder: 5139:5152 ioctl 40046207 0 returned -16 [ 837.573296] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.573381] binder: 5139:5152 transaction failed 29189/-3, size 0-0 line 3134 [ 837.576641] binder: 5139:5152 unknown command -393869567 [ 837.576648] binder: 5139:5152 ioctl c0306201 20004000 returned -22 [ 837.576736] binder: 5139:5155 got transaction to invalid handle [ 837.576743] binder: 5139:5155 transaction failed 29201/-22, size 72-24 line 3011 [ 837.579562] binder: 5139:5152 got reply transaction with no transaction stack [ 837.579568] binder: 5139:5152 transaction failed 29201/-71, size 0-0 line 2927 [ 837.599114] binder: BINDER_SET_CONTEXT_MGR already set [ 837.599121] binder: 5153:5159 ioctl 40046207 0 returned -16 [ 837.600281] binder: 5153:5159 got transaction to invalid handle [ 837.600288] binder: 5153:5159 transaction failed 29201/-22, size 72-24 line 3011 [ 837.600516] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.600558] binder: 5153:5159 transaction failed 29189/-3, size 0-0 line 3134 [ 837.600723] binder: 5153:5159 unknown command 109446913 [ 837.600729] binder: 5153:5159 ioctl c0306201 20004000 returned -22 [ 837.613883] binder: BINDER_SET_CONTEXT_MGR already set [ 837.613890] binder: 5154:5160 ioctl 40046207 0 returned -16 [ 837.613968] binder: 5154:5160 got transaction to invalid handle [ 837.613975] binder: 5154:5160 transaction failed 29201/-22, size 72-24 line 3011 [ 837.614450] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.614551] binder: 5154:5160 transaction failed 29189/-3, size 0-0 line 3134 [ 837.616299] binder: BINDER_SET_CONTEXT_MGR already set [ 837.616306] binder: 5156:5162 ioctl 40046207 0 returned -16 [ 837.616513] binder: 5156:5162 got transaction to invalid handle [ 837.616519] binder: 5156:5162 transaction failed 29201/-22, size 72-24 line 3011 [ 837.616654] binder: 5157:5163 got transaction to invalid handle [ 837.616660] binder: 5157:5163 transaction failed 29201/-22, size 72-24 line 3011 [ 837.617188] binder: 5154:5160 unknown command 109446913 [ 837.617194] binder: 5154:5160 ioctl c0306201 20004000 returned -22 [ 837.618128] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.618164] binder: 5156:5162 transaction failed 29189/-3, size 0-0 line 3134 [ 837.618291] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.618325] binder: 5157:5163 transaction failed 29189/-3, size 0-0 line 3134 [ 837.619691] binder: 5156:5162 unknown command 109446913 [ 837.619697] binder: 5156:5162 ioctl c0306201 20004000 returned -22 [ 837.620607] binder: 5157:5163 unknown command 109446913 [ 837.620613] binder: 5157:5163 ioctl c0306201 20004000 returned -22 [ 837.630862] binder: BINDER_SET_CONTEXT_MGR already set [ 837.630868] binder: 5158:5164 ioctl 40046207 0 returned -16 [ 837.631038] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.631075] binder: 5158:5164 transaction failed 29189/-3, size 32-16 line 3134 [ 837.631239] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.631315] binder: 5158:5164 transaction failed 29189/-3, size 0-0 line 3134 [ 837.640671] binder: 5158:5164 unknown command 109446913 [ 837.640679] binder: 5158:5164 ioctl c0306201 20004000 returned -22 [ 837.641417] binder: 5158:5164 got reply transaction with no transaction stack [ 837.641424] binder: 5158:5164 transaction failed 29201/-71, size 0-0 line 2927 [ 837.650209] binder: BINDER_SET_CONTEXT_MGR already set [ 837.650216] binder: 5161:5165 ioctl 40046207 0 returned -16 [ 837.650348] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.650427] binder: 5161:5165 transaction failed 29189/-3, size 32-16 line 3134 [ 837.650681] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.650717] binder: 5161:5165 transaction failed 29189/-3, size 0-0 line 3134 [ 837.650854] binder: 5161:5165 unknown command 109446913 [ 837.650896] binder: 5161:5165 ioctl c0306201 20004000 returned -22 [ 837.651766] binder: 5161:5165 got reply transaction with no transaction stack [ 837.651772] binder: 5161:5165 transaction failed 29201/-71, size 0-0 line 2927 [ 837.696444] binder: BINDER_SET_CONTEXT_MGR already set [ 837.696451] binder: 5169:5171 ioctl 40046207 0 returned -16 [ 837.696519] binder: 5169:5171 got transaction to invalid handle [ 837.696526] binder: 5169:5171 transaction failed 29201/-22, size 72-24 line 3011 [ 837.696645] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.696752] binder: 5169:5171 transaction failed 29189/-3, size 0-0 line 3134 [ 837.696901] binder: 5169:5171 unknown command 109446913 [ 837.696907] binder: 5169:5171 ioctl c0306201 20004000 returned -22 [ 837.712394] binder: BINDER_SET_CONTEXT_MGR already set [ 837.712401] binder: 5166:5168 ioctl 40046207 0 returned -16 [ 837.712592] binder: 5166:5168 got transaction to invalid handle [ 837.712599] binder: 5166:5168 transaction failed 29201/-22, size 72-24 line 3011 [ 837.712773] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.712809] binder: 5166:5168 transaction failed 29189/-3, size 0-0 line 3134 [ 837.712948] binder: 5166:5168 unknown command -393869567 [ 837.712954] binder: 5166:5168 ioctl c0306201 20004000 returned -22 [ 837.713536] binder: 5166:5168 got reply transaction with no transaction stack [ 837.713542] binder: 5166:5168 transaction failed 29201/-71, size 0-0 line 2927 [ 837.728585] binder: BINDER_SET_CONTEXT_MGR already set [ 837.728592] binder: 5173:5174 ioctl 40046207 0 returned -16 [ 837.728723] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.728765] binder: 5173:5174 transaction failed 29189/-3, size 72-24 line 3134 [ 837.728895] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.728930] binder: 5173:5174 transaction failed 29189/-3, size 0-0 line 3134 [ 837.729038] binder: 5173:5174 unknown command 109446913 [ 837.729044] binder: 5173:5174 ioctl c0306201 20004000 returned -22 [ 837.729733] binder: 5173:5174 got reply transaction with no transaction stack [ 837.729739] binder: 5173:5174 transaction failed 29201/-71, size 0-0 line 2927 [ 837.772956] binder: BINDER_SET_CONTEXT_MGR already set [ 837.772963] binder: 5178:5185 ioctl 40046207 0 returned -16 [ 837.773136] binder: 5178:5185 got transaction to invalid handle [ 837.773143] binder: 5178:5185 transaction failed 29201/-22, size 72-24 line 3011 [ 837.773306] binder: BINDER_SET_CONTEXT_MGR already set [ 837.773311] binder: 5176:5186 ioctl 40046207 0 returned -16 [ 837.773597] binder: 5176:5186 got transaction to invalid handle [ 837.773604] binder: 5176:5186 transaction failed 29201/-22, size 72-16 line 3011 [ 837.773897] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.773934] binder: 5178:5185 transaction failed 29189/-3, size 0-0 line 3134 [ 837.774068] binder: 5177:5187 got transaction to invalid handle [ 837.774074] binder: 5177:5187 transaction failed 29201/-22, size 72-24 line 3011 [ 837.774243] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.774276] binder: 5176:5186 transaction failed 29189/-3, size 0-0 line 3134 [ 837.774440] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.774473] binder: 5177:5187 transaction failed 29189/-3, size 0-0 line 3134 [ 837.774610] binder: BINDER_SET_CONTEXT_MGR already set [ 837.774616] binder: 5179:5183 ioctl 40046207 0 returned -16 [ 837.775237] binder: 5179:5183 got transaction to invalid handle [ 837.775243] binder: 5179:5183 transaction failed 29201/-22, size 72-24 line 3011 [ 837.775461] binder: 5176:5186 unknown command 109446913 [ 837.775467] binder: 5176:5186 ioctl c0306201 20004000 returned -22 [ 837.775534] binder: 5177:5187 unknown command 109446913 [ 837.775540] binder: 5177:5187 ioctl c0306201 20004000 returned -22 [ 837.775566] binder: 5178:5185 unknown command 109446913 [ 837.775571] binder: 5178:5185 ioctl c0306201 20004000 returned -22 [ 837.776579] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.776614] binder: 5179:5183 transaction failed 29189/-3, size 0-0 line 3134 [ 837.777987] binder: BINDER_SET_CONTEXT_MGR already set [ 837.777993] binder: 5180:5184 ioctl 40046207 0 returned -16 [ 837.778285] binder: 5179:5183 unknown command 109446913 [ 837.778291] binder: 5179:5183 ioctl c0306201 20004000 returned -22 [ 837.778567] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.778602] binder: 5180:5184 transaction failed 29189/-3, size 32-16 line 3134 [ 837.779504] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.779540] binder: 5180:5184 transaction failed 29189/-3, size 0-0 line 3134 [ 837.780799] binder: 5180:5184 unknown command 109446913 [ 837.780805] binder: 5180:5184 ioctl c0306201 20004000 returned -22 [ 837.782045] binder: 5180:5184 got reply transaction with no transaction stack [ 837.782051] binder: 5180:5184 transaction failed 29201/-71, size 0-0 line 2927 [ 837.812473] binder: BINDER_SET_CONTEXT_MGR already set [ 837.812480] binder: 5175:5188 ioctl 40046207 0 returned -16 [ 837.812668] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.812705] binder: 5175:5188 transaction failed 29189/-3, size 32-16 line 3134 [ 837.813033] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.813068] binder: 5175:5188 transaction failed 29189/-3, size 0-0 line 3134 [ 837.813182] binder: 5175:5188 unknown command 109446913 [ 837.813188] binder: 5175:5188 ioctl c0306201 20004000 returned -22 [ 837.813958] binder: 5175:5188 got reply transaction with no transaction stack [ 837.813964] binder: 5175:5188 transaction failed 29201/-71, size 0-0 line 2927 [ 837.854114] binder: BINDER_SET_CONTEXT_MGR already set [ 837.854122] binder: 5181:5192 ioctl 40046207 0 returned -16 [ 837.857896] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.857936] binder: 5181:5192 transaction failed 29189/-3, size 0-0 line 3134 [ 837.861494] binder: 5181:5192 unknown command -393869567 [ 837.861501] binder: 5181:5192 ioctl c0306201 20004000 returned -22 [ 837.863404] binder: 5181:5192 got reply transaction with no transaction stack [ 837.863411] binder: 5181:5192 transaction failed 29201/-71, size 0-0 line 2927 [ 837.877409] binder: BINDER_SET_CONTEXT_MGR already set [ 837.877415] binder: 5191:5198 ioctl 40046207 0 returned -16 [ 837.877613] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.877652] binder: 5191:5198 transaction failed 29189/-3, size 32-16 line 3134 [ 837.878216] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.878252] binder: 5191:5198 transaction failed 29189/-3, size 0-0 line 3134 [ 837.878363] binder: 5191:5198 unknown command 109446913 [ 837.878369] binder: 5191:5198 ioctl c0306201 20004000 returned -22 [ 837.879255] binder: 5191:5198 got reply transaction with no transaction stack [ 837.879261] binder: 5191:5198 transaction failed 29201/-71, size 0-0 line 2927 [ 837.901422] binder: 5197:5199 got transaction to invalid handle [ 837.901493] binder: 5197:5199 transaction failed 29201/-22, size 72-24 line 3011 [ 837.901629] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.901666] binder: 5197:5199 transaction failed 29189/-3, size 0-0 line 3134 [ 837.904854] binder: 5197:5199 got reply transaction with no transaction stack [ 837.904861] binder: 5197:5199 transaction failed 29201/-71, size 0-0 line 2927 [ 837.906213] binder: BINDER_SET_CONTEXT_MGR already set [ 837.906220] binder: 5196:5201 ioctl 40046207 0 returned -16 [ 837.906343] binder: 5196:5201 got transaction to invalid handle [ 837.906349] binder: 5196:5201 transaction failed 29201/-22, size 72-24 line 3011 [ 837.906557] binder: BINDER_SET_CONTEXT_MGR already set [ 837.906563] binder: 5194:5202 ioctl 40046207 0 returned -16 [ 837.906892] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.906928] binder: 5196:5201 transaction failed 29189/-3, size 0-0 line 3134 [ 837.907020] binder: 5194:5202 got transaction to invalid handle [ 837.907026] binder: 5194:5202 transaction failed 29201/-22, size 72-24 line 3011 [ 837.907147] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.907180] binder: 5194:5202 transaction failed 29189/-3, size 0-0 line 3134 [ 837.907347] binder: 5196:5201 unknown command 109446913 [ 837.907353] binder: 5196:5201 ioctl c0306201 20004000 returned -22 [ 837.908313] binder: 5194:5202 unknown command 109446913 [ 837.908319] binder: 5194:5202 ioctl c0306201 20004000 returned -22 [ 837.935112] binder: BINDER_SET_CONTEXT_MGR already set [ 837.935119] binder: 5193:5203 ioctl 40046207 0 returned -16 [ 837.935200] binder: 5193:5203 got transaction to invalid handle [ 837.935207] binder: 5193:5203 transaction failed 29201/-22, size 72-16 line 3011 [ 837.935335] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.935373] binder: 5193:5203 transaction failed 29189/-3, size 0-0 line 3134 [ 837.935626] binder: 5193:5203 unknown command 109446913 [ 837.935632] binder: 5193:5203 ioctl c0306201 20004000 returned -22 [ 837.941448] binder: BINDER_SET_CONTEXT_MGR already set [ 837.941454] binder: 5200:5204 ioctl 40046207 0 returned -16 [ 837.941627] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.941665] binder: 5200:5204 transaction failed 29189/-3, size 32-8 line 3134 [ 837.941798] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.941831] binder: 5200:5204 transaction failed 29189/-3, size 0-0 line 3134 [ 837.941940] binder: 5200:5204 unknown command 109446913 [ 837.941946] binder: 5200:5204 ioctl c0306201 20004000 returned -22 [ 837.942626] binder: 5200:5204 got reply transaction with no transaction stack [ 837.942633] binder: 5200:5204 transaction failed 29201/-71, size 0-0 line 2927 [ 837.974812] binder: BINDER_SET_CONTEXT_MGR already set [ 837.974819] binder: 5208:5210 ioctl 40046207 0 returned -16 [ 837.974951] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.974989] binder: 5208:5210 transaction failed 29189/-3, size 32-16 line 3134 [ 837.975117] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.975248] binder: 5208:5210 transaction failed 29189/-3, size 0-0 line 3134 [ 837.975363] binder: 5208:5210 unknown command 109446913 [ 837.975369] binder: 5208:5210 ioctl c0306201 20004000 returned -22 [ 837.976022] binder: 5208:5210 got reply transaction with no transaction stack [ 837.976028] binder: 5208:5210 transaction failed 29201/-71, size 0-0 line 2927 [ 837.994422] binder: BINDER_SET_CONTEXT_MGR already set [ 837.994430] binder: 5205:5212 ioctl 40046207 0 returned -16 [ 837.995808] binder_alloc: 5895: binder_alloc_buf, no vma [ 837.995845] binder: 5205:5209 transaction failed 29189/-3, size 0-0 line 3134 [ 837.995982] binder: 5205:5209 unknown command -393869567 [ 837.995988] binder: 5205:5209 ioctl c0306201 20004000 returned -22 [ 837.996655] binder: 5205:5209 got reply transaction with no transaction stack [ 837.996661] binder: 5205:5209 transaction failed 29201/-71, size 0-0 line 2927 [ 838.010208] binder: BINDER_SET_CONTEXT_MGR already set [ 838.010214] binder: 5213:5214 ioctl 40046207 0 returned -16 [ 838.010347] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.010384] binder: 5213:5214 transaction failed 29189/-3, size 72-24 line 3134 [ 838.010512] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.010546] binder: 5213:5214 transaction failed 29189/-3, size 0-0 line 3134 [ 838.010671] binder: 5213:5214 unknown command 109446913 [ 838.010677] binder: 5213:5214 ioctl c0306201 20004000 returned -22 [ 838.011403] binder: 5213:5214 got reply transaction with no transaction stack [ 838.011409] binder: 5213:5214 transaction failed 29201/-71, size 0-0 line 2927 [ 838.056521] binder: BINDER_SET_CONTEXT_MGR already set [ 838.056529] binder: 5218:5225 ioctl 40046207 0 returned -16 [ 838.056754] binder: 5218:5225 got transaction to invalid handle [ 838.056761] binder: 5218:5225 transaction failed 29201/-22, size 72-24 line 3011 [ 838.056838] binder: BINDER_SET_CONTEXT_MGR already set [ 838.056843] binder: 5220:5223 ioctl 40046207 0 returned -16 [ 838.057151] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.057189] binder: 5220:5223 transaction failed 29189/-3, size 32-8 line 3134 [ 838.057722] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.057762] binder: 5218:5225 transaction failed 29189/-3, size 0-0 line 3134 [ 838.057988] binder: 5217:5227 got transaction to invalid handle [ 838.057995] binder: 5217:5227 transaction failed 29201/-22, size 72-24 line 3011 [ 838.058066] binder: BINDER_SET_CONTEXT_MGR already set [ 838.058072] binder: 5216:5226 ioctl 40046207 0 returned -16 [ 838.058193] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.058227] binder: 5220:5223 transaction failed 29189/-3, size 0-0 line 3134 [ 838.058588] binder: 5216:5226 got transaction to invalid handle [ 838.058594] binder: 5216:5226 transaction failed 29201/-22, size 72-24 line 3011 [ 838.058721] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.058760] binder: 5217:5227 transaction failed 29189/-3, size 0-0 line 3134 [ 838.059003] binder: 5218:5225 unknown command 109446913 [ 838.059009] binder: 5218:5225 ioctl c0306201 20004000 returned -22 [ 838.059093] binder: BINDER_SET_CONTEXT_MGR already set [ 838.059098] binder: 5219:5224 ioctl 40046207 0 returned -16 [ 838.060122] binder: 5217:5227 got reply transaction with no transaction stack [ 838.060128] binder: 5217:5227 transaction failed 29201/-71, size 0-0 line 2927 [ 838.060331] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.060365] binder: 5219:5224 transaction failed 29189/-3, size 32-16 line 3134 [ 838.060752] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.060786] binder: 5216:5226 transaction failed 29189/-3, size 0-0 line 3134 [ 838.061578] binder: 5220:5223 unknown command 109446913 [ 838.061645] binder: 5220:5223 ioctl c0306201 20004000 returned -22 [ 838.062814] binder: 5216:5226 unknown command 109446913 [ 838.062820] binder: 5216:5226 ioctl c0306201 20004000 returned -22 [ 838.062936] binder: 5220:5223 got reply transaction with no transaction stack [ 838.062942] binder: 5220:5223 transaction failed 29201/-71, size 0-0 line 2927 [ 838.063722] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.063829] binder: 5219:5224 transaction failed 29189/-3, size 0-0 line 3134 [ 838.064544] binder: 5219:5224 unknown command 109446913 [ 838.064551] binder: 5219:5224 ioctl c0306201 20004000 returned -22 [ 838.065474] binder: 5219:5224 got reply transaction with no transaction stack [ 838.065480] binder: 5219:5224 transaction failed 29201/-71, size 0-0 line 2927 [ 838.087779] binder: BINDER_SET_CONTEXT_MGR already set [ 838.087787] binder: 5215:5228 ioctl 40046207 0 returned -16 [ 838.087867] binder: 5215:5228 got transaction to invalid handle [ 838.087874] binder: 5215:5228 transaction failed 29201/-22, size 72-16 line 3011 [ 838.088003] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.088041] binder: 5215:5228 transaction failed 29189/-3, size 0-0 line 3134 [ 838.088202] binder: 5215:5228 unknown command 109446913 [ 838.088208] binder: 5215:5228 ioctl c0306201 20004000 returned -22 [ 838.096125] binder: BINDER_SET_CONTEXT_MGR already set [ 838.096133] binder: 5221:5230 ioctl 40046207 0 returned -16 [ 838.105288] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.105329] binder: 5221:5230 transaction failed 29189/-3, size 0-0 line 3134 [ 838.114416] binder: 5221:5230 unknown command -393869567 [ 838.114424] binder: 5221:5230 ioctl c0306201 20004000 returned -22 [ 838.116323] binder: 5221:5230 got reply transaction with no transaction stack [ 838.116330] binder: 5221:5230 transaction failed 29201/-71, size 0-0 line 2927 [ 838.168880] binder: BINDER_SET_CONTEXT_MGR already set [ 838.168887] binder: 5231:5236 ioctl 40046207 0 returned -16 [ 838.169228] binder: 5231:5236 got transaction to invalid handle [ 838.169236] binder: 5231:5236 transaction failed 29201/-22, size 72-24 line 3011 [ 838.169751] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.169789] binder: 5231:5236 transaction failed 29189/-3, size 0-0 line 3134 [ 838.179644] binder: 5231:5236 unknown command 109446913 [ 838.179652] binder: 5231:5236 ioctl c0306201 20004000 returned -22 [ 838.180765] binder: BINDER_SET_CONTEXT_MGR already set [ 838.180771] binder: 5232:5238 ioctl 40046207 0 returned -16 [ 838.180852] binder: 5232:5238 got transaction to invalid handle [ 838.180859] binder: 5232:5238 transaction failed 29201/-22, size 72-24 line 3011 [ 838.181111] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.181150] binder: 5232:5238 transaction failed 29189/-3, size 0-0 line 3134 [ 838.181817] binder: 5232:5238 unknown command 109446913 [ 838.181823] binder: 5232:5238 ioctl c0306201 20004000 returned -22 [ 838.183088] binder: BINDER_SET_CONTEXT_MGR already set [ 838.183093] binder: 5233:5239 ioctl 40046207 0 returned -16 [ 838.184495] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.184532] binder: 5233:5239 transaction failed 29189/-3, size 32-8 line 3134 [ 838.185283] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.185318] binder: 5233:5239 transaction failed 29189/-3, size 0-0 line 3134 [ 838.189531] binder: BINDER_SET_CONTEXT_MGR already set [ 838.189538] binder: 5234:5240 ioctl 40046207 0 returned -16 [ 838.189725] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.189767] binder: 5234:5240 transaction failed 29189/-3, size 32-16 line 3134 [ 838.192132] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.192170] binder: 5234:5240 transaction failed 29189/-3, size 0-0 line 3134 [ 838.192209] binder: 5233:5239 unknown command 109446913 [ 838.192216] binder: 5233:5239 ioctl c0306201 20004000 returned -22 [ 838.193760] binder: 5233:5239 got reply transaction with no transaction stack [ 838.193765] binder: 5233:5239 transaction failed 29201/-71, size 0-0 line 2927 [ 838.193897] binder: 5234:5240 unknown command 109446913 [ 838.193901] binder: 5234:5240 ioctl c0306201 20004000 returned -22 [ 838.197275] binder: 5234:5240 got reply transaction with no transaction stack [ 838.197282] binder: 5234:5240 transaction failed 29201/-71, size 0-0 line 2927 [ 838.198076] binder: 5235:5241 got transaction to invalid handle [ 838.198084] binder: 5235:5241 transaction failed 29201/-22, size 72-24 line 3011 [ 838.198256] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.198293] binder: 5235:5241 transaction failed 29189/-3, size 0-0 line 3134 [ 838.199413] binder: 5235:5241 got reply transaction with no transaction stack [ 838.199420] binder: 5235:5241 transaction failed 29201/-71, size 0-0 line 2927 [ 838.217723] binder: BINDER_SET_CONTEXT_MGR already set [ 838.217730] binder: 5237:5242 ioctl 40046207 0 returned -16 [ 838.217932] binder: 5237:5242 got transaction to invalid handle [ 838.217939] binder: 5237:5242 transaction failed 29201/-22, size 72-24 line 3011 [ 838.218069] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.218107] binder: 5237:5242 transaction failed 29189/-3, size 0-0 line 3134 [ 838.218270] binder: 5237:5242 unknown command 109446913 [ 838.218276] binder: 5237:5242 ioctl c0306201 20004000 returned -22 [ 838.268960] binder: BINDER_SET_CONTEXT_MGR already set [ 838.268967] binder: 5246:5249 ioctl 40046207 0 returned -16 [ 838.269034] binder: 5246:5249 got transaction to invalid handle [ 838.269041] binder: 5246:5249 transaction failed 29201/-22, size 72-24 line 3011 [ 838.269362] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.269400] binder: 5246:5249 transaction failed 29189/-3, size 0-0 line 3134 [ 838.269491] binder: 5246:5249 unknown command 109446913 [ 838.269497] binder: 5246:5249 ioctl c0306201 20004000 returned -22 [ 838.271009] binder: 5243:5245 got transaction to invalid handle [ 838.271016] binder: 5243:5245 transaction failed 29201/-22, size 72-24 line 3011 [ 838.271245] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.271281] binder: 5243:5245 transaction failed 29189/-3, size 0-0 line 3134 [ 838.271410] binder: 5243:5245 unknown command -393869567 [ 838.271416] binder: 5243:5245 ioctl c0306201 20004000 returned -22 [ 838.272147] binder: 5243:5245 got reply transaction with no transaction stack [ 838.272153] binder: 5243:5245 transaction failed 29201/-71, size 0-0 line 2927 [ 838.297191] binder: BINDER_SET_CONTEXT_MGR already set [ 838.297198] binder: 5250:5251 ioctl 40046207 0 returned -16 [ 838.297332] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.297369] binder: 5250:5251 transaction failed 29189/-3, size 72-24 line 3134 [ 838.297496] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.297530] binder: 5250:5251 transaction failed 29189/-3, size 0-0 line 3134 [ 838.297639] binder: 5250:5251 unknown command 109446913 [ 838.297650] binder: 5250:5251 ioctl c0306201 20004000 returned -22 [ 838.298394] binder: 5250:5251 got reply transaction with no transaction stack [ 838.298400] binder: 5250:5251 transaction failed 29201/-71, size 0-0 line 2927 [ 838.343633] binder: 5256:5261 got transaction to invalid handle [ 838.343642] binder: 5256:5261 transaction failed 29201/-22, size 72-24 line 3011 [ 838.344134] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.344171] binder: 5256:5261 transaction failed 29189/-3, size 0-0 line 3134 [ 838.344421] binder: BINDER_SET_CONTEXT_MGR already set [ 838.344426] binder: 5255:5262 ioctl 40046207 0 returned -16 [ 838.344507] binder: 5256:5261 unknown command 109446913 [ 838.344513] binder: 5256:5261 ioctl c0306201 20004000 returned -22 [ 838.344959] binder: BINDER_SET_CONTEXT_MGR already set [ 838.344965] binder: 5253:5263 ioctl 40046207 0 returned -16 [ 838.345034] binder: BINDER_SET_CONTEXT_MGR already set [ 838.345039] binder: 5254:5264 ioctl 40046207 0 returned -16 [ 838.345119] binder: 5255:5262 got transaction to invalid handle [ 838.345126] binder: 5255:5262 transaction failed 29201/-22, size 72-24 line 3011 [ 838.346144] binder: 5256:5261 got reply transaction with no transaction stack [ 838.346150] binder: 5256:5261 transaction failed 29201/-71, size 0-0 line 2927 [ 838.346289] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.346325] binder: 5254:5264 transaction failed 29189/-3, size 32-16 line 3134 [ 838.346538] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.346571] binder: 5255:5262 transaction failed 29189/-3, size 0-0 line 3134 [ 838.346665] binder: 5253:5263 got transaction to invalid handle [ 838.346671] binder: 5253:5263 transaction failed 29201/-22, size 72-24 line 3011 [ 838.346941] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.347040] binder: 5254:5264 transaction failed 29189/-3, size 0-0 line 3134 [ 838.347361] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.347394] binder: 5253:5263 transaction failed 29189/-3, size 0-0 line 3134 [ 838.347984] binder: 5255:5262 unknown command 109446913 [ 838.347991] binder: 5255:5262 ioctl c0306201 20004000 returned -22 [ 838.348357] binder: 5254:5264 unknown command 109446913 [ 838.348363] binder: 5254:5264 ioctl c0306201 20004000 returned -22 [ 838.349230] binder: 5254:5264 got reply transaction with no transaction stack [ 838.349236] binder: 5254:5264 transaction failed 29201/-71, size 0-0 line 2927 [ 838.349576] binder: 5253:5263 unknown command 109446913 [ 838.349582] binder: 5253:5263 ioctl c0306201 20004000 returned -22 [ 838.351996] binder: BINDER_SET_CONTEXT_MGR already set [ 838.352002] binder: 5258:5259 ioctl 40046207 0 returned -16 [ 838.352142] binder: 5258:5259 got transaction to invalid handle [ 838.352149] binder: 5258:5259 transaction failed 29201/-22, size 72-24 line 3011 [ 838.352414] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.352514] binder: 5258:5259 transaction failed 29189/-3, size 0-0 line 3134 [ 838.353135] binder: 5258:5259 unknown command 109446913 [ 838.353141] binder: 5258:5259 ioctl c0306201 20004000 returned -22 [ 838.372473] binder: BINDER_SET_CONTEXT_MGR already set [ 838.372481] binder: 5252:5265 ioctl 40046207 0 returned -16 [ 838.372877] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.372916] binder: 5252:5265 transaction failed 29189/-3, size 32-16 line 3134 [ 838.377121] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.377200] binder: 5252:5265 transaction failed 29189/-3, size 0-0 line 3134 [ 838.377324] binder: 5252:5265 unknown command 109446913 [ 838.377330] binder: 5252:5265 ioctl c0306201 20004000 returned -22 [ 838.378150] binder: 5252:5265 got reply transaction with no transaction stack [ 838.378156] binder: 5252:5265 transaction failed 29201/-71, size 0-0 line 2927 [ 838.385933] binder: 5257:5267 got transaction to invalid handle [ 838.385941] binder: 5257:5267 transaction failed 29201/-22, size 72-24 line 3011 [ 838.403008] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.403047] binder: 5257:5267 transaction failed 29189/-3, size 0-0 line 3134 [ 838.412034] binder: 5257:5267 unknown command -393869567 [ 838.412041] binder: 5257:5267 ioctl c0306201 20004000 returned -22 [ 838.419922] binder: 5257:5267 got reply transaction with no transaction stack [ 838.419930] binder: 5257:5267 transaction failed 29201/-71, size 0-0 line 2927 [ 838.472965] binder: 5268:5273 got transaction to invalid handle [ 838.472973] binder: 5268:5273 transaction failed 29201/-22, size 72-24 line 3011 [ 838.473188] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.473226] binder: 5268:5273 transaction failed 29189/-3, size 0-0 line 3134 [ 838.473299] binder: BINDER_SET_CONTEXT_MGR already set [ 838.473305] binder: 5269:5274 ioctl 40046207 0 returned -16 [ 838.473431] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.473467] binder: 5269:5274 transaction failed 29189/-3, size 32-16 line 3134 [ 838.473555] binder: 5268:5273 unknown command 109446913 [ 838.473560] binder: 5268:5273 ioctl c0306201 20004000 returned -22 [ 838.473718] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.473901] binder: 5269:5274 transaction failed 29189/-3, size 0-0 line 3134 [ 838.474622] binder: 5268:5273 got reply transaction with no transaction stack [ 838.474628] binder: 5268:5273 transaction failed 29201/-71, size 0-0 line 2927 [ 838.474739] binder: 5269:5274 unknown command 109446913 [ 838.474745] binder: 5269:5274 ioctl c0306201 20004000 returned -22 [ 838.475579] binder: 5269:5274 got reply transaction with no transaction stack [ 838.475585] binder: 5269:5274 transaction failed 29201/-71, size 0-0 line 2927 [ 838.481054] binder: BINDER_SET_CONTEXT_MGR already set [ 838.481061] binder: 5271:5277 ioctl 40046207 0 returned -16 [ 838.481234] binder: 5271:5277 got transaction to invalid handle [ 838.481241] binder: 5271:5277 transaction failed 29201/-22, size 72-24 line 3011 [ 838.481649] binder: BINDER_SET_CONTEXT_MGR already set [ 838.481655] binder: 5270:5278 ioctl 40046207 0 returned -16 [ 838.481780] binder: 5270:5278 got transaction to invalid handle [ 838.481786] binder: 5270:5278 transaction failed 29201/-22, size 72-24 line 3011 [ 838.481917] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.481955] binder: 5271:5277 transaction failed 29189/-3, size 0-0 line 3134 [ 838.482146] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.482222] binder: 5270:5278 transaction failed 29189/-3, size 0-0 line 3134 [ 838.487722] binder: 5271:5277 unknown command 109446913 [ 838.487730] binder: 5271:5277 ioctl c0306201 20004000 returned -22 [ 838.488625] binder: 5270:5278 unknown command 109446913 [ 838.488632] binder: 5270:5278 ioctl c0306201 20004000 returned -22 [ 838.489692] binder: BINDER_SET_CONTEXT_MGR already set [ 838.489697] binder: 5272:5279 ioctl 40046207 0 returned -16 [ 838.490082] binder: 5272:5279 got transaction to invalid handle [ 838.490089] binder: 5272:5279 transaction failed 29201/-22, size 72-24 line 3011 [ 838.490264] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.490301] binder: 5272:5279 transaction failed 29189/-3, size 0-0 line 3134 [ 838.491320] binder: 5272:5279 unknown command 109446913 [ 838.491326] binder: 5272:5279 ioctl c0306201 20004000 returned -22 [ 838.509125] binder: BINDER_SET_CONTEXT_MGR already set [ 838.509131] binder: 5275:5282 ioctl 40046207 0 returned -16 [ 838.509264] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.509303] binder: 5275:5282 transaction failed 29189/-3, size 32-16 line 3134 [ 838.509431] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.509465] binder: 5275:5282 transaction failed 29189/-3, size 0-0 line 3134 [ 838.516045] binder: 5275:5282 unknown command 109446913 [ 838.516053] binder: 5275:5282 ioctl c0306201 20004000 returned -22 [ 838.516820] binder: 5275:5282 got reply transaction with no transaction stack [ 838.516827] binder: 5275:5282 transaction failed 29201/-71, size 0-0 line 2927 [ 838.548353] binder: 5276:5284 got transaction to invalid handle [ 838.548361] binder: 5276:5284 transaction failed 29201/-22, size 72-24 line 3011 [ 838.554087] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.554125] binder: 5276:5284 transaction failed 29189/-3, size 0-0 line 3134 [ 838.556495] binder: 5276:5284 unknown command -393869567 [ 838.556502] binder: 5276:5284 ioctl c0306201 20004000 returned -22 [ 838.557288] binder: 5285:5287 got transaction to invalid handle [ 838.557295] binder: 5285:5287 transaction failed 29201/-22, size 72-24 line 3011 [ 838.557415] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.557452] binder: 5285:5287 transaction failed 29189/-3, size 0-0 line 3134 [ 838.557527] binder: 5285:5287 unknown command 109446913 [ 838.557533] binder: 5285:5287 ioctl c0306201 20004000 returned -22 [ 838.558316] binder: 5276:5284 got reply transaction with no transaction stack [ 838.558322] binder: 5276:5284 transaction failed 29201/-71, size 0-0 line 2927 [ 838.558965] binder: 5285:5287 got reply transaction with no transaction stack [ 838.558970] binder: 5285:5287 transaction failed 29201/-71, size 0-0 line 2927 [ 838.586388] binder: BINDER_SET_CONTEXT_MGR already set [ 838.586395] binder: 5288:5289 ioctl 40046207 0 returned -16 [ 838.586528] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.586566] binder: 5288:5289 transaction failed 29189/-3, size 72-24 line 3134 [ 838.586694] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.586727] binder: 5288:5289 transaction failed 29189/-3, size 0-0 line 3134 [ 838.586893] binder: 5288:5289 unknown command 109446913 [ 838.586899] binder: 5288:5289 ioctl c0306201 20004000 returned -22 [ 838.587548] binder: 5288:5289 got reply transaction with no transaction stack [ 838.587554] binder: 5288:5289 transaction failed 29201/-71, size 0-0 line 2927 [ 838.631249] binder: BINDER_SET_CONTEXT_MGR already set [ 838.631257] binder: 5294:5299 ioctl 40046207 0 returned -16 [ 838.631779] binder: BINDER_SET_CONTEXT_MGR already set [ 838.631785] binder: 5292:5302 ioctl 40046207 0 returned -16 [ 838.631866] binder: 5294:5299 got transaction to invalid handle [ 838.631873] binder: 5294:5299 transaction failed 29201/-22, size 72-24 line 3011 [ 838.632012] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.632050] binder: 5295:5298 transaction failed 29189/-3, size 0-0 line 3134 [ 838.632239] binder: 5292:5302 got transaction to invalid handle [ 838.632245] binder: 5292:5302 transaction failed 29201/-22, size 72-24 line 3011 [ 838.632429] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.632465] binder: 5294:5299 transaction failed 29189/-3, size 0-0 line 3134 [ 838.633767] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.633803] binder: 5292:5302 transaction failed 29189/-3, size 0-0 line 3134 [ 838.633977] binder: 5295:5298 unknown command 109446913 [ 838.633983] binder: 5295:5298 ioctl c0306201 20004000 returned -22 [ 838.634049] binder: BINDER_SET_CONTEXT_MGR already set [ 838.634054] binder: 5291:5301 ioctl 40046207 0 returned -16 [ 838.634977] binder: 5295:5298 got reply transaction with no transaction stack [ 838.634983] binder: 5295:5298 transaction failed 29201/-71, size 0-0 line 2927 [ 838.635117] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.635153] binder: 5291:5301 transaction failed 29189/-3, size 32-16 line 3134 [ 838.635609] binder: 5294:5299 unknown command 109446913 [ 838.635615] binder: 5294:5299 ioctl c0306201 20004000 returned -22 [ 838.635682] binder: BINDER_SET_CONTEXT_MGR already set [ 838.635687] binder: 5296:5297 ioctl 40046207 0 returned -16 [ 838.635817] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.635852] binder: 5291:5301 transaction failed 29189/-3, size 0-0 line 3134 [ 838.635914] binder: 5292:5302 unknown command 109446913 [ 838.635920] binder: 5292:5302 ioctl c0306201 20004000 returned -22 [ 838.635999] binder: 5296:5297 got transaction to invalid handle [ 838.636005] binder: 5296:5297 transaction failed 29201/-22, size 72-24 line 3011 [ 838.637079] binder: 5291:5301 unknown command 109446913 [ 838.637085] binder: 5291:5301 ioctl c0306201 20004000 returned -22 [ 838.637189] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.637224] binder: 5296:5297 transaction failed 29189/-3, size 0-0 line 3134 [ 838.638152] binder: 5291:5301 got reply transaction with no transaction stack [ 838.638158] binder: 5291:5301 transaction failed 29201/-71, size 0-0 line 2927 [ 838.639405] binder: 5296:5297 unknown command -393869567 [ 838.639412] binder: 5296:5297 ioctl c0306201 20004000 returned -22 [ 838.639451] binder: BINDER_SET_CONTEXT_MGR already set [ 838.639456] binder: 5293:5300 ioctl 40046207 0 returned -16 [ 838.640399] binder: 5296:5297 got reply transaction with no transaction stack [ 838.640405] binder: 5296:5297 transaction failed 29201/-71, size 0-0 line 2927 [ 838.640521] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.640557] binder: 5293:5300 transaction failed 29189/-3, size 32-16 line 3134 [ 838.640715] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.640756] binder: 5293:5300 transaction failed 29189/-3, size 0-0 line 3134 [ 838.641276] binder: 5293:5300 unknown command 109446913 [ 838.641282] binder: 5293:5300 ioctl c0306201 20004000 returned -22 [ 838.653350] binder: 5293:5300 got reply transaction with no transaction stack [ 838.653358] binder: 5293:5300 transaction failed 29201/-71, size 0-0 line 2927 [ 838.668589] binder: BINDER_SET_CONTEXT_MGR already set [ 838.668684] binder: 5290:5303 ioctl 40046207 0 returned -16 [ 838.668779] binder: 5290:5303 got transaction to invalid handle [ 838.668786] binder: 5290:5303 transaction failed 29201/-22, size 72-24 line 3011 [ 838.668944] binder: 5290:5303 unknown command 109446913 [ 838.668950] binder: 5290:5303 ioctl c0306201 20004000 returned -22 [ 838.744774] binder: BINDER_SET_CONTEXT_MGR already set [ 838.744782] binder: 5304:5310 ioctl 40046207 0 returned -16 [ 838.744861] binder: 5304:5310 got transaction to invalid handle [ 838.744868] binder: 5304:5310 transaction failed 29201/-22, size 72-24 line 3011 [ 838.745289] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.745328] binder: 5304:5310 transaction failed 29189/-3, size 0-0 line 3134 [ 838.745937] binder: 5304:5310 unknown command 109446913 [ 838.745943] binder: 5304:5310 ioctl c0306201 20004000 returned -22 [ 838.747528] binder: BINDER_SET_CONTEXT_MGR already set [ 838.747534] binder: 5306:5312 ioctl 40046207 0 returned -16 [ 838.747714] binder: 5306:5312 got transaction to invalid handle [ 838.747720] binder: 5306:5312 transaction failed 29201/-22, size 72-24 line 3011 [ 838.748036] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.748071] binder: 5306:5312 transaction failed 29189/-3, size 0-0 line 3134 [ 838.748870] binder: 5306:5312 unknown command 109446913 [ 838.748877] binder: 5306:5312 ioctl c0306201 20004000 returned -22 [ 838.750313] binder: BINDER_SET_CONTEXT_MGR already set [ 838.750320] binder: 5307:5313 ioctl 40046207 0 returned -16 [ 838.751308] binder: 5307:5313 got transaction to invalid handle [ 838.751314] binder: 5307:5313 transaction failed 29201/-22, size 72-24 line 3011 [ 838.751875] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.751911] binder: 5308:5314 transaction failed 29189/-3, size 0-0 line 3134 [ 838.752509] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.753702] binder: 5307:5313 transaction failed 29189/-3, size 0-0 line 3134 [ 838.754178] binder: 5308:5314 unknown command 109446913 [ 838.754184] binder: 5308:5314 ioctl c0306201 20004000 returned -22 [ 838.758153] binder: 5307:5313 unknown command -393869567 [ 838.758160] binder: 5307:5313 ioctl c0306201 20004000 returned -22 [ 838.758191] binder: 5308:5314 got reply transaction with no transaction stack [ 838.758198] binder: 5308:5314 transaction failed 29201/-71, size 0-0 line 2927 [ 838.759901] binder: 5307:5313 got reply transaction with no transaction stack [ 838.759907] binder: 5307:5313 transaction failed 29201/-71, size 0-0 line 2927 [ 838.760940] binder: BINDER_SET_CONTEXT_MGR already set [ 838.760946] binder: 5305:5315 ioctl 40046207 0 returned -16 [ 838.761321] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.761504] binder: 5305:5315 transaction failed 29189/-3, size 32-8 line 3134 [ 838.766823] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.766924] binder: 5305:5315 transaction failed 29189/-3, size 0-0 line 3134 [ 838.771802] binder: 5305:5315 unknown command 109446913 [ 838.771808] binder: 5305:5315 ioctl c0306201 20004000 returned -22 [ 838.772855] binder: 5305:5315 got reply transaction with no transaction stack [ 838.772862] binder: 5305:5315 transaction failed 29201/-71, size 0-0 line 2927 [ 838.777388] binder: BINDER_SET_CONTEXT_MGR already set [ 838.777394] binder: 5311:5317 ioctl 40046207 0 returned -16 [ 838.777469] binder: 5311:5317 got transaction to invalid handle [ 838.777476] binder: 5311:5317 transaction failed 29201/-22, size 72-24 line 3011 [ 838.777633] binder: 5311:5317 unknown command 109446913 [ 838.777720] binder: 5311:5317 ioctl c0306201 20004000 returned -22 [ 838.783783] binder: BINDER_SET_CONTEXT_MGR already set [ 838.783789] binder: 5309:5316 ioctl 40046207 0 returned -16 [ 838.783919] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.783956] binder: 5309:5316 transaction failed 29189/-3, size 32-16 line 3134 [ 838.784080] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.784115] binder: 5309:5316 transaction failed 29189/-3, size 0-0 line 3134 [ 838.784287] binder: 5309:5316 unknown command 109446913 [ 838.784293] binder: 5309:5316 ioctl c0306201 20004000 returned -22 [ 838.784995] binder: 5309:5316 got reply transaction with no transaction stack [ 838.785001] binder: 5309:5316 transaction failed 29201/-71, size 0-0 line 2927 [ 838.833551] binder: BINDER_SET_CONTEXT_MGR already set [ 838.833557] binder: 5319:5320 ioctl 40046207 0 returned -16 [ 838.833625] binder: 5319:5320 got transaction to invalid handle [ 838.833632] binder: 5319:5320 transaction failed 29201/-22, size 72-24 line 3011 [ 838.833755] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.833792] binder: 5319:5320 transaction failed 29189/-3, size 0-0 line 3134 [ 838.833974] binder: 5319:5320 unknown command 109446913 [ 838.833980] binder: 5319:5320 ioctl c0306201 20004000 returned -22 [ 838.850116] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.850154] binder: 5321:5322 transaction failed 29189/-3, size 72-24 line 3134 [ 838.850284] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.850317] binder: 5321:5322 transaction failed 29189/-3, size 0-0 line 3134 [ 838.850441] binder: 5321:5322 unknown command 109446913 [ 838.850447] binder: 5321:5322 ioctl c0306201 20004000 returned -22 [ 838.851151] binder: 5321:5322 got reply transaction with no transaction stack [ 838.851157] binder: 5321:5322 transaction failed 29201/-71, size 0-0 line 2927 [ 838.894733] binder: BINDER_SET_CONTEXT_MGR already set [ 838.894741] binder: 5327:5332 ioctl 40046207 0 returned -16 [ 838.894962] binder: 5327:5332 got transaction to invalid handle [ 838.894969] binder: 5327:5332 transaction failed 29201/-22, size 72-24 line 3011 [ 838.895209] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.895250] binder: 5324:5334 transaction failed 29189/-3, size 0-0 line 3134 [ 838.896029] binder: BINDER_SET_CONTEXT_MGR already set [ 838.896035] binder: 5326:5333 ioctl 40046207 0 returned -16 [ 838.896249] binder: 5324:5334 unknown command 109446913 [ 838.896254] binder: 5324:5334 ioctl c0306201 20004000 returned -22 [ 838.896320] binder: BINDER_SET_CONTEXT_MGR already set [ 838.896325] binder: 5325:5335 ioctl 40046207 0 returned -16 [ 838.896390] binder: BINDER_SET_CONTEXT_MGR already set [ 838.896395] binder: 5328:5330 ioctl 40046207 0 returned -16 [ 838.897364] binder: 5324:5334 got reply transaction with no transaction stack [ 838.897370] binder: 5324:5334 transaction failed 29201/-71, size 0-0 line 2927 [ 838.897451] binder: 5325:5335 got transaction to invalid handle [ 838.897457] binder: 5325:5335 transaction failed 29201/-22, size 72-24 line 3011 [ 838.897600] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.897636] binder: 5328:5330 transaction failed 29189/-3, size 32-16 line 3134 [ 838.897687] binder: 5326:5333 got transaction to invalid handle [ 838.897693] binder: 5326:5333 transaction failed 29201/-22, size 72-24 line 3011 [ 838.897942] binder: 5327:5332 unknown command 109446913 [ 838.897948] binder: 5327:5332 ioctl c0306201 20004000 returned -22 [ 838.898220] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.898254] binder: 5328:5330 transaction failed 29189/-3, size 0-0 line 3134 [ 838.898466] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.898501] binder: 5326:5333 transaction failed 29189/-3, size 0-0 line 3134 [ 838.898652] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.898686] binder: 5325:5335 transaction failed 29189/-3, size 0-0 line 3134 [ 838.899865] binder: 5328:5330 unknown command 109446913 [ 838.899871] binder: 5328:5330 ioctl c0306201 20004000 returned -22 [ 838.900793] binder: 5328:5330 got reply transaction with no transaction stack [ 838.900799] binder: 5328:5330 transaction failed 29201/-71, size 0-0 line 2927 [ 838.900868] binder: BINDER_SET_CONTEXT_MGR already set [ 838.900873] binder: 5329:5331 ioctl 40046207 0 returned -16 [ 838.900949] binder: 5329:5331 got transaction to invalid handle [ 838.900955] binder: 5329:5331 transaction failed 29201/-22, size 72-24 line 3011 [ 838.901258] binder: 5325:5335 unknown command -393869567 [ 838.901264] binder: 5325:5335 ioctl c0306201 20004000 returned -22 [ 838.901291] binder: 5326:5333 unknown command 109446913 [ 838.901297] binder: 5326:5333 ioctl c0306201 20004000 returned -22 [ 838.902979] binder: 5325:5335 got reply transaction with no transaction stack [ 838.902985] binder: 5325:5335 transaction failed 29201/-71, size 0-0 line 2927 [ 838.903107] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.903145] binder: 5329:5331 transaction failed 29189/-3, size 0-0 line 3134 [ 838.903682] binder: 5329:5331 unknown command 109446913 [ 838.903688] binder: 5329:5331 ioctl c0306201 20004000 returned -22 [ 838.916023] binder: BINDER_SET_CONTEXT_MGR already set [ 838.916097] binder: 5323:5336 ioctl 40046207 0 returned -16 [ 838.919543] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.919581] binder: 5323:5336 transaction failed 29189/-3, size 32-8 line 3134 [ 838.927130] binder_alloc: 5895: binder_alloc_buf, no vma [ 838.927166] binder: 5323:5336 transaction failed 29189/-3, size 0-0 line 3134 [ 838.931768] binder: 5323:5336 unknown command 109446913 [ 838.931775] binder: 5323:5336 ioctl c0306201 20004000 returned -22 [ 838.932486] binder: 5323:5336 got reply transaction with no transaction stack [ 838.932493] binder: 5323:5336 transaction failed 29201/-71, size 0-0 line 2927 [ 839.011956] binder: BINDER_SET_CONTEXT_MGR already set [ 839.011963] binder: 5338:5349 ioctl 40046207 0 returned -16 [ 839.012036] binder: 5341:5346 got transaction to invalid handle [ 839.012044] binder: 5341:5346 transaction failed 29201/-22, size 72-24 line 3011 [ 839.012228] binder: BINDER_SET_CONTEXT_MGR already set [ 839.012234] binder: 5339:5348 ioctl 40046207 0 returned -16 [ 839.012459] binder: 5338:5349 got transaction to invalid handle [ 839.012466] binder: 5338:5349 transaction failed 29201/-22, size 72-24 line 3011 [ 839.013110] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.013149] binder: 5341:5346 transaction failed 29189/-3, size 0-0 line 3134 [ 839.013240] binder: 5339:5348 got transaction to invalid handle [ 839.013246] binder: 5339:5348 transaction failed 29201/-22, size 72-24 line 3011 [ 839.013615] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.013651] binder: 5338:5349 transaction failed 29189/-3, size 0-0 line 3134 [ 839.013842] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.013877] binder: 5339:5348 transaction failed 29189/-3, size 0-0 line 3134 [ 839.014078] binder: 5341:5346 unknown command 109446913 [ 839.014085] binder: 5341:5346 ioctl c0306201 20004000 returned -22 [ 839.014954] binder: 5341:5346 got reply transaction with no transaction stack [ 839.014961] binder: 5341:5346 transaction failed 29201/-71, size 0-0 line 2927 [ 839.015195] binder: 5338:5349 unknown command 109446913 [ 839.015201] binder: 5338:5349 ioctl c0306201 20004000 returned -22 [ 839.015252] binder: 5339:5348 unknown command 109446913 [ 839.015257] binder: 5339:5348 ioctl c0306201 20004000 returned -22 [ 839.017200] binder: BINDER_SET_CONTEXT_MGR already set [ 839.017207] binder: 5340:5345 ioctl 40046207 0 returned -16 [ 839.017339] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.017376] binder: 5340:5345 transaction failed 29189/-3, size 32-16 line 3134 [ 839.017501] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.017535] binder: 5340:5345 transaction failed 29189/-3, size 0-0 line 3134 [ 839.018342] binder: 5340:5345 unknown command 109446913 [ 839.018348] binder: 5340:5345 ioctl c0306201 20004000 returned -22 [ 839.019285] binder: 5340:5345 got reply transaction with no transaction stack [ 839.019291] binder: 5340:5345 transaction failed 29201/-71, size 0-0 line 2927 [ 839.020114] binder: BINDER_SET_CONTEXT_MGR already set [ 839.020119] binder: 5342:5347 ioctl 40046207 0 returned -16 [ 839.021444] binder: 5342:5347 got transaction to invalid handle [ 839.021451] binder: 5342:5347 transaction failed 29201/-22, size 72-24 line 3011 [ 839.021502] binder: BINDER_SET_CONTEXT_MGR already set [ 839.021507] binder: 5343:5344 ioctl 40046207 0 returned -16 [ 839.021724] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.021760] binder: 5342:5347 transaction failed 29189/-3, size 0-0 line 3134 [ 839.021955] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.021991] binder: 5343:5344 transaction failed 29189/-3, size 32-8 line 3134 [ 839.023455] binder: 5342:5347 unknown command 109446913 [ 839.023461] binder: 5342:5347 ioctl c0306201 20004000 returned -22 [ 839.027205] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.027243] binder: 5343:5344 transaction failed 29189/-3, size 0-0 line 3134 [ 839.037543] binder: 5343:5344 unknown command 109446913 [ 839.037550] binder: 5343:5344 ioctl c0306201 20004000 returned -22 [ 839.038272] binder: 5343:5344 got reply transaction with no transaction stack [ 839.038279] binder: 5343:5344 transaction failed 29201/-71, size 0-0 line 2927 [ 839.078199] binder: BINDER_SET_CONTEXT_MGR already set [ 839.078211] binder: 5337:5352 ioctl 40046207 0 returned -16 [ 839.079446] binder: 5337:5352 got transaction to invalid handle [ 839.079454] binder: 5337:5352 transaction failed 29201/-22, size 72-24 line 3011 [ 839.086461] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.086500] binder: 5337:5350 transaction failed 29189/-3, size 0-0 line 3134 [ 839.090232] binder: 5337:5350 unknown command -393869567 [ 839.090238] binder: 5337:5350 ioctl c0306201 20004000 returned -22 [ 839.090890] binder: 5337:5350 got reply transaction with no transaction stack [ 839.090897] binder: 5337:5350 transaction failed 29201/-71, size 0-0 line 2927 [ 839.103401] binder: BINDER_SET_CONTEXT_MGR already set [ 839.103408] binder: 5353:5354 ioctl 40046207 0 returned -16 [ 839.103529] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.103567] binder: 5353:5354 transaction failed 29189/-3, size 32-16 line 3134 [ 839.103683] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.103722] binder: 5353:5354 transaction failed 29189/-3, size 0-0 line 3134 [ 839.103810] binder: 5353:5354 unknown command 109446913 [ 839.103816] binder: 5353:5354 ioctl c0306201 20004000 returned -22 [ 839.104496] binder: 5353:5354 got reply transaction with no transaction stack [ 839.104503] binder: 5353:5354 transaction failed 29201/-71, size 0-0 line 2927 [ 839.118789] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.118826] binder: 5355:5356 transaction failed 29189/-3, size 72-24 line 3134 [ 839.118953] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.118986] binder: 5355:5356 transaction failed 29189/-3, size 0-0 line 3134 [ 839.119110] binder: 5355:5356 unknown command 109446913 [ 839.119116] binder: 5355:5356 ioctl c0306201 20004000 returned -22 [ 839.119825] binder: 5355:5356 got reply transaction with no transaction stack [ 839.119831] binder: 5355:5356 transaction failed 29201/-71, size 0-0 line 2927 [ 839.163600] binder: BINDER_SET_CONTEXT_MGR already set [ 839.163607] binder: 5362:5365 ioctl 40046207 0 returned -16 [ 839.163672] binder: BINDER_SET_CONTEXT_MGR already set [ 839.163678] binder: 5358:5368 ioctl 40046207 0 returned -16 [ 839.163909] binder: 5362:5365 got transaction to invalid handle [ 839.163916] binder: 5362:5365 transaction failed 29201/-22, size 72-24 line 3011 [ 839.164047] binder: 5358:5368 got transaction to invalid handle [ 839.164053] binder: 5358:5368 transaction failed 29201/-22, size 72-24 line 3011 [ 839.164372] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.164411] binder: 5362:5365 transaction failed 29189/-3, size 0-0 line 3134 [ 839.164853] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.164888] binder: 5358:5368 transaction failed 29189/-3, size 0-0 line 3134 [ 839.165568] binder: 5362:5365 unknown command 109446913 [ 839.165575] binder: 5362:5365 ioctl c0306201 20004000 returned -22 [ 839.165826] binder: BINDER_SET_CONTEXT_MGR already set [ 839.165832] binder: 5359:5369 ioctl 40046207 0 returned -16 [ 839.166036] binder: 5358:5368 unknown command 109446913 [ 839.166042] binder: 5358:5368 ioctl c0306201 20004000 returned -22 [ 839.166107] binder: BINDER_SET_CONTEXT_MGR already set [ 839.166112] binder: 5363:5364 ioctl 40046207 0 returned -16 [ 839.167302] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.167338] binder: 5363:5364 transaction failed 29189/-3, size 32-16 line 3134 [ 839.167430] binder: 5359:5369 got transaction to invalid handle [ 839.167436] binder: 5359:5369 transaction failed 29201/-22, size 72-24 line 3011 [ 839.168613] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.168648] binder: 5363:5364 transaction failed 29189/-3, size 0-0 line 3134 [ 839.168777] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.168811] binder: 5359:5369 transaction failed 29189/-3, size 0-0 line 3134 [ 839.169743] binder: 5359:5369 unknown command 109446913 [ 839.169750] binder: 5359:5369 ioctl c0306201 20004000 returned -22 [ 839.169802] binder: 5363:5364 unknown command 109446913 [ 839.169808] binder: 5363:5364 ioctl c0306201 20004000 returned -22 [ 839.170752] binder: 5363:5364 got reply transaction with no transaction stack [ 839.170758] binder: 5363:5364 transaction failed 29201/-71, size 0-0 line 2927 [ 839.170832] binder: 5360:5367 got transaction to invalid handle [ 839.170838] binder: 5360:5367 transaction failed 29201/-22, size 72-24 line 3011 [ 839.170965] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.171001] binder: 5360:5367 transaction failed 29189/-3, size 0-0 line 3134 [ 839.172051] binder: 5360:5367 unknown command 109446913 [ 839.172057] binder: 5360:5367 ioctl c0306201 20004000 returned -22 [ 839.173070] binder: 5360:5367 got reply transaction with no transaction stack [ 839.173076] binder: 5360:5367 transaction failed 29201/-71, size 0-0 line 2927 [ 839.189681] binder: BINDER_SET_CONTEXT_MGR already set [ 839.189689] binder: 5357:5370 ioctl 40046207 0 returned -16 [ 839.194519] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.194559] binder: 5357:5370 transaction failed 29189/-3, size 32-16 line 3134 [ 839.198754] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.198791] binder: 5357:5370 transaction failed 29189/-3, size 0-0 line 3134 [ 839.198911] binder: 5357:5370 unknown command 109446913 [ 839.198917] binder: 5357:5370 ioctl c0306201 20004000 returned -22 [ 839.199691] binder: 5357:5370 got reply transaction with no transaction stack [ 839.199697] binder: 5357:5370 transaction failed 29201/-71, size 0-0 line 2927 [ 839.207528] binder: BINDER_SET_CONTEXT_MGR already set [ 839.207536] binder: 5361:5372 ioctl 40046207 0 returned -16 [ 839.209469] binder: 5361:5372 got transaction to invalid handle [ 839.209477] binder: 5361:5372 transaction failed 29201/-22, size 72-24 line 3011 [ 839.217066] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.217106] binder: 5361:5372 transaction failed 29189/-3, size 0-0 line 3134 [ 839.231308] binder: 5361:5372 unknown command -393869567 [ 839.231315] binder: 5361:5372 ioctl c0306201 20004000 returned -22 [ 839.238961] binder: 5361:5372 got reply transaction with no transaction stack [ 839.238968] binder: 5361:5372 transaction failed 29201/-71, size 0-0 line 2927 [ 839.283678] binder: BINDER_SET_CONTEXT_MGR already set [ 839.283686] binder: 5374:5378 ioctl 40046207 0 returned -16 [ 839.283870] binder: 5374:5378 got transaction to invalid handle [ 839.283877] binder: 5374:5378 transaction failed 29201/-22, size 72-24 line 3011 [ 839.284008] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.284046] binder: 5374:5378 transaction failed 29189/-3, size 0-0 line 3134 [ 839.284383] binder: 5374:5378 unknown command 109446913 [ 839.284392] binder: 5374:5378 ioctl c0306201 20004000 returned -22 [ 839.285867] binder: BINDER_SET_CONTEXT_MGR already set [ 839.285873] binder: 5375:5379 ioctl 40046207 0 returned -16 [ 839.286802] binder: 5375:5379 got transaction to invalid handle [ 839.286808] binder: 5375:5379 transaction failed 29201/-22, size 72-24 line 3011 [ 839.288194] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.288231] binder: 5375:5379 transaction failed 29189/-3, size 0-0 line 3134 [ 839.288477] binder: 5375:5379 unknown command 109446913 [ 839.288483] binder: 5375:5379 ioctl c0306201 20004000 returned -22 [ 839.291908] binder: BINDER_SET_CONTEXT_MGR already set [ 839.291914] binder: 5373:5382 ioctl 40046207 0 returned -16 [ 839.292862] binder: 5373:5382 got transaction to invalid handle [ 839.292869] binder: 5373:5382 transaction failed 29201/-22, size 72-24 line 3011 [ 839.297288] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.297327] binder: 5373:5382 transaction failed 29189/-3, size 0-0 line 3134 [ 839.300206] binder: 5376:5381 got transaction to invalid handle [ 839.300213] binder: 5376:5381 transaction failed 29201/-22, size 72-24 line 3011 [ 839.300636] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.300672] binder: 5376:5381 transaction failed 29189/-3, size 0-0 line 3134 [ 839.301029] binder: 5376:5381 unknown command 109446913 [ 839.301035] binder: 5376:5381 ioctl c0306201 20004000 returned -22 [ 839.301063] binder: 5373:5382 unknown command 109446913 [ 839.301069] binder: 5373:5382 ioctl c0306201 20004000 returned -22 [ 839.303307] binder: 5376:5381 got reply transaction with no transaction stack [ 839.303314] binder: 5376:5381 transaction failed 29201/-71, size 0-0 line 2927 [ 839.308084] binder: BINDER_SET_CONTEXT_MGR already set [ 839.308091] binder: 5377:5383 ioctl 40046207 0 returned -16 [ 839.308222] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.308264] binder: 5377:5383 transaction failed 29189/-3, size 32-16 line 3134 [ 839.308432] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.308466] binder: 5377:5383 transaction failed 29189/-3, size 0-0 line 3134 [ 839.311565] binder: 5377:5383 unknown command 109446913 [ 839.311572] binder: 5377:5383 ioctl c0306201 20004000 returned -22 [ 839.312389] binder: 5377:5383 got reply transaction with no transaction stack [ 839.312395] binder: 5377:5383 transaction failed 29201/-71, size 0-0 line 2927 [ 839.324847] binder: BINDER_SET_CONTEXT_MGR already set [ 839.324853] binder: 5380:5385 ioctl 40046207 0 returned -16 [ 839.324984] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.325022] binder: 5380:5385 transaction failed 29189/-3, size 32-16 line 3134 [ 839.325189] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.325224] binder: 5380:5385 transaction failed 29189/-3, size 0-0 line 3134 [ 839.325335] binder: 5380:5385 unknown command 109446913 [ 839.325341] binder: 5380:5385 ioctl c0306201 20004000 returned -22 [ 839.326156] binder: 5380:5385 got reply transaction with no transaction stack [ 839.326162] binder: 5380:5385 transaction failed 29201/-71, size 0-0 line 2927 [ 839.374086] binder: BINDER_SET_CONTEXT_MGR already set [ 839.374093] binder: 5388:5390 ioctl 40046207 0 returned -16 [ 839.374172] binder: 5388:5390 got transaction to invalid handle [ 839.374179] binder: 5388:5390 transaction failed 29201/-22, size 72-24 line 3011 [ 839.374380] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.374417] binder: 5388:5390 transaction failed 29189/-3, size 0-0 line 3134 [ 839.375622] binder: 5388:5390 unknown command 109446913 [ 839.375629] binder: 5388:5390 ioctl c0306201 20004000 returned -22 [ 839.379949] binder: BINDER_SET_CONTEXT_MGR already set [ 839.379957] binder: 5384:5391 ioctl 40046207 0 returned -16 [ 839.381216] binder: 5384:5387 got transaction to invalid handle [ 839.381223] binder: 5384:5387 transaction failed 29201/-22, size 72-24 line 3011 [ 839.381397] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.381433] binder: 5384:5387 transaction failed 29189/-3, size 0-0 line 3134 [ 839.381560] binder: 5384:5387 unknown command -393869567 [ 839.381566] binder: 5384:5387 ioctl c0306201 20004000 returned -22 [ 839.382010] binder: 5384:5387 got reply transaction with no transaction stack [ 839.382020] binder: 5384:5387 transaction failed 29201/-71, size 0-0 line 2927 [ 839.403988] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.404026] binder: 5392:5393 transaction failed 29189/-3, size 72-24 line 3134 [ 839.404155] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.404189] binder: 5392:5393 transaction failed 29189/-3, size 0-0 line 3134 [ 839.404313] binder: 5392:5393 unknown command 109446913 [ 839.404319] binder: 5392:5393 ioctl c0306201 20004000 returned -22 [ 839.405024] binder: 5392:5393 got reply transaction with no transaction stack [ 839.405030] binder: 5392:5393 transaction failed 29201/-71, size 0-0 line 2927 [ 839.448295] binder: 5397:5403 got transaction to invalid handle [ 839.448303] binder: 5397:5403 transaction failed 29201/-22, size 72-24 line 3011 [ 839.448834] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.448872] binder: 5397:5403 transaction failed 29189/-3, size 0-0 line 3134 [ 839.449137] binder: BINDER_SET_CONTEXT_MGR already set [ 839.449143] binder: 5399:5402 ioctl 40046207 0 returned -16 [ 839.449485] binder: BINDER_SET_CONTEXT_MGR already set [ 839.449614] binder: 5398:5404 ioctl 40046207 0 returned -16 [ 839.449839] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.449876] binder: 5399:5402 transaction failed 29189/-3, size 32-16 line 3134 [ 839.450116] binder: 5398:5404 got transaction to invalid handle [ 839.450122] binder: 5398:5404 transaction failed 29201/-22, size 72-24 line 3011 [ 839.450335] binder: BINDER_SET_CONTEXT_MGR already set [ 839.450340] binder: 5396:5406 ioctl 40046207 0 returned -16 [ 839.450501] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.450535] binder: 5398:5404 transaction failed 29189/-3, size 0-0 line 3134 [ 839.450880] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.450915] binder: 5399:5402 transaction failed 29189/-3, size 0-0 line 3134 [ 839.451352] binder: 5397:5403 unknown command 109446913 [ 839.451358] binder: 5397:5403 ioctl c0306201 20004000 returned -22 [ 839.452345] binder: 5396:5406 got transaction to invalid handle [ 839.452352] binder: 5396:5406 transaction failed 29201/-22, size 72-24 line 3011 [ 839.452735] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.452771] binder: 5396:5406 transaction failed 29189/-3, size 0-0 line 3134 [ 839.452930] binder: 5397:5403 got reply transaction with no transaction stack [ 839.453024] binder: 5397:5403 transaction failed 29201/-71, size 0-0 line 2927 [ 839.453216] binder: 5398:5404 unknown command 109446913 [ 839.453222] binder: 5398:5404 ioctl c0306201 20004000 returned -22 [ 839.453395] binder: 5399:5402 unknown command 109446913 [ 839.453401] binder: 5399:5402 ioctl c0306201 20004000 returned -22 [ 839.453467] binder: BINDER_SET_CONTEXT_MGR already set [ 839.453472] binder: 5395:5405 ioctl 40046207 0 returned -16 [ 839.453523] binder: 5396:5406 unknown command 109446913 [ 839.453529] binder: 5396:5406 ioctl c0306201 20004000 returned -22 [ 839.454402] binder: 5399:5402 got reply transaction with no transaction stack [ 839.454408] binder: 5399:5402 transaction failed 29201/-71, size 0-0 line 2927 [ 839.454489] binder: 5395:5405 got transaction to invalid handle [ 839.454495] binder: 5395:5405 transaction failed 29201/-22, size 72-24 line 3011 [ 839.456357] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.456393] binder: 5395:5405 transaction failed 29189/-3, size 0-0 line 3134 [ 839.456557] binder: 5395:5405 unknown command 109446913 [ 839.456563] binder: 5395:5405 ioctl c0306201 20004000 returned -22 [ 839.472445] binder: BINDER_SET_CONTEXT_MGR already set [ 839.472452] binder: 5394:5407 ioctl 40046207 0 returned -16 [ 839.473576] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.473615] binder: 5394:5407 transaction failed 29189/-3, size 32-16 line 3134 [ 839.480438] binder: 5394:5407 unknown command 109446913 [ 839.480445] binder: 5394:5407 ioctl c0306201 20004000 returned -22 [ 839.481264] binder: 5394:5407 got reply transaction with no transaction stack [ 839.481271] binder: 5394:5407 transaction failed 29201/-71, size 0-0 line 2927 [ 839.489546] binder: BINDER_SET_CONTEXT_MGR already set [ 839.489655] binder: 5400:5409 ioctl 40046207 0 returned -16 [ 839.513504] binder: 5400:5409 got transaction to invalid handle [ 839.513513] binder: 5400:5409 transaction failed 29201/-22, size 72-24 line 3011 [ 839.522213] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.522254] binder: 5400:5409 transaction failed 29189/-3, size 0-0 line 3134 [ 839.537293] binder: 5400:5409 unknown command -393869567 [ 839.537300] binder: 5400:5409 ioctl c0306201 20004000 returned -22 [ 839.539860] binder: 5400:5409 got reply transaction with no transaction stack [ 839.539867] binder: 5400:5409 transaction failed 29201/-71, size 0-0 line 2927 [ 839.555380] binder: BINDER_SET_CONTEXT_MGR already set [ 839.555387] binder: 5410:5416 ioctl 40046207 0 returned -16 [ 839.555596] binder: 5410:5416 got transaction to invalid handle [ 839.555603] binder: 5410:5416 transaction failed 29201/-22, size 72-24 line 3011 [ 839.555824] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.555862] binder: 5410:5416 transaction failed 29189/-3, size 0-0 line 3134 [ 839.560872] binder: BINDER_SET_CONTEXT_MGR already set [ 839.560879] binder: 5412:5417 ioctl 40046207 0 returned -16 [ 839.561080] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.567070] binder: 5412:5417 transaction failed 29189/-3, size 32-16 line 3134 [ 839.568658] binder: 5410:5416 unknown command 109446913 [ 839.568665] binder: 5410:5416 ioctl c0306201 20004000 returned -22 [ 839.569581] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.569620] binder: 5412:5417 transaction failed 29189/-3, size 0-0 line 3134 [ 839.571223] binder: 5412:5417 unknown command 109446913 [ 839.571230] binder: 5412:5417 ioctl c0306201 20004000 returned -22 [ 839.575041] binder: 5412:5417 got reply transaction with no transaction stack [ 839.575047] binder: 5412:5417 transaction failed 29201/-71, size 0-0 line 2927 [ 839.584203] binder: BINDER_SET_CONTEXT_MGR already set [ 839.584209] binder: 5414:5419 ioctl 40046207 0 returned -16 [ 839.584338] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.584375] binder: 5414:5419 transaction failed 29189/-3, size 32-16 line 3134 [ 839.584756] binder: 5414:5419 unknown command 109446913 [ 839.584762] binder: 5414:5419 ioctl c0306201 20004000 returned -22 [ 839.585380] binder: 5414:5419 got reply transaction with no transaction stack [ 839.585386] binder: 5414:5419 transaction failed 29201/-71, size 0-0 line 2927 [ 839.589652] binder: BINDER_SET_CONTEXT_MGR already set [ 839.589658] binder: 5411:5418 ioctl 40046207 0 returned -16 [ 839.589741] binder: 5411:5418 got transaction to invalid handle [ 839.589747] binder: 5411:5418 transaction failed 29201/-22, size 72-24 line 3011 [ 839.590207] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.590244] binder: 5411:5418 transaction failed 29189/-3, size 0-0 line 3134 [ 839.590396] binder: BINDER_SET_CONTEXT_MGR already set [ 839.590401] binder: 5413:5421 ioctl 40046207 0 returned -16 [ 839.590598] binder: 5413:5421 got transaction to invalid handle [ 839.590605] binder: 5413:5421 transaction failed 29201/-22, size 72-24 line 3011 [ 839.590732] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.590767] binder: 5413:5421 transaction failed 29189/-3, size 0-0 line 3134 [ 839.591363] binder: 5411:5418 unknown command 109446913 [ 839.591369] binder: 5411:5418 ioctl c0306201 20004000 returned -22 [ 839.592518] binder: 5413:5421 unknown command 109446913 [ 839.592528] binder: 5413:5421 ioctl c0306201 20004000 returned -22 [ 839.594303] binder: 5415:5420 got transaction to invalid handle [ 839.594311] binder: 5415:5420 transaction failed 29201/-22, size 72-24 line 3011 [ 839.594621] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.594657] binder: 5415:5420 transaction failed 29189/-3, size 0-0 line 3134 [ 839.595350] binder: 5415:5420 unknown command 109446913 [ 839.595356] binder: 5415:5420 ioctl c0306201 20004000 returned -22 [ 839.596324] binder: 5415:5420 got reply transaction with no transaction stack [ 839.596331] binder: 5415:5420 transaction failed 29201/-71, size 0-0 line 2927 [ 839.654097] binder: BINDER_SET_CONTEXT_MGR already set [ 839.654104] binder: 5427:5429 ioctl 40046207 0 returned -16 [ 839.654170] binder: 5427:5429 got transaction to invalid handle [ 839.654177] binder: 5427:5429 transaction failed 29201/-22, size 72-24 line 3011 [ 839.654693] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.654736] binder: 5427:5429 transaction failed 29189/-3, size 0-0 line 3134 [ 839.654829] binder: 5427:5429 unknown command 109446913 [ 839.654835] binder: 5427:5429 ioctl c0306201 20004000 returned -22 [ 839.657163] binder: BINDER_SET_CONTEXT_MGR already set [ 839.657170] binder: 5422:5426 ioctl 40046207 0 returned -16 [ 839.657300] binder: 5422:5426 got transaction to invalid handle [ 839.657307] binder: 5422:5426 transaction failed 29201/-22, size 72-24 line 3011 [ 839.657478] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.657515] binder: 5422:5426 transaction failed 29189/-3, size 0-0 line 3134 [ 839.657636] binder: 5422:5426 unknown command -393869567 [ 839.657641] binder: 5422:5426 ioctl c0306201 20004000 returned -22 [ 839.658374] binder: 5422:5426 got reply transaction with no transaction stack [ 839.658381] binder: 5422:5426 transaction failed 29201/-71, size 0-0 line 2927 [ 839.680779] binder: BINDER_SET_CONTEXT_MGR already set [ 839.680787] binder: 5430:5431 ioctl 40046207 0 returned -16 [ 839.680957] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.680996] binder: 5430:5431 transaction failed 29189/-3, size 0-0 line 3134 [ 839.681112] binder: 5430:5431 unknown command 109446913 [ 839.681118] binder: 5430:5431 ioctl c0306201 20004000 returned -22 [ 839.681817] binder: 5430:5431 got reply transaction with no transaction stack [ 839.681823] binder: 5430:5431 transaction failed 29201/-71, size 0-0 line 2927 [ 839.726646] binder: BINDER_SET_CONTEXT_MGR already set [ 839.726653] binder: 5435:5442 ioctl 40046207 0 returned -16 [ 839.726874] binder: 5435:5442 got transaction to invalid handle [ 839.726882] binder: 5435:5442 transaction failed 29201/-22, size 72-24 line 3011 [ 839.727052] binder: BINDER_SET_CONTEXT_MGR already set [ 839.727058] binder: 5433:5443 ioctl 40046207 0 returned -16 [ 839.727178] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.727217] binder: 5435:5442 transaction failed 29189/-3, size 0-0 line 3134 [ 839.727619] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.727654] binder: 5433:5443 transaction failed 29189/-3, size 32-16 line 3134 [ 839.728190] binder: 5435:5442 unknown command 109446913 [ 839.728196] binder: 5435:5442 ioctl c0306201 20004000 returned -22 [ 839.728321] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.728356] binder: 5433:5443 transaction failed 29189/-3, size 0-0 line 3134 [ 839.729455] binder: 5433:5443 unknown command 109446913 [ 839.729461] binder: 5433:5443 ioctl c0306201 20004000 returned -22 [ 839.730328] binder: 5433:5443 got reply transaction with no transaction stack [ 839.730334] binder: 5433:5443 transaction failed 29201/-71, size 0-0 line 2927 [ 839.732039] binder: BINDER_SET_CONTEXT_MGR already set [ 839.732044] binder: 5434:5444 ioctl 40046207 0 returned -16 [ 839.733469] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.733505] binder: 5434:5444 transaction failed 29189/-3, size 32-16 line 3134 [ 839.733883] binder: BINDER_SET_CONTEXT_MGR already set [ 839.733889] binder: 5437:5440 ioctl 40046207 0 returned -16 [ 839.734276] binder: 5434:5444 unknown command 109446913 [ 839.734282] binder: 5434:5444 ioctl c0306201 20004000 returned -22 [ 839.734977] binder: 5434:5444 got reply transaction with no transaction stack [ 839.734983] binder: 5434:5444 transaction failed 29201/-71, size 0-0 line 2927 [ 839.735262] binder: BINDER_SET_CONTEXT_MGR already set [ 839.735267] binder: 5438:5439 ioctl 40046207 0 returned -16 [ 839.735311] binder: 5437:5440 got transaction to invalid handle [ 839.735317] binder: 5437:5440 transaction failed 29201/-22, size 72-24 line 3011 [ 839.735550] binder: 5438:5439 got transaction to invalid handle [ 839.735556] binder: 5438:5439 transaction failed 29201/-22, size 72-24 line 3011 [ 839.735643] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.735678] binder: 5437:5440 transaction failed 29189/-3, size 0-0 line 3134 [ 839.735891] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.735926] binder: 5438:5439 transaction failed 29189/-3, size 0-0 line 3134 [ 839.736532] binder: 5438:5439 unknown command 109446913 [ 839.736538] binder: 5438:5439 ioctl c0306201 20004000 returned -22 [ 839.737512] binder: 5437:5440 unknown command 109446913 [ 839.737518] binder: 5437:5440 ioctl c0306201 20004000 returned -22 [ 839.748497] binder: 5432:5445 got transaction to invalid handle [ 839.748505] binder: 5432:5445 transaction failed 29201/-22, size 72-24 line 3011 [ 839.749001] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.749037] binder: 5432:5445 transaction failed 29189/-3, size 0-0 line 3134 [ 839.752746] binder: 5432:5445 unknown command 109446913 [ 839.752753] binder: 5432:5445 ioctl c0306201 20004000 returned -22 [ 839.753646] binder: 5432:5445 got reply transaction with no transaction stack [ 839.753653] binder: 5432:5445 transaction failed 29201/-71, size 0-0 line 2927 [ 839.770204] binder: BINDER_SET_CONTEXT_MGR already set [ 839.770215] binder: 5436:5447 ioctl 40046207 0 returned -16 [ 839.778134] binder: 5436:5447 got transaction to invalid handle [ 839.778142] binder: 5436:5447 transaction failed 29201/-22, size 72-24 line 3011 [ 839.792772] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.792812] binder: 5436:5447 transaction failed 29189/-3, size 0-0 line 3134 [ 839.808074] binder: 5436:5447 unknown command -393869567 [ 839.808083] binder: 5436:5447 ioctl c0306201 20004000 returned -22 [ 839.809893] binder: 5436:5447 got reply transaction with no transaction stack [ 839.809900] binder: 5436:5447 transaction failed 29201/-71, size 0-0 line 2927 [ 839.844745] binder: BINDER_SET_CONTEXT_MGR already set [ 839.844753] binder: 5448:5453 ioctl 40046207 0 returned -16 [ 839.844887] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.844925] binder: 5448:5453 transaction failed 29189/-3, size 32-16 line 3134 [ 839.845103] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.845137] binder: 5448:5453 transaction failed 29189/-3, size 0-0 line 3134 [ 839.845363] binder: BINDER_SET_CONTEXT_MGR already set [ 839.845369] binder: 5450:5455 ioctl 40046207 0 returned -16 [ 839.845662] binder: 5448:5453 unknown command 109446913 [ 839.845668] binder: 5448:5453 ioctl c0306201 20004000 returned -22 [ 839.846381] binder: 5450:5455 got transaction to invalid handle [ 839.846387] binder: 5450:5455 transaction failed 29201/-22, size 72-24 line 3011 [ 839.846523] binder: 5448:5453 got reply transaction with no transaction stack [ 839.846529] binder: 5448:5453 transaction failed 29201/-71, size 0-0 line 2927 [ 839.847012] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.847047] binder: 5450:5455 transaction failed 29189/-3, size 0-0 line 3134 [ 839.847178] binder: 5450:5455 unknown command 109446913 [ 839.847184] binder: 5450:5455 ioctl c0306201 20004000 returned -22 [ 839.852673] binder: BINDER_SET_CONTEXT_MGR already set [ 839.852679] binder: 5449:5456 ioctl 40046207 0 returned -16 [ 839.853934] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.853972] binder: 5449:5456 transaction failed 29189/-3, size 32-16 line 3134 [ 839.863866] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.863903] binder: 5449:5456 transaction failed 29189/-3, size 0-0 line 3134 [ 839.864029] binder: 5449:5456 unknown command 109446913 [ 839.864035] binder: 5449:5456 ioctl c0306201 20004000 returned -22 [ 839.864656] binder: 5449:5456 got reply transaction with no transaction stack [ 839.864663] binder: 5449:5456 transaction failed 29201/-71, size 0-0 line 2927 [ 839.873138] binder: BINDER_SET_CONTEXT_MGR already set [ 839.873144] binder: 5452:5457 ioctl 40046207 0 returned -16 [ 839.873219] binder: BINDER_SET_CONTEXT_MGR already set [ 839.873225] binder: 5451:5458 ioctl 40046207 0 returned -16 [ 839.873301] binder: 5451:5458 got transaction to invalid handle [ 839.873308] binder: 5451:5458 transaction failed 29201/-22, size 72-24 line 3011 [ 839.873395] binder: 5452:5457 got transaction to invalid handle [ 839.873401] binder: 5452:5457 transaction failed 29201/-22, size 72-24 line 3011 [ 839.873623] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.873751] binder: 5452:5457 transaction failed 29189/-3, size 0-0 line 3134 [ 839.873919] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.873953] binder: 5451:5458 transaction failed 29189/-3, size 0-0 line 3134 [ 839.874067] binder: 5451:5458 unknown command 109446913 [ 839.874073] binder: 5451:5458 ioctl c0306201 20004000 returned -22 [ 839.875157] binder: 5452:5457 unknown command 109446913 [ 839.875164] binder: 5452:5457 ioctl c0306201 20004000 returned -22 [ 839.883955] binder: 5454:5460 got transaction to invalid handle [ 839.883962] binder: 5454:5460 transaction failed 29201/-22, size 72-24 line 3011 [ 839.884094] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.884130] binder: 5454:5460 transaction failed 29189/-3, size 0-0 line 3134 [ 839.884258] binder: 5454:5460 unknown command 109446913 [ 839.884264] binder: 5454:5460 ioctl c0306201 20004000 returned -22 [ 839.886080] binder: 5454:5460 got reply transaction with no transaction stack [ 839.886087] binder: 5454:5460 transaction failed 29201/-71, size 0-0 line 2927 [ 839.931428] binder: BINDER_SET_CONTEXT_MGR already set [ 839.931436] binder: 5459:5466 ioctl 40046207 0 returned -16 [ 839.932643] binder: 5459:5466 got transaction to invalid handle [ 839.932651] binder: 5459:5466 transaction failed 29201/-22, size 72-24 line 3011 [ 839.933380] binder: BINDER_SET_CONTEXT_MGR already set [ 839.933386] binder: 5464:5467 ioctl 40046207 0 returned -16 [ 839.933459] binder: 5464:5467 got transaction to invalid handle [ 839.933466] binder: 5464:5467 transaction failed 29201/-22, size 72-24 line 3011 [ 839.933682] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.933725] binder: 5464:5467 transaction failed 29189/-3, size 0-0 line 3134 [ 839.934815] binder: 5464:5467 unknown command 109446913 [ 839.934822] binder: 5464:5467 ioctl c0306201 20004000 returned -22 [ 839.935575] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.935612] binder: 5459:5466 transaction failed 29189/-3, size 0-0 line 3134 [ 839.938053] binder: 5459:5463 unknown command -393869567 [ 839.938060] binder: 5459:5463 ioctl c0306201 20004000 returned -22 [ 839.938712] binder: 5459:5463 got reply transaction with no transaction stack [ 839.938718] binder: 5459:5463 transaction failed 29201/-71, size 0-0 line 2927 [ 839.960580] binder: BINDER_SET_CONTEXT_MGR already set [ 839.960587] binder: 5468:5469 ioctl 40046207 0 returned -16 [ 839.960763] binder_alloc: 5895: binder_alloc_buf, no vma [ 839.960800] binder: 5468:5469 transaction failed 29189/-3, size 0-0 line 3134 [ 839.960915] binder: 5468:5469 unknown command 109446913 [ 839.960921] binder: 5468:5469 ioctl c0306201 20004000 returned -22 [ 839.961612] binder: 5468:5469 got reply transaction with no transaction stack [ 839.961618] binder: 5468:5469 transaction failed 29201/-71, size 0-0 line 2927 [ 840.006343] binder: BINDER_SET_CONTEXT_MGR already set [ 840.006350] binder: 5473:5480 ioctl 40046207 0 returned -16 [ 840.006608] binder: BINDER_SET_CONTEXT_MGR already set [ 840.006613] binder: 5474:5479 ioctl 40046207 0 returned -16 [ 840.007026] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.007064] binder: 5473:5480 transaction failed 29189/-3, size 32-16 line 3134 [ 840.007197] binder: 5474:5479 got transaction to invalid handle [ 840.007204] binder: 5474:5479 transaction failed 29201/-22, size 72-24 line 3011 [ 840.007848] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.007883] binder: 5473:5480 transaction failed 29189/-3, size 0-0 line 3134 [ 840.007956] binder: BINDER_SET_CONTEXT_MGR already set [ 840.007962] binder: 5471:5481 ioctl 40046207 0 returned -16 [ 840.008660] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.008699] binder: 5474:5479 transaction failed 29189/-3, size 0-0 line 3134 [ 840.008840] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.008873] binder: 5471:5481 transaction failed 29189/-3, size 32-16 line 3134 [ 840.009332] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.009365] binder: 5471:5481 transaction failed 29189/-3, size 0-0 line 3134 [ 840.009536] binder: 5473:5480 unknown command 109446913 [ 840.009545] binder: 5473:5480 ioctl c0306201 20004000 returned -22 [ 840.010626] binder: 5473:5480 got reply transaction with no transaction stack [ 840.010633] binder: 5473:5480 transaction failed 29201/-71, size 0-0 line 2927 [ 840.010824] binder: 5474:5479 unknown command 109446913 [ 840.010830] binder: 5474:5479 ioctl c0306201 20004000 returned -22 [ 840.010928] binder: 5471:5481 unknown command 109446913 [ 840.010934] binder: 5471:5481 ioctl c0306201 20004000 returned -22 [ 840.011716] binder: 5471:5481 got reply transaction with no transaction stack [ 840.011722] binder: 5471:5481 transaction failed 29201/-71, size 0-0 line 2927 [ 840.012622] binder: 5475:5477 got transaction to invalid handle [ 840.012652] binder: 5475:5477 transaction failed 29201/-22, size 72-24 line 3011 [ 840.012827] binder: BINDER_SET_CONTEXT_MGR already set [ 840.012833] binder: 5472:5482 ioctl 40046207 0 returned -16 [ 840.013070] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.013105] binder: 5475:5477 transaction failed 29189/-3, size 0-0 line 3134 [ 840.013192] binder: 5472:5482 got transaction to invalid handle [ 840.013198] binder: 5472:5482 transaction failed 29201/-22, size 72-24 line 3011 [ 840.013319] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.013352] binder: 5472:5482 transaction failed 29189/-3, size 0-0 line 3134 [ 840.013536] binder: 5475:5477 unknown command 109446913 [ 840.013542] binder: 5475:5477 ioctl c0306201 20004000 returned -22 [ 840.013593] binder: 5472:5482 unknown command 109446913 [ 840.013598] binder: 5472:5482 ioctl c0306201 20004000 returned -22 [ 840.014507] binder: 5475:5477 got reply transaction with no transaction stack [ 840.014513] binder: 5475:5477 transaction failed 29201/-71, size 0-0 line 2927 [ 840.035910] binder: BINDER_SET_CONTEXT_MGR already set [ 840.035918] binder: 5470:5483 ioctl 40046207 0 returned -16 [ 840.036000] binder: 5470:5483 got transaction to invalid handle [ 840.036007] binder: 5470:5483 transaction failed 29201/-22, size 72-24 line 3011 [ 840.039765] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.039803] binder: 5470:5483 transaction failed 29189/-3, size 0-0 line 3134 [ 840.040286] binder: 5470:5483 unknown command 109446913 [ 840.040293] binder: 5470:5483 ioctl c0306201 20004000 returned -22 [ 840.047875] binder: BINDER_SET_CONTEXT_MGR already set [ 840.047882] binder: 5476:5485 ioctl 40046207 0 returned -16 [ 840.049695] binder: 5476:5485 got transaction to invalid handle [ 840.049703] binder: 5476:5485 transaction failed 29201/-22, size 72-24 line 3011 [ 840.059174] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.059213] binder: 5476:5485 transaction failed 29189/-3, size 0-0 line 3134 [ 840.074033] binder: 5476:5485 unknown command -393869567 [ 840.074040] binder: 5476:5485 ioctl c0306201 20004000 returned -22 [ 840.082518] binder: 5476:5485 got reply transaction with no transaction stack [ 840.082529] binder: 5476:5485 transaction failed 29201/-71, size 0-0 line 2927 [ 840.126449] binder: BINDER_SET_CONTEXT_MGR already set [ 840.126457] binder: 5487:5492 ioctl 40046207 0 returned -16 [ 840.126576] binder: 5487:5492 got transaction to invalid handle [ 840.126583] binder: 5487:5492 transaction failed 29201/-22, size 72-24 line 3011 [ 840.127973] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.128010] binder: 5487:5492 transaction failed 29189/-3, size 0-0 line 3134 [ 840.128266] binder: 5487:5492 unknown command 109446913 [ 840.128272] binder: 5487:5492 ioctl c0306201 20004000 returned -22 [ 840.131547] binder: BINDER_SET_CONTEXT_MGR already set [ 840.131554] binder: 5489:5494 ioctl 40046207 0 returned -16 [ 840.132027] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.132064] binder: 5489:5494 transaction failed 29189/-3, size 32-16 line 3134 [ 840.132419] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.132455] binder: 5489:5494 transaction failed 29189/-3, size 0-0 line 3134 [ 840.134577] binder: 5488:5493 got transaction to invalid handle [ 840.134584] binder: 5488:5493 transaction failed 29201/-22, size 72-24 line 3011 [ 840.134765] binder: 5489:5494 unknown command 109446913 [ 840.134772] binder: 5489:5494 ioctl c0306201 20004000 returned -22 [ 840.135737] binder: 5489:5494 got reply transaction with no transaction stack [ 840.135743] binder: 5489:5494 transaction failed 29201/-71, size 0-0 line 2927 [ 840.136504] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.136542] binder: 5488:5493 transaction failed 29189/-3, size 0-0 line 3134 [ 840.140067] binder: 5488:5493 unknown command 109446913 [ 840.140074] binder: 5488:5493 ioctl c0306201 20004000 returned -22 [ 840.140941] binder: 5488:5493 got reply transaction with no transaction stack [ 840.140947] binder: 5488:5493 transaction failed 29201/-71, size 0-0 line 2927 [ 840.150599] binder: BINDER_SET_CONTEXT_MGR already set [ 840.150606] binder: 5491:5497 ioctl 40046207 0 returned -16 [ 840.151543] binder: 5491:5497 got transaction to invalid handle [ 840.151550] binder: 5491:5497 transaction failed 29201/-22, size 72-24 line 3011 [ 840.151898] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.151936] binder: 5491:5497 transaction failed 29189/-3, size 0-0 line 3134 [ 840.152020] binder: BINDER_SET_CONTEXT_MGR already set [ 840.152026] binder: 5490:5498 ioctl 40046207 0 returned -16 [ 840.152105] binder: 5490:5498 got transaction to invalid handle [ 840.152111] binder: 5490:5498 transaction failed 29201/-22, size 72-24 line 3011 [ 840.152231] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.152265] binder: 5490:5498 transaction failed 29189/-3, size 0-0 line 3134 [ 840.153054] binder: 5491:5497 unknown command 109446913 [ 840.153061] binder: 5491:5497 ioctl c0306201 20004000 returned -22 [ 840.154777] binder: BINDER_SET_CONTEXT_MGR already set [ 840.154783] binder: 5486:5495 ioctl 40046207 0 returned -16 [ 840.154979] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.155015] binder: 5486:5495 transaction failed 29189/-3, size 32-16 line 3134 [ 840.155143] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.155176] binder: 5486:5495 transaction failed 29189/-3, size 0-0 line 3134 [ 840.155284] binder: 5486:5495 unknown command 109446913 [ 840.155289] binder: 5486:5495 ioctl c0306201 20004000 returned -22 [ 840.156150] binder: 5486:5495 got reply transaction with no transaction stack [ 840.156156] binder: 5486:5495 transaction failed 29201/-71, size 0-0 line 2927 [ 840.157944] binder: 5490:5498 unknown command 109446913 [ 840.157950] binder: 5490:5498 ioctl c0306201 20004000 returned -22 [ 840.205756] binder: BINDER_SET_CONTEXT_MGR already set [ 840.205765] binder: 5496:5501 ioctl 40046207 0 returned -16 [ 840.207011] binder: 5496:5501 got transaction to invalid handle [ 840.207019] binder: 5496:5501 transaction failed 29201/-22, size 72-24 line 3011 [ 840.213349] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.213431] binder: 5496:5501 transaction failed 29189/-3, size 0-0 line 3134 [ 840.215789] binder: 5496:5501 unknown command -393869567 [ 840.215796] binder: 5496:5501 ioctl c0306201 20004000 returned -22 [ 840.217613] binder: 5496:5500 got reply transaction with no transaction stack [ 840.217620] binder: 5496:5500 transaction failed 29201/-71, size 0-0 line 2927 [ 840.228848] binder: BINDER_SET_CONTEXT_MGR already set [ 840.228855] binder: 5502:5504 ioctl 40046207 0 returned -16 [ 840.228920] binder: 5502:5504 got transaction to invalid handle [ 840.228927] binder: 5502:5504 transaction failed 29201/-22, size 72-24 line 3011 [ 840.229044] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.229080] binder: 5502:5504 transaction failed 29189/-3, size 0-0 line 3134 [ 840.229181] binder: 5502:5504 unknown command 109446913 [ 840.229187] binder: 5502:5504 ioctl c0306201 20004000 returned -22 [ 840.245370] binder: BINDER_SET_CONTEXT_MGR already set [ 840.245377] binder: 5505:5506 ioctl 40046207 0 returned -16 [ 840.245553] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.245590] binder: 5505:5506 transaction failed 29189/-3, size 0-0 line 3134 [ 840.245710] binder: 5505:5506 unknown command 109446913 [ 840.245716] binder: 5505:5506 ioctl c0306201 20004000 returned -22 [ 840.246454] binder: 5505:5506 got reply transaction with no transaction stack [ 840.246460] binder: 5505:5506 transaction failed 29201/-71, size 0-0 line 2927 [ 840.288769] binder: 5509:5515 got transaction to invalid handle [ 840.288777] binder: 5509:5515 transaction failed 29201/-22, size 72-24 line 3011 [ 840.288899] binder: BINDER_SET_CONTEXT_MGR already set [ 840.288905] binder: 5507:5519 ioctl 40046207 0 returned -16 [ 840.289115] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.289151] binder: 5509:5515 transaction failed 29189/-3, size 0-0 line 3134 [ 840.289380] binder: 5507:5519 got transaction to invalid handle [ 840.289386] binder: 5507:5519 transaction failed 29201/-22, size 72-24 line 3011 [ 840.289889] binder: BINDER_SET_CONTEXT_MGR already set [ 840.289895] binder: 5513:5516 ioctl 40046207 0 returned -16 [ 840.290012] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.290047] binder: 5507:5519 transaction failed 29189/-3, size 0-0 line 3134 [ 840.290163] binder: BINDER_SET_CONTEXT_MGR already set [ 840.290168] binder: 5508:5514 ioctl 40046207 0 returned -16 [ 840.290309] binder: 5513:5516 got transaction to invalid handle [ 840.290315] binder: 5513:5516 transaction failed 29201/-22, size 72-24 line 3011 [ 840.290525] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.290625] binder: 5508:5514 transaction failed 29189/-3, size 32-16 line 3134 [ 840.290771] binder: 5509:5515 unknown command 109446913 [ 840.290777] binder: 5509:5515 ioctl c0306201 20004000 returned -22 [ 840.291323] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.291358] binder: 5513:5516 transaction failed 29189/-3, size 0-0 line 3134 [ 840.292474] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.292510] binder: 5508:5514 transaction failed 29189/-3, size 0-0 line 3134 [ 840.292642] binder: 5509:5515 got reply transaction with no transaction stack [ 840.292648] binder: 5509:5515 transaction failed 29201/-71, size 0-0 line 2927 [ 840.293099] binder: 5507:5519 unknown command 109446913 [ 840.293105] binder: 5507:5519 ioctl c0306201 20004000 returned -22 [ 840.293207] binder: 5513:5516 unknown command 109446913 [ 840.293213] binder: 5513:5516 ioctl c0306201 20004000 returned -22 [ 840.295389] binder: 5508:5514 unknown command 109446913 [ 840.295395] binder: 5508:5514 ioctl c0306201 20004000 returned -22 [ 840.296373] binder: 5508:5514 got reply transaction with no transaction stack [ 840.296379] binder: 5508:5514 transaction failed 29201/-71, size 0-0 line 2927 [ 840.296447] binder: BINDER_SET_CONTEXT_MGR already set [ 840.296452] binder: 5511:5518 ioctl 40046207 0 returned -16 [ 840.296619] binder: 5511:5518 got transaction to invalid handle [ 840.296626] binder: 5511:5518 transaction failed 29201/-22, size 72-24 line 3011 [ 840.297207] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.297332] binder: 5511:5518 transaction failed 29189/-3, size 0-0 line 3134 [ 840.298720] binder: 5511:5518 unknown command 109446913 [ 840.298727] binder: 5511:5518 ioctl c0306201 20004000 returned -22 [ 840.313894] binder: BINDER_SET_CONTEXT_MGR already set [ 840.313902] binder: 5510:5520 ioctl 40046207 0 returned -16 [ 840.314285] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.314323] binder: 5510:5520 transaction failed 29189/-3, size 32-16 line 3134 [ 840.321691] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.321730] binder: 5510:5520 transaction failed 29189/-3, size 0-0 line 3134 [ 840.321851] binder: 5510:5520 unknown command 109446913 [ 840.321857] binder: 5510:5520 ioctl c0306201 20004000 returned -22 [ 840.322736] binder: 5510:5520 got reply transaction with no transaction stack [ 840.322743] binder: 5510:5520 transaction failed 29201/-71, size 0-0 line 2927 [ 840.331314] binder: BINDER_SET_CONTEXT_MGR already set [ 840.331321] binder: 5512:5522 ioctl 40046207 0 returned -16 [ 840.339848] binder: 5512:5522 got transaction to invalid handle [ 840.339856] binder: 5512:5522 transaction failed 29201/-22, size 72-24 line 3011 [ 840.349557] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.349594] binder: 5512:5522 transaction failed 29189/-3, size 0-0 line 3134 [ 840.365496] binder: 5512:5522 unknown command -393869567 [ 840.365504] binder: 5512:5522 ioctl c0306201 20004000 returned -22 [ 840.373194] binder: 5512:5522 got reply transaction with no transaction stack [ 840.373201] binder: 5512:5522 transaction failed 29201/-71, size 0-0 line 2927 [ 840.412078] binder: 5524:5528 got transaction to invalid handle [ 840.412086] binder: 5524:5528 transaction failed 29201/-22, size 72-24 line 3011 [ 840.412218] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.412255] binder: 5524:5528 transaction failed 29189/-3, size 0-0 line 3134 [ 840.412381] binder: 5524:5528 unknown command 109446913 [ 840.412387] binder: 5524:5528 ioctl c0306201 20004000 returned -22 [ 840.413336] binder: 5524:5528 got reply transaction with no transaction stack [ 840.413342] binder: 5524:5528 transaction failed 29201/-71, size 0-0 line 2927 [ 840.425038] binder: BINDER_SET_CONTEXT_MGR already set [ 840.425044] binder: 5525:5529 ioctl 40046207 0 returned -16 [ 840.425121] binder: 5525:5529 got transaction to invalid handle [ 840.425128] binder: 5525:5529 transaction failed 29201/-22, size 72-24 line 3011 [ 840.425256] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.425292] binder: 5525:5529 transaction failed 29189/-3, size 0-0 line 3134 [ 840.425414] binder: 5525:5529 unknown command 109446913 [ 840.425420] binder: 5525:5529 ioctl c0306201 20004000 returned -22 [ 840.428572] binder: BINDER_SET_CONTEXT_MGR already set [ 840.428578] binder: 5523:5531 ioctl 40046207 0 returned -16 [ 840.428656] binder: 5523:5531 got transaction to invalid handle [ 840.428662] binder: 5523:5531 transaction failed 29201/-22, size 72-24 line 3011 [ 840.428836] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.428871] binder: 5523:5531 transaction failed 29189/-3, size 0-0 line 3134 [ 840.429438] binder: 5523:5531 unknown command 109446913 [ 840.429444] binder: 5523:5531 ioctl c0306201 20004000 returned -22 [ 840.431158] binder: BINDER_SET_CONTEXT_MGR already set [ 840.431164] binder: 5526:5530 ioctl 40046207 0 returned -16 [ 840.431646] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.431686] binder: 5526:5530 transaction failed 29189/-3, size 32-16 line 3134 [ 840.431812] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.431846] binder: 5526:5530 transaction failed 29189/-3, size 0-0 line 3134 [ 840.431953] binder: 5526:5530 unknown command 109446913 [ 840.431959] binder: 5526:5530 ioctl c0306201 20004000 returned -22 [ 840.432869] binder: 5526:5530 got reply transaction with no transaction stack [ 840.432875] binder: 5526:5530 transaction failed 29201/-71, size 0-0 line 2927 [ 840.439906] binder: BINDER_SET_CONTEXT_MGR already set [ 840.439912] binder: 5527:5534 ioctl 40046207 0 returned -16 [ 840.440797] binder: 5527:5534 got transaction to invalid handle [ 840.440804] binder: 5527:5534 transaction failed 29201/-22, size 72-24 line 3011 [ 840.440932] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.440966] binder: 5527:5534 transaction failed 29189/-3, size 0-0 line 3134 [ 840.444810] binder: 5527:5534 unknown command 109446913 [ 840.444817] binder: 5527:5534 ioctl c0306201 20004000 returned -22 [ 840.460633] binder: BINDER_SET_CONTEXT_MGR already set [ 840.460641] binder: 5532:5538 ioctl 40046207 0 returned -16 [ 840.460777] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.460831] binder: 5532:5538 transaction failed 29189/-3, size 32-16 line 3134 [ 840.460979] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.461013] binder: 5532:5538 transaction failed 29189/-3, size 0-0 line 3134 [ 840.463503] binder: 5532:5538 unknown command 109446913 [ 840.463509] binder: 5532:5538 ioctl c0306201 20004000 returned -22 [ 840.468062] binder: 5532:5538 got reply transaction with no transaction stack [ 840.468069] binder: 5532:5538 transaction failed 29201/-71, size 0-0 line 2927 [ 840.494096] binder: BINDER_SET_CONTEXT_MGR already set [ 840.494103] binder: 5533:5542 ioctl 40046207 0 returned -16 [ 840.498930] binder: 5533:5542 got transaction to invalid handle [ 840.498938] binder: 5533:5542 transaction failed 29201/-22, size 72-24 line 3011 [ 840.501315] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.501351] binder: 5533:5542 transaction failed 29189/-3, size 0-0 line 3134 [ 840.501807] binder: 5540:5543 got transaction to invalid handle [ 840.501814] binder: 5540:5543 transaction failed 29201/-22, size 72-24 line 3011 [ 840.501936] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.501974] binder: 5540:5543 transaction failed 29189/-3, size 0-0 line 3134 [ 840.502178] binder: 5540:5543 unknown command 109446913 [ 840.502184] binder: 5540:5543 ioctl c0306201 20004000 returned -22 [ 840.504447] binder: 5540:5543 got reply transaction with no transaction stack [ 840.504453] binder: 5540:5543 transaction failed 29201/-71, size 0-0 line 2927 [ 840.505563] binder: 5533:5539 unknown command -393869567 [ 840.505570] binder: 5533:5539 ioctl c0306201 20004000 returned -22 [ 840.506289] binder: 5533:5539 got reply transaction with no transaction stack [ 840.506295] binder: 5533:5539 transaction failed 29201/-71, size 0-0 line 2927 [ 840.530109] binder: BINDER_SET_CONTEXT_MGR already set [ 840.530116] binder: 5544:5545 ioctl 40046207 0 returned -16 [ 840.530305] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.530343] binder: 5544:5545 transaction failed 29189/-3, size 0-0 line 3134 [ 840.530511] binder: 5544:5545 unknown command 109446913 [ 840.530517] binder: 5544:5545 ioctl c0306201 20004000 returned -22 [ 840.531170] binder: 5544:5545 got reply transaction with no transaction stack [ 840.531176] binder: 5544:5545 transaction failed 29201/-71, size 0-0 line 2927 [ 840.574706] binder: BINDER_SET_CONTEXT_MGR already set [ 840.574713] binder: 5548:5557 ioctl 40046207 0 returned -16 [ 840.575190] binder: BINDER_SET_CONTEXT_MGR already set [ 840.575196] binder: 5549:5556 ioctl 40046207 0 returned -16 [ 840.575559] binder: 5548:5557 got transaction to invalid handle [ 840.575566] binder: 5548:5557 transaction failed 29201/-22, size 72-24 line 3011 [ 840.575762] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.575800] binder: 5549:5556 transaction failed 29189/-3, size 32-16 line 3134 [ 840.576105] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.576140] binder: 5549:5556 transaction failed 29189/-3, size 0-0 line 3134 [ 840.576300] binder: BINDER_SET_CONTEXT_MGR already set [ 840.576306] binder: 5547:5558 ioctl 40046207 0 returned -16 [ 840.576491] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.576647] binder: 5548:5557 transaction failed 29189/-3, size 0-0 line 3134 [ 840.576824] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.576857] binder: 5551:5554 transaction failed 29189/-3, size 32-16 line 3134 [ 840.577042] binder: 5547:5558 got transaction to invalid handle [ 840.577049] binder: 5547:5558 transaction failed 29201/-22, size 72-24 line 3011 [ 840.577279] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.577314] binder: 5551:5554 transaction failed 29189/-3, size 0-0 line 3134 [ 840.577380] binder: 5549:5556 unknown command 109446913 [ 840.577386] binder: 5549:5556 ioctl c0306201 20004000 returned -22 [ 840.577523] binder: 5552:5553 got transaction to invalid handle [ 840.577529] binder: 5552:5553 transaction failed 29201/-22, size 72-24 line 3011 [ 840.577778] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.577812] binder: 5547:5558 transaction failed 29189/-3, size 0-0 line 3134 [ 840.577923] binder: 5548:5557 unknown command 109446913 [ 840.577929] binder: 5548:5557 ioctl c0306201 20004000 returned -22 [ 840.578869] binder: 5549:5556 got reply transaction with no transaction stack [ 840.578876] binder: 5549:5556 transaction failed 29201/-71, size 0-0 line 2927 [ 840.579054] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.579088] binder: 5552:5553 transaction failed 29189/-3, size 0-0 line 3134 [ 840.579207] binder: 5551:5554 unknown command 109446913 [ 840.579213] binder: 5551:5554 ioctl c0306201 20004000 returned -22 [ 840.579311] binder: 5547:5558 unknown command 109446913 [ 840.579317] binder: 5547:5558 ioctl c0306201 20004000 returned -22 [ 840.580162] binder: 5551:5554 got reply transaction with no transaction stack [ 840.580168] binder: 5551:5554 transaction failed 29201/-71, size 0-0 line 2927 [ 840.581174] binder: 5552:5553 unknown command 109446913 [ 840.581180] binder: 5552:5553 ioctl c0306201 20004000 returned -22 [ 840.583531] binder: 5552:5553 got reply transaction with no transaction stack [ 840.583540] binder: 5552:5553 transaction failed 29201/-71, size 0-0 line 2927 [ 840.603166] binder: BINDER_SET_CONTEXT_MGR already set [ 840.603172] binder: 5546:5559 ioctl 40046207 0 returned -16 [ 840.603940] binder: 5546:5559 got transaction to invalid handle [ 840.603947] binder: 5546:5559 transaction failed 29201/-22, size 72-24 line 3011 [ 840.604230] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.604268] binder: 5546:5559 transaction failed 29189/-3, size 0-0 line 3134 [ 840.611537] binder: 5546:5559 unknown command 109446913 [ 840.611544] binder: 5546:5559 ioctl c0306201 20004000 returned -22 [ 840.621200] binder: BINDER_SET_CONTEXT_MGR already set [ 840.621208] binder: 5550:5561 ioctl 40046207 0 returned -16 [ 840.656846] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.656888] binder: 5550:5561 transaction failed 29189/-3, size 0-0 line 3134 [ 840.657020] binder: 5550:5563 got transaction to invalid handle [ 840.657028] binder: 5550:5563 transaction failed 29201/-22, size 72-24 line 3011 [ 840.659289] binder: 5550:5561 unknown command -393869567 [ 840.659297] binder: 5550:5561 ioctl c0306201 20004000 returned -22 [ 840.661236] binder: 5550:5561 got reply transaction with no transaction stack [ 840.661243] binder: 5550:5561 transaction failed 29201/-71, size 0-0 line 2927 [ 840.687541] binder: 5562:5565 got transaction to invalid handle [ 840.687548] binder: 5562:5565 transaction failed 29201/-22, size 72-24 line 3011 [ 840.687722] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.687760] binder: 5562:5565 transaction failed 29189/-3, size 0-0 line 3134 [ 840.687887] binder: 5562:5565 unknown command 109446913 [ 840.687893] binder: 5562:5565 ioctl c0306201 20004000 returned -22 [ 840.688765] binder: 5562:5565 got reply transaction with no transaction stack [ 840.688771] binder: 5562:5565 transaction failed 29201/-71, size 0-0 line 2927 [ 840.698550] binder: BINDER_SET_CONTEXT_MGR already set [ 840.698557] binder: 5566:5570 ioctl 40046207 0 returned -16 [ 840.698636] binder: 5566:5570 got transaction to invalid handle [ 840.698643] binder: 5566:5570 transaction failed 29201/-22, size 72-24 line 3011 [ 840.699549] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.699586] binder: 5566:5570 transaction failed 29189/-3, size 0-0 line 3134 [ 840.699834] binder: 5566:5570 unknown command 109446913 [ 840.699840] binder: 5566:5570 ioctl c0306201 20004000 returned -22 [ 840.709742] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.709778] binder: 5568:5573 transaction failed 29189/-3, size 32-16 line 3134 [ 840.709910] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.709945] binder: 5568:5573 transaction failed 29189/-3, size 0-0 line 3134 [ 840.710643] binder: 5568:5573 unknown command 109446913 [ 840.710650] binder: 5568:5573 ioctl c0306201 20004000 returned -22 [ 840.711668] binder: 5568:5573 got reply transaction with no transaction stack [ 840.711675] binder: 5568:5573 transaction failed 29201/-71, size 0-0 line 2927 [ 840.716220] binder: BINDER_SET_CONTEXT_MGR already set [ 840.716227] binder: 5564:5574 ioctl 40046207 0 returned -16 [ 840.716309] binder: 5564:5574 got transaction to invalid handle [ 840.716316] binder: 5564:5574 transaction failed 29201/-22, size 72-24 line 3011 [ 840.716695] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.716733] binder: 5564:5574 transaction failed 29189/-3, size 0-0 line 3134 [ 840.718717] binder: BINDER_SET_CONTEXT_MGR already set [ 840.718723] binder: 5567:5571 ioctl 40046207 0 returned -16 [ 840.718851] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.718886] binder: 5567:5571 transaction failed 29189/-3, size 32-16 line 3134 [ 840.719053] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.719087] binder: 5567:5571 transaction failed 29189/-3, size 0-0 line 3134 [ 840.719325] binder: 5567:5571 unknown command 109446913 [ 840.719331] binder: 5567:5571 ioctl c0306201 20004000 returned -22 [ 840.720033] binder: 5567:5571 got reply transaction with no transaction stack [ 840.720040] binder: 5567:5571 transaction failed 29201/-71, size 0-0 line 2927 [ 840.720434] binder: 5564:5574 unknown command 109446913 [ 840.720441] binder: 5564:5574 ioctl c0306201 20004000 returned -22 [ 840.746358] binder: BINDER_SET_CONTEXT_MGR already set [ 840.746364] binder: 5572:5577 ioctl 40046207 0 returned -16 [ 840.746443] binder: 5572:5577 got transaction to invalid handle [ 840.746451] binder: 5572:5577 transaction failed 29201/-22, size 72-24 line 3011 [ 840.750467] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.750506] binder: 5572:5577 transaction failed 29189/-3, size 0-0 line 3134 [ 840.753468] binder: 5572:5577 unknown command 109446913 [ 840.753475] binder: 5572:5577 ioctl c0306201 20004000 returned -22 [ 840.787790] binder: 5579:5581 got transaction to invalid handle [ 840.787798] binder: 5579:5581 transaction failed 29201/-22, size 72-24 line 3011 [ 840.788524] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.788563] binder: 5579:5581 transaction failed 29189/-3, size 0-0 line 3134 [ 840.788682] binder: 5579:5581 unknown command 109446913 [ 840.788688] binder: 5579:5581 ioctl c0306201 20004000 returned -22 [ 840.789325] binder: 5579:5581 got reply transaction with no transaction stack [ 840.789331] binder: 5579:5581 transaction failed 29201/-71, size 0-0 line 2927 [ 840.793994] binder: BINDER_SET_CONTEXT_MGR already set [ 840.794002] binder: 5576:5582 ioctl 40046207 0 returned -16 [ 840.795264] binder: 5576:5578 got transaction to invalid handle [ 840.795271] binder: 5576:5578 transaction failed 29201/-22, size 72-24 line 3011 [ 840.795444] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.795481] binder: 5576:5578 transaction failed 29189/-3, size 0-0 line 3134 [ 840.795607] binder: 5576:5578 unknown command -393869567 [ 840.795613] binder: 5576:5578 ioctl c0306201 20004000 returned -22 [ 840.796137] binder: 5576:5578 got reply transaction with no transaction stack [ 840.796143] binder: 5576:5578 transaction failed 29201/-71, size 0-0 line 2927 [ 840.815777] binder: BINDER_SET_CONTEXT_MGR already set [ 840.815784] binder: 5583:5584 ioctl 40046207 0 returned -16 [ 840.815971] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.816009] binder: 5583:5584 transaction failed 29189/-3, size 0-0 line 3134 [ 840.816133] binder: 5583:5584 unknown command 109446913 [ 840.816139] binder: 5583:5584 ioctl c0306201 20004000 returned -22 [ 840.816835] binder: 5583:5584 got reply transaction with no transaction stack [ 840.816841] binder: 5583:5584 transaction failed 29201/-71, size 0-0 line 2927 [ 840.859749] binder: BINDER_SET_CONTEXT_MGR already set [ 840.859757] binder: 5587:5597 ioctl 40046207 0 returned -16 [ 840.859937] binder: 5587:5597 got transaction to invalid handle [ 840.859944] binder: 5587:5597 transaction failed 29201/-22, size 72-24 line 3011 [ 840.860021] binder: BINDER_SET_CONTEXT_MGR already set [ 840.860027] binder: 5588:5595 ioctl 40046207 0 returned -16 [ 840.860293] binder: 5590:5593 got transaction to invalid handle [ 840.860300] binder: 5590:5593 transaction failed 29201/-22, size 72-24 line 3011 [ 840.860387] binder: 5588:5595 got transaction to invalid handle [ 840.860393] binder: 5588:5595 transaction failed 29201/-22, size 72-24 line 3011 [ 840.860636] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.860678] binder: 5587:5597 transaction failed 29189/-3, size 0-0 line 3134 [ 840.860850] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.860885] binder: 5590:5593 transaction failed 29189/-3, size 0-0 line 3134 [ 840.861193] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.861227] binder: 5588:5595 transaction failed 29189/-3, size 0-0 line 3134 [ 840.861466] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.861501] binder: 5589:5594 transaction failed 29189/-3, size 32-16 line 3134 [ 840.862929] binder: 5588:5595 unknown command 109446913 [ 840.862936] binder: 5588:5595 ioctl c0306201 20004000 returned -22 [ 840.863066] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.863101] binder: 5589:5594 transaction failed 29189/-3, size 0-0 line 3134 [ 840.863242] binder: 5587:5597 unknown command 109446913 [ 840.863248] binder: 5587:5597 ioctl c0306201 20004000 returned -22 [ 840.863317] binder: 5590:5593 unknown command 109446913 [ 840.863327] binder: 5590:5593 ioctl c0306201 20004000 returned -22 [ 840.865294] binder: 5590:5593 got reply transaction with no transaction stack [ 840.865300] binder: 5590:5593 transaction failed 29201/-71, size 0-0 line 2927 [ 840.865421] binder: 5589:5594 unknown command 109446913 [ 840.865427] binder: 5589:5594 ioctl c0306201 20004000 returned -22 [ 840.866353] binder: 5589:5594 got reply transaction with no transaction stack [ 840.866360] binder: 5589:5594 transaction failed 29201/-71, size 0-0 line 2927 [ 840.866514] binder: BINDER_SET_CONTEXT_MGR already set [ 840.866520] binder: 5586:5596 ioctl 40046207 0 returned -16 [ 840.866636] binder: 5586:5596 got transaction to invalid handle [ 840.866643] binder: 5586:5596 transaction failed 29201/-22, size 72-24 line 3011 [ 840.867598] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.867633] binder: 5586:5596 transaction failed 29189/-3, size 0-0 line 3134 [ 840.867837] binder: 5586:5596 unknown command 109446913 [ 840.867843] binder: 5586:5596 ioctl c0306201 20004000 returned -22 [ 840.893281] binder: BINDER_SET_CONTEXT_MGR already set [ 840.893288] binder: 5585:5598 ioctl 40046207 0 returned -16 [ 840.898064] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.898102] binder: 5585:5598 transaction failed 29189/-3, size 32-16 line 3134 [ 840.901985] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.902022] binder: 5585:5598 transaction failed 29189/-3, size 0-0 line 3134 [ 840.902141] binder: 5585:5598 unknown command 109446913 [ 840.902147] binder: 5585:5598 ioctl c0306201 20004000 returned -22 [ 840.903009] binder: 5585:5598 got reply transaction with no transaction stack [ 840.903015] binder: 5585:5598 transaction failed 29201/-71, size 0-0 line 2927 [ 840.912334] binder: BINDER_SET_CONTEXT_MGR already set [ 840.912342] binder: 5591:5601 ioctl 40046207 0 returned -16 [ 840.922242] binder: 5591:5602 got transaction to invalid handle [ 840.922250] binder: 5591:5602 transaction failed 29201/-22, size 72-24 line 3011 [ 840.940885] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.940925] binder: 5591:5601 transaction failed 29189/-3, size 0-0 line 3134 [ 840.943350] binder: 5591:5601 unknown command -393869567 [ 840.943357] binder: 5591:5601 ioctl c0306201 20004000 returned -22 [ 840.951309] binder: 5591:5601 got reply transaction with no transaction stack [ 840.951316] binder: 5591:5601 transaction failed 29201/-71, size 0-0 line 2927 [ 840.964865] binder: BINDER_SET_CONTEXT_MGR already set [ 840.964872] binder: 5600:5603 ioctl 40046207 0 returned -16 [ 840.964948] binder: 5600:5603 got transaction to invalid handle [ 840.964955] binder: 5600:5603 transaction failed 29201/-22, size 72-24 line 3011 [ 840.965083] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.965121] binder: 5600:5603 transaction failed 29189/-3, size 0-0 line 3134 [ 840.965230] binder: 5600:5603 unknown command 109446913 [ 840.965236] binder: 5600:5603 ioctl c0306201 20004000 returned -22 [ 840.990073] binder: BINDER_SET_CONTEXT_MGR already set [ 840.990080] binder: 5606:5614 ioctl 40046207 0 returned -16 [ 840.990144] binder: BINDER_SET_CONTEXT_MGR already set [ 840.990149] binder: 5604:5610 ioctl 40046207 0 returned -16 [ 840.990230] binder: 5606:5614 got transaction to invalid handle [ 840.990237] binder: 5606:5614 transaction failed 29201/-22, size 72-24 line 3011 [ 840.990325] binder: 5604:5610 got transaction to invalid handle [ 840.990331] binder: 5604:5610 transaction failed 29201/-22, size 72-24 line 3011 [ 840.990459] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.990497] binder: 5606:5614 transaction failed 29189/-3, size 0-0 line 3134 [ 840.990618] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.990652] binder: 5604:5610 transaction failed 29189/-3, size 0-0 line 3134 [ 840.991020] binder: 5606:5614 unknown command 109446913 [ 840.991026] binder: 5606:5614 ioctl c0306201 20004000 returned -22 [ 840.991794] binder: 5604:5610 unknown command 109446913 [ 840.991800] binder: 5604:5610 ioctl c0306201 20004000 returned -22 [ 840.998986] binder: 5607:5611 got transaction to invalid handle [ 840.998994] binder: 5607:5611 transaction failed 29201/-22, size 72-24 line 3011 [ 840.999169] binder_alloc: 5895: binder_alloc_buf, no vma [ 840.999207] binder: 5607:5611 transaction failed 29189/-3, size 0-0 line 3134 [ 840.999417] binder: BINDER_SET_CONTEXT_MGR already set [ 840.999423] binder: 5605:5613 ioctl 40046207 0 returned -16 [ 840.999603] binder: 5607:5611 unknown command 109446913 [ 840.999609] binder: 5607:5611 ioctl c0306201 20004000 returned -22 [ 841.000435] binder: 5607:5611 got reply transaction with no transaction stack [ 841.000442] binder: 5607:5611 transaction failed 29201/-71, size 0-0 line 2927 [ 841.000565] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.000672] binder: 5605:5613 transaction failed 29189/-3, size 0-0 line 3134 [ 841.000939] binder: 5605:5613 unknown command 109446913 [ 841.000945] binder: 5605:5613 ioctl c0306201 20004000 returned -22 [ 841.001597] binder: 5605:5613 got reply transaction with no transaction stack [ 841.001604] binder: 5605:5613 transaction failed 29201/-71, size 0-0 line 2927 [ 841.020707] binder: BINDER_SET_CONTEXT_MGR already set [ 841.020714] binder: 5609:5616 ioctl 40046207 0 returned -16 [ 841.020910] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.020948] binder: 5609:5616 transaction failed 29189/-3, size 32-16 line 3134 [ 841.026412] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.026451] binder: 5609:5616 transaction failed 29189/-3, size 0-0 line 3134 [ 841.026575] binder: 5609:5616 unknown command 109446913 [ 841.026581] binder: 5609:5616 ioctl c0306201 20004000 returned -22 [ 841.027210] binder: 5609:5616 got reply transaction with no transaction stack [ 841.027216] binder: 5609:5616 transaction failed 29201/-71, size 0-0 line 2927 [ 841.064008] binder: BINDER_SET_CONTEXT_MGR already set [ 841.064014] binder: 5620:5622 ioctl 40046207 0 returned -16 [ 841.064092] binder: 5620:5622 got transaction to invalid handle [ 841.064099] binder: 5620:5622 transaction failed 29201/-22, size 72-24 line 3011 [ 841.064229] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.064267] binder: 5620:5622 transaction failed 29189/-3, size 0-0 line 3134 [ 841.064647] binder: 5620:5622 unknown command 109446913 [ 841.064658] binder: 5620:5622 ioctl c0306201 20004000 returned -22 [ 841.074068] binder: BINDER_SET_CONTEXT_MGR already set [ 841.074077] binder: 5615:5621 ioctl 40046207 0 returned -16 [ 841.075256] binder: 5615:5621 got transaction to invalid handle [ 841.075264] binder: 5615:5621 transaction failed 29201/-22, size 72-24 line 3011 [ 841.081069] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.081109] binder: 5615:5621 transaction failed 29189/-3, size 0-0 line 3134 [ 841.082470] binder: 5615:5619 unknown command -393869567 [ 841.082477] binder: 5615:5619 ioctl c0306201 20004000 returned -22 [ 841.083194] binder: 5615:5619 got reply transaction with no transaction stack [ 841.083200] binder: 5615:5619 transaction failed 29201/-71, size 0-0 line 2927 [ 841.097839] binder: BINDER_SET_CONTEXT_MGR already set [ 841.097845] binder: 5624:5625 ioctl 40046207 0 returned -16 [ 841.098035] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.098072] binder: 5624:5625 transaction failed 29189/-3, size 0-0 line 3134 [ 841.098197] binder: 5624:5625 unknown command 109446913 [ 841.098203] binder: 5624:5625 ioctl c0306201 20004000 returned -22 [ 841.098896] binder: 5624:5625 got reply transaction with no transaction stack [ 841.098902] binder: 5624:5625 transaction failed 29201/-71, size 0-0 line 2927 [ 841.141414] binder: 5627:5637 got transaction to invalid handle [ 841.141421] binder: 5627:5637 transaction failed 29201/-22, size 72-24 line 3011 [ 841.142043] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.142082] binder: 5627:5637 transaction failed 29189/-3, size 0-0 line 3134 [ 841.142330] binder: BINDER_SET_CONTEXT_MGR already set [ 841.142336] binder: 5628:5638 ioctl 40046207 0 returned -16 [ 841.143428] binder: BINDER_SET_CONTEXT_MGR already set [ 841.143434] binder: 5629:5636 ioctl 40046207 0 returned -16 [ 841.143579] binder: 5628:5638 got transaction to invalid handle [ 841.143586] binder: 5628:5638 transaction failed 29201/-22, size 72-24 line 3011 [ 841.143907] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.143943] binder: 5629:5636 transaction failed 29189/-3, size 32-16 line 3134 [ 841.144071] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.144104] binder: 5628:5638 transaction failed 29189/-3, size 0-0 line 3134 [ 841.144182] binder: 5627:5637 unknown command 109446913 [ 841.144189] binder: 5627:5637 ioctl c0306201 20004000 returned -22 [ 841.144307] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.144341] binder: 5629:5636 transaction failed 29189/-3, size 0-0 line 3134 [ 841.145336] binder: 5627:5637 got reply transaction with no transaction stack [ 841.145342] binder: 5627:5637 transaction failed 29201/-71, size 0-0 line 2927 [ 841.146160] binder: 5628:5638 unknown command 109446913 [ 841.146167] binder: 5628:5638 ioctl c0306201 20004000 returned -22 [ 841.146218] binder: 5629:5636 unknown command 109446913 [ 841.146224] binder: 5629:5636 ioctl c0306201 20004000 returned -22 [ 841.148147] binder: 5629:5636 got reply transaction with no transaction stack [ 841.148153] binder: 5629:5636 transaction failed 29201/-71, size 0-0 line 2927 [ 841.148814] binder: BINDER_SET_CONTEXT_MGR already set [ 841.148820] binder: 5630:5635 ioctl 40046207 0 returned -16 [ 841.149055] binder: 5630:5635 got transaction to invalid handle [ 841.149061] binder: 5630:5635 transaction failed 29201/-22, size 72-24 line 3011 [ 841.149801] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.149879] binder: 5630:5635 transaction failed 29189/-3, size 0-0 line 3134 [ 841.149997] binder: BINDER_SET_CONTEXT_MGR already set [ 841.150003] binder: 5631:5634 ioctl 40046207 0 returned -16 [ 841.150204] binder: 5631:5634 got transaction to invalid handle [ 841.150210] binder: 5631:5634 transaction failed 29201/-22, size 72-24 line 3011 [ 841.151570] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.151607] binder: 5631:5634 transaction failed 29189/-3, size 0-0 line 3134 [ 841.151723] binder: 5630:5635 unknown command 109446913 [ 841.151729] binder: 5630:5635 ioctl c0306201 20004000 returned -22 [ 841.152838] binder: 5631:5634 unknown command 109446913 [ 841.152844] binder: 5631:5634 ioctl c0306201 20004000 returned -22 [ 841.167833] binder: BINDER_SET_CONTEXT_MGR already set [ 841.167842] binder: 5626:5639 ioctl 40046207 0 returned -16 [ 841.168097] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.168136] binder: 5626:5639 transaction failed 29189/-3, size 0-0 line 3134 [ 841.175730] binder: 5626:5639 unknown command 109446913 [ 841.175739] binder: 5626:5639 ioctl c0306201 20004000 returned -22 [ 841.176514] binder: 5626:5639 got reply transaction with no transaction stack [ 841.176524] binder: 5626:5639 transaction failed 29201/-71, size 0-0 line 2927 [ 841.194321] binder: BINDER_SET_CONTEXT_MGR already set [ 841.194328] binder: 5632:5641 ioctl 40046207 0 returned -16 [ 841.201239] binder: 5632:5641 got transaction to invalid handle [ 841.201248] binder: 5632:5641 transaction failed 29201/-22, size 72-24 line 3011 [ 841.211437] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.211477] binder: 5632:5641 transaction failed 29189/-3, size 0-0 line 3134 [ 841.225196] binder: 5632:5641 unknown command -393869567 [ 841.225204] binder: 5632:5641 ioctl c0306201 20004000 returned -22 [ 841.227040] binder: 5632:5641 got reply transaction with no transaction stack [ 841.227047] binder: 5632:5641 transaction failed 29201/-71, size 0-0 line 2927 [ 841.262403] binder: BINDER_SET_CONTEXT_MGR already set [ 841.262410] binder: 5643:5647 ioctl 40046207 0 returned -16 [ 841.262491] binder: 5643:5647 got transaction to invalid handle [ 841.262498] binder: 5643:5647 transaction failed 29201/-22, size 72-24 line 3011 [ 841.263421] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.263459] binder: 5643:5647 transaction failed 29189/-3, size 0-0 line 3134 [ 841.263624] binder: 5643:5647 unknown command 109446913 [ 841.263630] binder: 5643:5647 ioctl c0306201 20004000 returned -22 [ 841.276286] binder: BINDER_SET_CONTEXT_MGR already set [ 841.276293] binder: 5642:5649 ioctl 40046207 0 returned -16 [ 841.276529] binder: 5642:5649 got transaction to invalid handle [ 841.276536] binder: 5642:5649 transaction failed 29201/-22, size 72-24 line 3011 [ 841.276675] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.276712] binder: 5642:5649 transaction failed 29189/-3, size 0-0 line 3134 [ 841.276875] binder: 5642:5649 unknown command 109446913 [ 841.276881] binder: 5642:5649 ioctl c0306201 20004000 returned -22 [ 841.284033] binder: BINDER_SET_CONTEXT_MGR already set [ 841.284039] binder: 5648:5654 ioctl 40046207 0 returned -16 [ 841.284105] binder: BINDER_SET_CONTEXT_MGR already set [ 841.284110] binder: 5645:5651 ioctl 40046207 0 returned -16 [ 841.284242] binder: 5645:5651 got transaction to invalid handle [ 841.284249] binder: 5645:5651 transaction failed 29201/-22, size 72-24 line 3011 [ 841.284382] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.284419] binder: 5648:5654 transaction failed 29189/-3, size 0-0 line 3134 [ 841.284720] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.284753] binder: 5645:5651 transaction failed 29189/-3, size 0-0 line 3134 [ 841.285005] binder: 5645:5651 unknown command 109446913 [ 841.285011] binder: 5645:5651 ioctl c0306201 20004000 returned -22 [ 841.285080] binder: 5648:5654 unknown command 109446913 [ 841.285086] binder: 5648:5654 ioctl c0306201 20004000 returned -22 [ 841.285801] binder: 5648:5654 got reply transaction with no transaction stack [ 841.285807] binder: 5648:5654 transaction failed 29201/-71, size 0-0 line 2927 [ 841.287631] binder: BINDER_SET_CONTEXT_MGR already set [ 841.287637] binder: 5644:5650 ioctl 40046207 0 returned -16 [ 841.287974] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.288011] binder: 5644:5650 transaction failed 29189/-3, size 32-16 line 3134 [ 841.288142] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.288217] binder: 5644:5650 transaction failed 29189/-3, size 0-0 line 3134 [ 841.288327] binder: 5644:5650 unknown command 109446913 [ 841.288333] binder: 5644:5650 ioctl c0306201 20004000 returned -22 [ 841.289162] binder: 5644:5650 got reply transaction with no transaction stack [ 841.289168] binder: 5644:5650 transaction failed 29201/-71, size 0-0 line 2927 [ 841.297183] binder: 5646:5652 got transaction to invalid handle [ 841.297190] binder: 5646:5652 transaction failed 29201/-22, size 72-24 line 3011 [ 841.297318] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.297354] binder: 5646:5652 transaction failed 29189/-3, size 0-0 line 3134 [ 841.297480] binder: 5646:5652 unknown command 109446913 [ 841.297486] binder: 5646:5652 ioctl c0306201 20004000 returned -22 [ 841.298422] binder: 5646:5652 got reply transaction with no transaction stack [ 841.298428] binder: 5646:5652 transaction failed 29201/-71, size 0-0 line 2927 [ 841.350884] binder: BINDER_SET_CONTEXT_MGR already set [ 841.350893] binder: 5653:5659 ioctl 40046207 0 returned -16 [ 841.352074] binder: 5653:5659 got transaction to invalid handle [ 841.352082] binder: 5653:5659 transaction failed 29201/-22, size 72-24 line 3011 [ 841.354731] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.354770] binder: 5653:5659 transaction failed 29189/-3, size 0-0 line 3134 [ 841.356860] binder: BINDER_SET_CONTEXT_MGR already set [ 841.356867] binder: 5660:5662 ioctl 40046207 0 returned -16 [ 841.356933] binder: 5660:5662 got transaction to invalid handle [ 841.356939] binder: 5660:5662 transaction failed 29201/-22, size 72-24 line 3011 [ 841.357104] binder: 5653:5659 unknown command -393869567 [ 841.357110] binder: 5653:5659 ioctl c0306201 20004000 returned -22 [ 841.357154] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.357190] binder: 5660:5662 transaction failed 29189/-3, size 0-0 line 3134 [ 841.357295] binder: 5660:5662 unknown command 109446913 [ 841.357301] binder: 5660:5662 ioctl c0306201 20004000 returned -22 [ 841.358881] binder: 5653:5659 got reply transaction with no transaction stack [ 841.358887] binder: 5653:5659 transaction failed 29201/-71, size 0-0 line 2927 [ 841.385176] binder: BINDER_SET_CONTEXT_MGR already set [ 841.385183] binder: 5663:5664 ioctl 40046207 0 returned -16 [ 841.385357] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.385396] binder: 5663:5664 transaction failed 29189/-3, size 40-24 line 3134 [ 841.385525] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.385560] binder: 5663:5664 transaction failed 29189/-3, size 0-0 line 3134 [ 841.385672] binder: 5663:5664 unknown command 109446913 [ 841.385678] binder: 5663:5664 ioctl c0306201 20004000 returned -22 [ 841.386418] binder: 5663:5664 got reply transaction with no transaction stack [ 841.386424] binder: 5663:5664 transaction failed 29201/-71, size 0-0 line 2927 [ 841.430965] binder: 5670:5673 got transaction to invalid handle [ 841.430973] binder: 5670:5673 transaction failed 29201/-22, size 72-24 line 3011 [ 841.431447] binder: BINDER_SET_CONTEXT_MGR already set [ 841.431453] binder: 5667:5676 ioctl 40046207 0 returned -16 [ 841.431648] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.431726] binder: 5670:5673 transaction failed 29189/-3, size 0-0 line 3134 [ 841.432003] binder: 5667:5676 got transaction to invalid handle [ 841.432010] binder: 5667:5676 transaction failed 29201/-22, size 72-24 line 3011 [ 841.432125] binder: BINDER_SET_CONTEXT_MGR already set [ 841.432131] binder: 5668:5677 ioctl 40046207 0 returned -16 [ 841.433014] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.433051] binder: 5667:5676 transaction failed 29189/-3, size 0-0 line 3134 [ 841.433130] binder: BINDER_SET_CONTEXT_MGR already set [ 841.433135] binder: 5671:5672 ioctl 40046207 0 returned -16 [ 841.433423] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.433459] binder: 5668:5677 transaction failed 29189/-3, size 32-16 line 3134 [ 841.433589] binder: 5670:5673 unknown command 109446913 [ 841.433595] binder: 5670:5673 ioctl c0306201 20004000 returned -22 [ 841.433666] binder: BINDER_SET_CONTEXT_MGR already set [ 841.433672] binder: 5666:5675 ioctl 40046207 0 returned -16 [ 841.433752] binder: 5671:5672 got transaction to invalid handle [ 841.433758] binder: 5671:5672 transaction failed 29201/-22, size 72-24 line 3011 [ 841.433927] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.433962] binder: 5668:5677 transaction failed 29189/-3, size 0-0 line 3134 [ 841.434950] binder: 5670:5673 got reply transaction with no transaction stack [ 841.434956] binder: 5670:5673 transaction failed 29201/-71, size 0-0 line 2927 [ 841.435038] binder: 5666:5675 got transaction to invalid handle [ 841.435045] binder: 5666:5675 transaction failed 29201/-22, size 72-24 line 3011 [ 841.435261] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.435296] binder: 5671:5672 transaction failed 29189/-3, size 0-0 line 3134 [ 841.435476] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.435633] binder: 5666:5675 transaction failed 29189/-3, size 0-0 line 3134 [ 841.436077] binder: 5668:5677 unknown command 109446913 [ 841.436083] binder: 5668:5677 ioctl c0306201 20004000 returned -22 [ 841.437134] binder: 5668:5677 got reply transaction with no transaction stack [ 841.437140] binder: 5668:5677 transaction failed 29201/-71, size 0-0 line 2927 [ 841.437241] binder: 5666:5675 unknown command 109446913 [ 841.437247] binder: 5666:5675 ioctl c0306201 20004000 returned -22 [ 841.438167] binder: 5671:5672 unknown command 109446913 [ 841.438173] binder: 5671:5672 ioctl c0306201 20004000 returned -22 [ 841.439196] binder: 5667:5676 unknown command 109446913 [ 841.439202] binder: 5667:5676 ioctl c0306201 20004000 returned -22 [ 841.462872] binder: BINDER_SET_CONTEXT_MGR already set [ 841.462880] binder: 5665:5678 ioctl 40046207 0 returned -16 [ 841.463292] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.463330] binder: 5665:5678 transaction failed 29189/-3, size 0-0 line 3134 [ 841.463936] binder: 5665:5678 unknown command 109446913 [ 841.463942] binder: 5665:5678 ioctl c0306201 20004000 returned -22 [ 841.464695] binder: 5665:5678 got reply transaction with no transaction stack [ 841.464702] binder: 5665:5678 transaction failed 29201/-71, size 0-0 line 2927 [ 841.471667] binder: BINDER_SET_CONTEXT_MGR already set [ 841.471675] binder: 5669:5680 ioctl 40046207 0 returned -16 [ 841.474016] binder: 5669:5680 got transaction to invalid handle [ 841.474024] binder: 5669:5680 transaction failed 29201/-22, size 72-24 line 3011 [ 841.482180] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.482219] binder: 5669:5680 transaction failed 29189/-3, size 0-0 line 3134 [ 841.491885] binder: 5669:5680 unknown command -393869567 [ 841.491893] binder: 5669:5680 ioctl c0306201 20004000 returned -22 [ 841.505249] binder: 5669:5680 got reply transaction with no transaction stack [ 841.505257] binder: 5669:5680 transaction failed 29201/-71, size 0-0 line 2927 [ 841.553996] binder: BINDER_SET_CONTEXT_MGR already set [ 841.554003] binder: 5682:5687 ioctl 40046207 0 returned -16 [ 841.555239] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.555280] binder: 5682:5687 transaction failed 29189/-3, size 32-16 line 3134 [ 841.555779] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.555815] binder: 5682:5687 transaction failed 29189/-3, size 0-0 line 3134 [ 841.556675] binder: 5682:5687 unknown command 109446913 [ 841.556682] binder: 5682:5687 ioctl c0306201 20004000 returned -22 [ 841.557597] binder: 5682:5687 got reply transaction with no transaction stack [ 841.557603] binder: 5682:5687 transaction failed 29201/-71, size 0-0 line 2927 [ 841.557768] binder: BINDER_SET_CONTEXT_MGR already set [ 841.557773] binder: 5684:5689 ioctl 40046207 0 returned -16 [ 841.557933] binder: 5684:5689 got transaction to invalid handle [ 841.557940] binder: 5684:5689 transaction failed 29201/-22, size 72-24 line 3011 [ 841.558030] binder: BINDER_SET_CONTEXT_MGR already set [ 841.558035] binder: 5681:5690 ioctl 40046207 0 returned -16 [ 841.558399] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.558434] binder: 5684:5689 transaction failed 29189/-3, size 0-0 line 3134 [ 841.558488] binder: 5681:5690 got transaction to invalid handle [ 841.558494] binder: 5681:5690 transaction failed 29201/-22, size 72-24 line 3011 [ 841.559966] binder: 5681:5690 unknown command 109446913 [ 841.559973] binder: 5681:5690 ioctl c0306201 20004000 returned -22 [ 841.560845] binder: 5684:5689 unknown command 109446913 [ 841.560851] binder: 5684:5689 ioctl c0306201 20004000 returned -22 [ 841.569544] binder: BINDER_SET_CONTEXT_MGR already set [ 841.569551] binder: 5683:5688 ioctl 40046207 0 returned -16 [ 841.569676] binder: 5683:5688 got transaction to invalid handle [ 841.569682] binder: 5683:5688 transaction failed 29201/-22, size 72-24 line 3011 [ 841.569813] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.569850] binder: 5683:5688 transaction failed 29189/-3, size 0-0 line 3134 [ 841.574900] binder: 5685:5691 got transaction to invalid handle [ 841.574907] binder: 5685:5691 transaction failed 29201/-22, size 72-24 line 3011 [ 841.575063] binder: 5683:5688 unknown command 109446913 [ 841.575069] binder: 5683:5688 ioctl c0306201 20004000 returned -22 [ 841.575343] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.575380] binder: 5685:5691 transaction failed 29189/-3, size 0-0 line 3134 [ 841.577440] binder: 5685:5691 unknown command 109446913 [ 841.577447] binder: 5685:5691 ioctl c0306201 20004000 returned -22 [ 841.578410] binder: 5685:5691 got reply transaction with no transaction stack [ 841.578416] binder: 5685:5691 transaction failed 29201/-71, size 0-0 line 2927 [ 841.578485] binder: BINDER_SET_CONTEXT_MGR already set [ 841.578490] binder: 5686:5692 ioctl 40046207 0 returned -16 [ 841.582666] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.582704] binder: 5686:5692 transaction failed 29189/-3, size 0-0 line 3134 [ 841.583548] binder: 5686:5692 unknown command 109446913 [ 841.583554] binder: 5686:5692 ioctl c0306201 20004000 returned -22 [ 841.584284] binder: 5686:5692 got reply transaction with no transaction stack [ 841.584290] binder: 5686:5692 transaction failed 29201/-71, size 0-0 line 2927 [ 841.640915] binder: BINDER_SET_CONTEXT_MGR already set [ 841.640923] binder: 5693:5697 ioctl 40046207 0 returned -16 [ 841.642242] binder: 5693:5694 got transaction to invalid handle [ 841.642249] binder: 5693:5694 transaction failed 29201/-22, size 72-24 line 3011 [ 841.642428] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.642465] binder: 5693:5694 transaction failed 29189/-3, size 0-0 line 3134 [ 841.642654] binder: 5693:5694 unknown command -393869567 [ 841.642660] binder: 5693:5694 ioctl c0306201 20004000 returned -22 [ 841.643394] binder: 5693:5694 got reply transaction with no transaction stack [ 841.643401] binder: 5693:5694 transaction failed 29201/-71, size 0-0 line 2927 [ 841.646161] binder: BINDER_SET_CONTEXT_MGR already set [ 841.646167] binder: 5695:5698 ioctl 40046207 0 returned -16 [ 841.646287] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.646324] binder: 5695:5698 transaction failed 29189/-3, size 32-16 line 3134 [ 841.646442] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.646475] binder: 5695:5698 transaction failed 29189/-3, size 0-0 line 3134 [ 841.646563] binder: 5695:5698 unknown command 109446913 [ 841.646569] binder: 5695:5698 ioctl c0306201 20004000 returned -22 [ 841.647777] binder: 5695:5698 got reply transaction with no transaction stack [ 841.647784] binder: 5695:5698 transaction failed 29201/-71, size 0-0 line 2927 [ 841.670411] binder: BINDER_SET_CONTEXT_MGR already set [ 841.670418] binder: 5699:5700 ioctl 40046207 0 returned -16 [ 841.670552] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.670590] binder: 5699:5700 transaction failed 29189/-3, size 40-24 line 3134 [ 841.670722] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.670755] binder: 5699:5700 transaction failed 29189/-3, size 0-0 line 3134 [ 841.670867] binder: 5699:5700 unknown command 109446913 [ 841.670887] binder: 5699:5700 ioctl c0306201 20004000 returned -22 [ 841.671573] binder: 5699:5700 got reply transaction with no transaction stack [ 841.671580] binder: 5699:5700 transaction failed 29201/-71, size 0-0 line 2927 [ 841.717693] binder: BINDER_SET_CONTEXT_MGR already set [ 841.717701] binder: 5703:5713 ioctl 40046207 0 returned -16 [ 841.718025] binder: 5703:5713 got transaction to invalid handle [ 841.718032] binder: 5703:5713 transaction failed 29201/-22, size 72-24 line 3011 [ 841.718909] binder: BINDER_SET_CONTEXT_MGR already set [ 841.718915] binder: 5707:5708 ioctl 40046207 0 returned -16 [ 841.719097] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.719135] binder: 5707:5708 transaction failed 29189/-3, size 32-16 line 3134 [ 841.719296] binder: BINDER_SET_CONTEXT_MGR already set [ 841.719301] binder: 5704:5711 ioctl 40046207 0 returned -16 [ 841.719352] binder: 5703:5713 unknown command 109446913 [ 841.719358] binder: 5703:5713 ioctl c0306201 20004000 returned -22 [ 841.719477] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.719511] binder: 5707:5708 transaction failed 29189/-3, size 0-0 line 3134 [ 841.719799] binder: 5704:5711 got transaction to invalid handle [ 841.719806] binder: 5704:5711 transaction failed 29201/-22, size 72-24 line 3011 [ 841.720821] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.720895] binder: 5704:5711 transaction failed 29189/-3, size 0-0 line 3134 [ 841.720971] binder: BINDER_SET_CONTEXT_MGR already set [ 841.720977] binder: 5706:5709 ioctl 40046207 0 returned -16 [ 841.721152] binder: 5707:5708 unknown command 109446913 [ 841.721158] binder: 5707:5708 ioctl c0306201 20004000 returned -22 [ 841.722228] binder: 5707:5708 got reply transaction with no transaction stack [ 841.722234] binder: 5707:5708 transaction failed 29201/-71, size 0-0 line 2927 [ 841.722348] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.722385] binder: 5706:5709 transaction failed 29189/-3, size 0-0 line 3134 [ 841.722791] binder: 5704:5711 unknown command 109446913 [ 841.722798] binder: 5704:5711 ioctl c0306201 20004000 returned -22 [ 841.722850] binder: 5706:5709 unknown command 109446913 [ 841.722855] binder: 5706:5709 ioctl c0306201 20004000 returned -22 [ 841.724610] binder: 5706:5709 got reply transaction with no transaction stack [ 841.724616] binder: 5706:5709 transaction failed 29201/-71, size 0-0 line 2927 [ 841.725011] binder: BINDER_SET_CONTEXT_MGR already set [ 841.725017] binder: 5702:5712 ioctl 40046207 0 returned -16 [ 841.725242] binder: 5702:5712 got transaction to invalid handle [ 841.725248] binder: 5702:5712 transaction failed 29201/-22, size 72-24 line 3011 [ 841.725376] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.725476] binder: 5702:5712 transaction failed 29189/-3, size 0-0 line 3134 [ 841.726841] binder: 5702:5712 unknown command 109446913 [ 841.726847] binder: 5702:5712 ioctl c0306201 20004000 returned -22 [ 841.740043] binder: 5701:5714 got transaction to invalid handle [ 841.740051] binder: 5701:5714 transaction failed 29201/-22, size 72-24 line 3011 [ 841.740184] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.740221] binder: 5701:5714 transaction failed 29189/-3, size 0-0 line 3134 [ 841.767037] binder: BINDER_SET_CONTEXT_MGR already set [ 841.767045] binder: 5705:5716 ioctl 40046207 0 returned -16 [ 841.790806] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.790847] binder: 5705:5716 transaction failed 29189/-3, size 0-0 line 3134 [ 841.791458] binder: 5705:5718 got transaction to invalid handle [ 841.791466] binder: 5705:5718 transaction failed 29201/-22, size 72-24 line 3011 [ 841.801182] binder: 5705:5716 unknown command -393869567 [ 841.801190] binder: 5705:5716 ioctl c0306201 20004000 returned -22 [ 841.803102] binder: 5705:5716 got reply transaction with no transaction stack [ 841.803109] binder: 5705:5716 transaction failed 29201/-71, size 0-0 line 2927 [ 841.839091] binder: BINDER_SET_CONTEXT_MGR already set [ 841.839098] binder: 5717:5723 ioctl 40046207 0 returned -16 [ 841.840321] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.840361] binder: 5717:5723 transaction failed 29189/-3, size 32-16 line 3134 [ 841.840598] binder: BINDER_SET_CONTEXT_MGR already set [ 841.840604] binder: 5719:5724 ioctl 40046207 0 returned -16 [ 841.840716] binder: 5719:5724 got transaction to invalid handle [ 841.840722] binder: 5719:5724 transaction failed 29201/-22, size 72-24 line 3011 [ 841.841075] binder: 5719:5724 unknown command 109446913 [ 841.841081] binder: 5719:5724 ioctl c0306201 20004000 returned -22 [ 841.841250] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.841287] binder: 5717:5723 transaction failed 29189/-3, size 0-0 line 3134 [ 841.843108] binder: 5717:5723 unknown command 109446913 [ 841.843118] binder: 5717:5723 ioctl c0306201 20004000 returned -22 [ 841.844012] binder: 5717:5723 got reply transaction with no transaction stack [ 841.844018] binder: 5717:5723 transaction failed 29201/-71, size 0-0 line 2927 [ 841.856609] binder: BINDER_SET_CONTEXT_MGR already set [ 841.856617] binder: 5720:5726 ioctl 40046207 0 returned -16 [ 841.856705] binder: 5720:5726 got transaction to invalid handle [ 841.856712] binder: 5720:5726 transaction failed 29201/-22, size 72-24 line 3011 [ 841.856841] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.856879] binder: 5720:5726 transaction failed 29189/-3, size 0-0 line 3134 [ 841.857040] binder: 5720:5726 unknown command 109446913 [ 841.857046] binder: 5720:5726 ioctl c0306201 20004000 returned -22 [ 841.859899] binder: BINDER_SET_CONTEXT_MGR already set [ 841.859905] binder: 5721:5727 ioctl 40046207 0 returned -16 [ 841.860136] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.860174] binder: 5721:5727 transaction failed 29189/-3, size 0-16 line 3134 [ 841.860605] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.860644] binder: 5721:5727 transaction failed 29189/-3, size 0-0 line 3134 [ 841.861009] binder: 5725:5730 got transaction to invalid handle [ 841.861015] binder: 5725:5730 transaction failed 29201/-22, size 72-24 line 3011 [ 841.861188] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.861222] binder: 5725:5730 transaction failed 29189/-3, size 0-0 line 3134 [ 841.865992] binder: BINDER_SET_CONTEXT_MGR already set [ 841.865998] binder: 5722:5728 ioctl 40046207 0 returned -16 [ 841.866074] binder: 5722:5728 got transaction to invalid handle [ 841.866081] binder: 5722:5728 transaction failed 29201/-22, size 72-24 line 3011 [ 841.866327] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.866451] binder: 5722:5728 transaction failed 29189/-3, size 0-0 line 3134 [ 841.866578] binder: 5722:5728 unknown command 109446913 [ 841.866584] binder: 5722:5728 ioctl c0306201 20004000 returned -22 [ 841.867169] binder: 5721:5727 unknown command 109446913 [ 841.867176] binder: 5721:5727 ioctl c0306201 20004000 returned -22 [ 841.868785] binder: 5721:5727 got reply transaction with no transaction stack [ 841.868792] binder: 5721:5727 transaction failed 29201/-71, size 0-0 line 2927 [ 841.925701] binder: BINDER_SET_CONTEXT_MGR already set [ 841.925710] binder: 5729:5733 ioctl 40046207 0 returned -16 [ 841.926887] binder: 5729:5733 got transaction to invalid handle [ 841.926894] binder: 5729:5733 transaction failed 29201/-22, size 72-24 line 3011 [ 841.927972] binder: BINDER_SET_CONTEXT_MGR already set [ 841.927978] binder: 5734:5736 ioctl 40046207 0 returned -16 [ 841.928122] binder: 5734:5736 got transaction to invalid handle [ 841.928129] binder: 5734:5736 transaction failed 29201/-22, size 72-24 line 3011 [ 841.928253] binder: 5734:5736 unknown command 109446913 [ 841.928259] binder: 5734:5736 ioctl c0306201 20004000 returned -22 [ 841.929235] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.929272] binder: 5729:5733 transaction failed 29189/-3, size 0-0 line 3134 [ 841.930611] binder: 5729:5732 unknown command -393869567 [ 841.930617] binder: 5729:5732 ioctl c0306201 20004000 returned -22 [ 841.931344] binder: 5729:5732 got reply transaction with no transaction stack [ 841.931350] binder: 5729:5732 transaction failed 29201/-71, size 0-0 line 2927 [ 841.957867] binder: BINDER_SET_CONTEXT_MGR already set [ 841.957873] binder: 5737:5738 ioctl 40046207 0 returned -16 [ 841.958007] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.958045] binder: 5737:5738 transaction failed 29189/-3, size 40-24 line 3134 [ 841.958173] binder_alloc: 5895: binder_alloc_buf, no vma [ 841.958208] binder: 5737:5738 transaction failed 29189/-3, size 0-0 line 3134 [ 841.958355] binder: 5737:5738 unknown command 109446913 [ 841.958361] binder: 5737:5738 ioctl c0306201 20004000 returned -22 [ 841.959025] binder: 5737:5738 got reply transaction with no transaction stack [ 841.959031] binder: 5737:5738 transaction failed 29201/-71, size 0-0 line 2927 [ 842.004309] binder: BINDER_SET_CONTEXT_MGR already set [ 842.004380] binder: 5743:5748 ioctl 40046207 0 returned -16 [ 842.004761] binder: 5743:5748 got transaction to invalid handle [ 842.004769] binder: 5743:5748 transaction failed 29201/-22, size 72-24 line 3011 [ 842.005219] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.005257] binder: 5743:5748 transaction failed 29189/-3, size 0-0 line 3134 [ 842.005823] binder: BINDER_SET_CONTEXT_MGR already set [ 842.005829] binder: 5740:5750 ioctl 40046207 0 returned -16 [ 842.006102] binder: 5740:5750 got transaction to invalid handle [ 842.006109] binder: 5740:5750 transaction failed 29201/-22, size 72-24 line 3011 [ 842.006304] binder: 5743:5748 unknown command 109446913 [ 842.006310] binder: 5743:5748 ioctl c0306201 20004000 returned -22 [ 842.006375] binder: BINDER_SET_CONTEXT_MGR already set [ 842.006380] binder: 5742:5749 ioctl 40046207 0 returned -16 [ 842.006567] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.006602] binder: 5740:5750 transaction failed 29189/-3, size 0-0 line 3134 [ 842.006877] binder: BINDER_SET_CONTEXT_MGR already set [ 842.006882] binder: 5741:5751 ioctl 40046207 0 returned -16 [ 842.007956] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.007993] binder: 5742:5749 transaction failed 29189/-3, size 0-16 line 3134 [ 842.008069] binder: BINDER_SET_CONTEXT_MGR already set [ 842.008075] binder: 5745:5746 ioctl 40046207 0 returned -16 [ 842.008204] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.008238] binder: 5741:5751 transaction failed 29189/-3, size 32-16 line 3134 [ 842.008526] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.008560] binder: 5742:5749 transaction failed 29189/-3, size 0-0 line 3134 [ 842.008653] binder: 5745:5746 got transaction to invalid handle [ 842.008659] binder: 5745:5746 transaction failed 29201/-22, size 72-24 line 3011 [ 842.009342] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.009377] binder: 5741:5751 transaction failed 29189/-3, size 0-0 line 3134 [ 842.009609] binder: 5740:5750 unknown command 109446913 [ 842.009615] binder: 5740:5750 ioctl c0306201 20004000 returned -22 [ 842.009715] binder: 5742:5749 unknown command 109446913 [ 842.009720] binder: 5742:5749 ioctl c0306201 20004000 returned -22 [ 842.009771] binder: 5741:5751 unknown command 109446913 [ 842.009776] binder: 5741:5751 ioctl c0306201 20004000 returned -22 [ 842.010697] binder: 5745:5746 unknown command 109446913 [ 842.010702] binder: 5745:5746 ioctl c0306201 20004000 returned -22 [ 842.011576] binder: 5742:5749 got reply transaction with no transaction stack [ 842.011582] binder: 5742:5749 transaction failed 29201/-71, size 0-0 line 2927 [ 842.012303] binder: 5741:5751 got reply transaction with no transaction stack [ 842.012309] binder: 5741:5751 transaction failed 29201/-71, size 0-0 line 2927 [ 842.029592] binder: 5739:5752 got transaction to invalid handle [ 842.029600] binder: 5739:5752 transaction failed 29201/-22, size 72-24 line 3011 [ 842.032705] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.032809] binder: 5739:5752 transaction failed 29189/-3, size 0-0 line 3134 [ 842.053758] binder: BINDER_SET_CONTEXT_MGR already set [ 842.053766] binder: 5744:5754 ioctl 40046207 0 returned -16 [ 842.055767] binder: 5744:5754 got transaction to invalid handle [ 842.055775] binder: 5744:5754 transaction failed 29201/-22, size 72-24 line 3011 [ 842.071209] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.071250] binder: 5744:5754 transaction failed 29189/-3, size 0-0 line 3134 [ 842.086697] binder: 5744:5754 unknown command -393869567 [ 842.086704] binder: 5744:5754 ioctl c0306201 20004000 returned -22 [ 842.088486] binder: 5744:5754 got reply transaction with no transaction stack [ 842.088493] binder: 5744:5754 transaction failed 29201/-71, size 0-0 line 2927 [ 842.126508] binder: BINDER_SET_CONTEXT_MGR already set [ 842.126515] binder: 5755:5760 ioctl 40046207 0 returned -16 [ 842.126701] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.126741] binder: 5755:5760 transaction failed 29189/-3, size 32-16 line 3134 [ 842.126819] binder: BINDER_SET_CONTEXT_MGR already set [ 842.126824] binder: 5756:5761 ioctl 40046207 0 returned -16 [ 842.126900] binder: 5756:5761 got transaction to invalid handle [ 842.126907] binder: 5756:5761 transaction failed 29201/-22, size 72-24 line 3011 [ 842.127261] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.127295] binder: 5755:5760 transaction failed 29189/-3, size 0-0 line 3134 [ 842.127420] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.127453] binder: 5756:5761 transaction failed 29189/-3, size 0-0 line 3134 [ 842.129474] binder: 5755:5760 unknown command 109446913 [ 842.129481] binder: 5755:5760 ioctl c0306201 20004000 returned -22 [ 842.130141] binder: 5755:5760 got reply transaction with no transaction stack [ 842.130147] binder: 5755:5760 transaction failed 29201/-71, size 0-0 line 2927 [ 842.130242] binder: 5756:5761 unknown command 109446913 [ 842.130248] binder: 5756:5761 ioctl c0306201 20004000 returned -22 [ 842.136128] binder: BINDER_SET_CONTEXT_MGR already set [ 842.136135] binder: 5757:5763 ioctl 40046207 0 returned -16 [ 842.136302] binder: 5757:5763 got transaction to invalid handle [ 842.136309] binder: 5757:5763 transaction failed 29201/-22, size 72-24 line 3011 [ 842.138543] binder: 5757:5763 unknown command 109446913 [ 842.138550] binder: 5757:5763 ioctl c0306201 20004000 returned -22 [ 842.142272] binder: BINDER_SET_CONTEXT_MGR already set [ 842.142279] binder: 5759:5765 ioctl 40046207 0 returned -16 [ 842.143361] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.143404] binder: 5759:5765 transaction failed 29189/-3, size 0-16 line 3134 [ 842.147733] binder: BINDER_SET_CONTEXT_MGR already set [ 842.147740] binder: 5758:5766 ioctl 40046207 0 returned -16 [ 842.147892] binder: 5758:5766 got transaction to invalid handle [ 842.147898] binder: 5758:5766 transaction failed 29201/-22, size 72-24 line 3011 [ 842.148059] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.148095] binder: 5759:5765 transaction failed 29189/-3, size 0-0 line 3134 [ 842.148224] binder_alloc: 5895: binder_alloc_buf, no vma [ 842.148259] binder: 5758:5766 transaction failed 29189/-3, size 0-0 line 3134 [ 842.148585] binder: 5759:5765 unknown command 109446913 [ 842.148591] binder: 5759:5765 ioctl c0306201 20004000 returned -22 [ 842.149513] binder: 5758:5766 unknown command 109446913 [ 842.149519] binder: 5758:5766 ioctl c0306201 20004000 returned -22 [ 842.150387] binder: 5759:5765 got reply transaction with no transaction stack [ 842.150393] binder: 5759:5765 transaction failed 29201/-71, size 0-0 line 2927 [ 842.162635] INFO: task jbd2/sda1-8:1866 blocked for more than 120 seconds. [ 842.162639] Not tainted 4.4.125-g38f41ec #63 [ 842.162641] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 842.162660] jbd2/sda1-8 D ffff8801d39a7580 26328 1866 2 0x00000000 [ 842.162670] ffff8801d39a7580 0000000000000000 0000000000000002 0000000000000000 [ 842.162678] ffff8801d39a7500 ffff8801db31fdb8 ffff8801db31fde0 ffff8801db31f4d8 [ 842.162685] ffff8801db31f4c0 ffff8801d9b11800 ffff8801d3b56000 0000000000000000 [ 842.162687] Call Trace: [ 842.162698] [] ? bit_wait+0xc0/0xc0 [ 842.162706] [] schedule+0x7a/0x1b0 [ 842.162711] [] schedule_timeout+0x3a0/0x970 [ 842.162717] [] ? usleep_range+0x140/0x140 [ 842.162727] [] ? kvm_clock_read+0x23/0x40 [ 842.162733] [] ? kvm_clock_get_cycles+0x9/0x10 [ 842.162740] [] ? ktime_get+0x128/0x1d0 [ 842.162748] [] ? __delayacct_blkio_start+0x41/0x80 [ 842.162753] [] ? bit_wait+0xc0/0xc0 [ 842.162760] [] io_schedule_timeout+0x1be/0x390 [ 842.162765] [] bit_wait_io+0x1b/0xc0 [ 842.162770] [] __wait_on_bit+0x8c/0x140 [ 842.162776] [] out_of_line_wait_on_bit+0xf0/0x130 [ 842.162781] [] ? bit_wait+0xc0/0xc0 [ 842.162787] [] ? __wait_on_bit+0x140/0x140 [ 842.162795] [] ? autoremove_wake_function+0x90/0x90 [ 842.162803] [] ? __might_sleep+0x90/0x1a0 [ 842.162811] [] __wait_on_buffer+0x5c/0x70 [ 842.162819] [] jbd2_journal_commit_transaction+0x33b1/0x64e0 [ 842.162826] [] ? journal_submit_commit_record.isra.15+0xb90/0xb90 [ 842.162834] [] ? debug_object_deactivate+0xf2/0x3c0 [ 842.162840] [] ? debug_object_deactivate+0x26d/0x3c0 [ 842.162846] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 842.162852] [] ? debug_object_deactivate+0x26d/0x3c0 [ 842.162858] [] ? __lock_is_held+0xa1/0xf0 [ 842.162865] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 842.162871] [] ? del_timer_sync+0x11c/0x140 [ 842.162877] [] ? del_timer_sync+0x104/0x140 [ 842.162883] [] kjournald2+0x22a/0x840 [ 842.162889] [] ? finish_task_switch+0x1bb/0x660 [ 842.162895] [] ? commit_timeout+0x20/0x20 [ 842.162902] [] ? prepare_to_wait_event+0x420/0x420 [ 842.162909] [] ? __kthread_parkme+0x167/0x230 [ 842.162915] [] kthread+0x268/0x300 [ 842.162921] [] ? commit_timeout+0x20/0x20 [ 842.162928] [] ? kthread_create_on_node+0x400/0x400 [ 842.162935] [] ? kthread_create_on_node+0x400/0x400 [ 842.162941] [] ret_from_fork+0x55/0x80 [ 842.162948] [] ? kthread_create_on_node+0x400/0x400 [ 842.162952] no locks held by jbd2/sda1-8/1866. [ 842.162955] Sending NMI to all CPUs: [ 842.164188] NMI backtrace for cpu 0 [ 842.164191] CPU: 0 PID: 147 Comm: kworker/u4:2 Not tainted 4.4.125-g38f41ec #63 [ 842.164194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.164197] Workqueue: binder binder_deferred_func [ 842.164199] task: ffff8801d9120000 task.stack: ffff8801d9128000 [ 842.164202] RIP: 0010:[] [] io_serial_in+0x6b/0x90 [ 842.164205] RSP: 0018:ffff8801d912f6a8 EFLAGS: 00000002 [ 842.164207] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 842.164210] RDX: 00000000000003fd RSI: 0000000000000005 RDI: ffffffff8607e878 [ 842.164213] RBP: ffff8801d912f6b8 R08: 0000000000000001 R09: 0000000000000000 [ 842.164216] R10: 0000000000000001 R11: fffffbfff0ad8224 R12: ffffffff8607e840 [ 842.164218] R13: 0000000000000020 R14: fffffbfff0c0fd4f R15: fffffbfff0c0fd11 [ 842.164221] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 842.164224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 842.164226] CR2: 00007f99c3a6c000 CR3: 000000000420c000 CR4: 0000000000160670 [ 842.164229] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 842.164232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 842.164234] Stack: [ 842.164236] ffffffff8607e840 000000000000270b ffff8801d912f708 ffffffff81f89289 [ 842.164239] ffff8801d912f798 ffffffff8607e888 ffffffff8607ea7a ffffffff8607e840 [ 842.164242] 0000000000000061 ffffffff81f893d0 dffffc0000000000 0000000000000061 [ 842.164244] Call Trace: [ 842.164246] [] wait_for_xmitr+0x89/0x1d0 [ 842.164249] [] ? wait_for_xmitr+0x1d0/0x1d0 [ 842.164252] [] serial8250_console_putchar+0x1f/0x60 [ 842.164254] [] uart_console_write+0xac/0xe0 [ 842.164257] [] serial8250_console_write+0x2e0/0x860 [ 842.164259] [] ? exar_handle_irq+0x1b0/0x1b0 [ 842.164261] [] ? sprintf+0xb0/0xe0 [ 842.164264] [] ? scnprintf+0x110/0x110 [ 842.164266] [] ? univ8250_console_setup+0x100/0x100 [ 842.164269] [] univ8250_console_write+0x64/0x80 [ 842.164271] [] call_console_drivers.constprop.26+0x1ec/0x3e0 [ 842.164274] [] console_unlock+0x534/0xa00 [ 842.164276] [] ? vprintk_emit+0x2d0/0x850 [ 842.164279] [] vprintk_emit+0x55e/0x850 [ 842.164281] [] vprintk+0x28/0x30 [ 842.164283] [] vprintk_default+0x1d/0x30 [ 842.164285] [] printk+0xb7/0xe2 [ 842.164288] [] ? pm_qos_get_value.part.4+0xb/0xb [ 842.164290] [] ? _binder_inner_proc_unlock+0x2c/0x50 [ 842.164293] [] ? binder_release_work+0x11d/0x260 [ 842.164295] [] binder_release_work+0x148/0x260 [ 842.164298] [] ? _raw_spin_unlock+0x2c/0x50 [ 842.164300] [] binder_thread_release+0x425/0x600 [ 842.164303] [] ? _raw_spin_unlock+0x2c/0x50 [ 842.164305] [] binder_deferred_func+0x438/0xd10 [ 842.164308] [] ? __lock_is_held+0xa1/0xf0 [ 842.164310] [] process_one_work+0x7d7/0x16e0 [ 842.164313] [] ? process_one_work+0x6f7/0x16e0 [ 842.164315] [] ? pwq_dec_nr_in_flight+0x280/0x280 [ 842.164318] [] ? worker_thread+0x288/0xfc0 [ 842.164320] [] worker_thread+0xd9/0xfc0 [ 842.164322] [] kthread+0x268/0x300 [ 842.164325] [] ? process_one_work+0x16e0/0x16e0 [ 842.164327] [] ? kthread_create_on_node+0x400/0x400 [ 842.164330] [] ? kthread_create_on_node+0x400/0x400 [ 842.164332] [] ret_from_fork+0x55/0x80 [ 842.164335] [] ? kthread_create_on_node+0x400/0x400 [ 842.164340] Code: 24 c1 00 00 00 49 8d 7c 24 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 d3 e3 80 3c 02 00 75 17 41 03 5c 24 38 89 da ec <5b> 0f b6 c0 41 5c 5d c3 e8 e8 79 57 ff eb c2 e8 41 7a 57 ff eb [ 842.164342] NMI backtrace for cpu 1 [ 842.164345] CPU: 1 PID: 486 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #63 [ 842.164348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.164351] task: ffff8800bace9800 task.stack: ffff8800bb178000 [ 842.164354] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 [ 842.164357] RSP: 0018:ffff8800bb17fcb8 EFLAGS: 00000046 [ 842.164359] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 842.164362] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 [ 842.164365] RBP: ffff8800bb17fce0 R08: 0000000000000001 R09: 0000000000000000 [ 842.164368] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 842.164371] R13: 0000000000000003 R14: ffffffff8426f5a0 R15: 0000000000000002 [ 842.164374] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 842.164376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 842.164379] CR2: 0000001b9bc23000 CR3: 000000019f628000 CR4: 0000000000160670 [ 842.164382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 842.164385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 842.164386] Stack: [ 842.164389] ffffffff8426f5a0 ffffffff847f0b40 fffffbfff08fdc1c dffffc0000000000 [ 842.164392] ffff8801db31bca0 ffff8800bb17fd00 ffffffff810b9abb ffffffff839f6dc0 [ 842.164394] 0000000000000003 ffff8800bb17fd60 ffffffff81d11764 0000000000000000 [ 842.164396] Call Trace: [ 842.164399] [] nmi_raise_cpu_backtrace+0x5b/0x70 [ 842.164401] [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 [ 842.164404] [] ? irq_force_complete_move+0x3b0/0x3b0 [ 842.164406] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 842.164409] [] watchdog+0x6fa/0xae0 [ 842.164411] [] ? watchdog+0xc3/0xae0 [ 842.164413] [] kthread+0x268/0x300 [ 842.164416] [] ? reset_hung_task_detector+0x20/0x20 [ 842.164419] [] ? kthread_create_on_node+0x400/0x400 [ 842.164421] [] ? kthread_create_on_node+0x400/0x400 [ 842.164423] [] ret_from_fork+0x55/0x80 [ 842.164426] [] ? kthread_create_on_node+0x400/0x400 [ 842.164432] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 2b 33 17 00 4c 89 e7 57 9d 0f 1f [ 842.164582] Kernel panic - not syncing: hung_task: blocked tasks [ 842.164588] CPU: 1 PID: 486 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #63 [ 842.164591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.164598] 0000000000000000 f86ff2343f10568a ffff8800bb17fca8 ffffffff81d067bd [ 842.164606] ffffffff838831a0 ffff8800bb17fd80 dffffc0000000000 7fffffffffffffff [ 842.164613] ffff8801d3b56448 ffff8800bb17fd70 ffffffff8141b46a 0000000041b58ab3 [ 842.164614] Call Trace: [ 842.164626] [] dump_stack+0xc1/0x124 [ 842.164632] [] panic+0x1aa/0x388 [ 842.164639] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 842.164646] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 842.164651] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 842.164657] [] watchdog+0x70b/0xae0 [ 842.164662] [] ? watchdog+0xc3/0xae0 [ 842.164668] [] kthread+0x268/0x300 [ 842.164674] [] ? reset_hung_task_detector+0x20/0x20 [ 842.164681] [] ? kthread_create_on_node+0x400/0x400 [ 842.164688] [] ? kthread_create_on_node+0x400/0x400 [ 842.164694] [] ret_from_fork+0x55/0x80 [ 842.164700] [] ? kthread_create_on_node+0x400/0x400 [ 842.166569] Dumping ftrace buffer: [ 842.166599] (ftrace buffer empty) [ 842.166600] Kernel Offset: disabled