200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 4 printk messages dropped ** [ 576.326852] binder: 7629:7633 got transaction with invalid offset (0, min 0 max 0) or object. [ 576.326906] binder: 7629:7633 transaction failed 29201/-22, size 0-16 line 3197 [ 576.334158] binder: 7628:7636 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 576.334243] binder: 7628:7636 transaction failed 29201/-22, size 40-16 line 3197 ** 10 printk messages dropped ** [ 576.352710] binder: 7632:7635 got transaction with invalid offset (0, min 24 max 40) or object. [ 576.352796] binder: 7632:7635 transaction failed 29201/-22, size 40-16 line 3197 [ 576.356906] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 14:58:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 576.356914] binder: 7638:7642 ioctl 40046207 0 returned -16 [ 576.357759] binder: 7638:7642 got transaction with invalid offset (0, min 24 max 40) or object. [ 576.358813] binder: 7638:7642 transaction failed 29201/-22, size 40-16 line 3197 [ 576.394791] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.401823] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.434569] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) [ 576.434712] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.434786] binder: undelivered TRANSACTION_ERROR: 29201 ** 12 printk messages dropped ** [ 576.483091] binder: 7671:7678 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 1 printk messages dropped ** [ 576.486300] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 12 printk messages dropped ** [ 576.574462] binder: 7694:7700 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:22 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac8") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 11 printk messages dropped ** [ 576.602039] binder: 7691:7702 transaction failed 29201/-22, size 40-16 line 3197 [ 576.612431] binder: undelivered TRANSACTION_ERROR: 29189 [ 576.625543] binder: undelivered TRANSACTION_ERROR: 29201 ** 4 printk messages dropped ** [ 576.675846] binder_alloc: 7725: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 576.702869] binder: 7731:7734 transaction failed 29201/-22, size 0-16 line 3197 [ 576.706574] binder: 7722:7727 got transaction with invalid offset (0, min 24 max 40) or object. ** 3 printk messages dropped ** [ 576.729794] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 14:58:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) write$cgroup_int(r0, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac8") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 2 printk messages dropped ** [ 576.731211] binder: 7737:7745 transaction failed 29201/-22, size 40-16 line 3197 [ 576.739929] binder: BINDER_SET_CONTEXT_MGR already set [ 576.739937] binder: 7739:7743 ioctl 40046207 0 returned -16 [ 576.741192] binder: 7739:7743 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 17 printk messages dropped ** [ 576.894140] binder: 7767:7773 got transaction with invalid offset (0, min 0 max 0) or object. [ 576.894196] binder: 7767:7773 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac8") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) write$cgroup_int(r0, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x39, 0x3f, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 3 printk messages dropped ** [ 576.905828] binder: 7768:7774 transaction failed 29201/-22, size 0-16 line 3197 ** 1 printk messages dropped ** [ 576.908439] binder: 7769:7777 ioctl 40046207 0 returned -16 [ 576.909224] binder: 7769:7777 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 5 printk messages dropped ** [ 576.917921] binder: BINDER_SET_CONTEXT_MGR already set ** 13 printk messages dropped ** [ 577.015111] binder: 7801:7806 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:23 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x39, 0x3f, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) [ 577.019189] binder: 7803:7807 got transaction with invalid offset (0, min 0 max 0) or object. ** 1 printk messages dropped ** [ 577.028134] binder: 7800:7804 got transaction with invalid offset (0, min 0 max 0) or object. ** 4 printk messages dropped ** [ 577.041590] binder: 7810:7813 transaction failed 29201/-22, size 40-16 line 3197 [ 577.046540] binder: BINDER_SET_CONTEXT_MGR already set [ 577.046547] binder: 7805:7815 ioctl 40046207 0 returned -16 ** 6 printk messages dropped ** [ 577.059752] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) write$cgroup_int(r0, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x39, 0x3f, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) [ 577.087023] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.095907] binder: 7826:7829 got transaction with invalid offset (0, min 0 max 0) or object. [ 577.095965] binder: 7826:7829 transaction failed 29201/-22, size 0-16 line 3197 [ 577.108086] binder: undelivered TRANSACTION_ERROR: 29201 ** 9 printk messages dropped ** [ 577.177659] binder: 7841:7845 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 3: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) write$cgroup_int(r0, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x0, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 8 printk messages dropped ** [ 577.193146] binder: 7843:7847 transaction failed 29201/-22, size 0-16 line 3197 ** 8 printk messages dropped ** [ 577.266656] binder: undelivered TRANSACTION_ERROR: 29201 ** 10 printk messages dropped ** [ 577.318645] binder: BINDER_SET_CONTEXT_MGR already set ** 7 printk messages dropped ** [ 577.321228] binder: 7877:7881 transaction failed 29201/-22, size 40-16 line 3197 ** 5 printk messages dropped ** [ 577.347757] binder: 7886:7890 transaction failed 29189/-3, size 0-16 line 3134 [ 577.368817] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:23 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 3: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) write$cgroup_int(r0, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x0, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 577.385248] binder: 7903:7906 got transaction with invalid offset (0, min 0 max 0) or object. [ 577.385304] binder: 7903:7906 transaction failed 29201/-22, size 0-16 line 3197 [ 577.387967] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.390840] binder: 7901:7905 got transaction with invalid offset (0, min 24 max 40) or object. ** 1 printk messages dropped ** [ 577.395407] binder: undelivered TRANSACTION_ERROR: 29201 ** 16 printk messages dropped ** [ 577.522206] binder: 7923:7932 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 3: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) write$cgroup_int(r0, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x0, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 6 printk messages dropped ** [ 577.542677] binder: 7926:7928 got transaction with invalid offset (0, min 0 max 0) or object. [ 577.542738] binder: 7926:7928 transaction failed 29201/-22, size 0-16 line 3197 [ 577.549052] binder: BINDER_SET_CONTEXT_MGR already set [ 577.549059] binder: 7924:7929 ioctl 40046207 0 returned -16 [ 577.550277] binder: 7924:7929 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 15 printk messages dropped ** [ 577.649857] binder: 7958:7968 got transaction with invalid offset (0, min 0 max 0) or object. [ 577.649912] binder: 7958:7968 transaction failed 29201/-22, size 0-16 line 3197 [ 577.664119] binder: BINDER_SET_CONTEXT_MGR already set [ 577.664127] binder: 7963:7966 ioctl 40046207 0 returned -16 2018/03/30 14:58:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x3f, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 1 printk messages dropped ** [ 577.666244] binder: 7963:7966 transaction failed 29201/-22, size 40-16 line 3197 [ 577.666271] binder: 7967:7973 got transaction with invalid offset (0, min 0 max 0) or object. [ 577.666627] binder: 7967:7973 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 15 printk messages dropped ** [ 577.807377] binder: 7990:7999 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 6 printk messages dropped ** [ 577.812924] binder: 7993:8000 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:23 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x3f, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 10 printk messages dropped ** [ 577.920053] binder: 8026:8031 got transaction with invalid offset (0, min 0 max 0) or object. ** 14 printk messages dropped ** [ 578.005012] binder: 8042:8048 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x3f, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:23 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 5 printk messages dropped ** [ 578.053579] binder: undelivered TRANSACTION_ERROR: 29201 ** 3 printk messages dropped ** [ 578.095507] binder: 8059:8066 got transaction with invalid offset (0, min 0 max 0) or object. [ 578.095560] binder: 8059:8066 transaction failed 29201/-22, size 0-16 line 3197 [ 578.100895] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 14:58:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 578.100902] binder: 8063:8068 ioctl 40046207 0 returned -16 ** 8 printk messages dropped ** [ 578.109573] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 14:58:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x0, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 8 printk messages dropped ** [ 578.183410] binder: undelivered TRANSACTION_ERROR: 29201 ** 4 printk messages dropped ** [ 578.208001] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 3 printk messages dropped ** [ 578.224796] binder: 8098:8104 ioctl 40046207 0 returned -16 2018/03/30 14:58:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 20 printk messages dropped ** [ 578.310060] binder: 8123:8125 transaction failed 29201/-22, size 0-16 line 3197 [ 578.330820] binder: 8127:8128 got transaction with invalid offset (0, min 24 max 40) or object. [ 578.330911] binder: 8127:8128 transaction failed 29201/-22, size 40-16 line 3197 [ 578.331377] binder: undelivered TRANSACTION_ERROR: 29201 [ 578.331464] binder: undelivered TRANSACTION_ERROR: 29201 ** 2 printk messages dropped ** [ 578.376756] binder: 8137:8139 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x0, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 578.376813] binder: 8137:8139 transaction failed 29201/-22, size 0-16 line 3197 [ 578.386721] binder: 8133:8141 got transaction with invalid offset (0, min 24 max 40) or object. [ 578.386803] binder: 8133:8141 transaction failed 29201/-22, size 40-16 line 3197 [ 578.390674] binder: BINDER_SET_CONTEXT_MGR already set [ 578.390682] binder: 8134:8146 ioctl 40046207 0 returned -16 2018/03/30 14:58:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x0, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) [ 578.391583] binder: 8134:8146 got transaction with invalid offset (0, min 24 max 40) or object. ** 19 printk messages dropped ** [ 578.502658] binder: 8168:8170 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8) 2018/03/30 14:58:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x0, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 1 printk messages dropped ** [ 578.526154] binder: BINDER_SET_CONTEXT_MGR already set ** 5 printk messages dropped ** [ 578.532801] binder: 8177:8185 got transaction with invalid offset (0, min 24 max 40) or object. ** 14 printk messages dropped ** [ 578.643264] binder: undelivered TRANSACTION_ERROR: 29201 ** 4 printk messages dropped ** [ 578.680024] binder: 8212:8214 transaction failed 29201/-22, size 40-16 line 3197 ** 1 printk messages dropped ** [ 578.680136] binder: 8211:8216 ioctl 40046207 0 returned -16 [ 578.680281] binder: 8211:8216 got transaction with invalid offset (0, min 0 max 0) or object. [ 578.680402] binder: 8211:8216 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x0, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8) 2018/03/30 14:58:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 578.681122] binder: 8207:8215 got transaction with invalid offset (0, min 0 max 0) or object. [ 578.681176] binder: 8207:8215 transaction failed 29201/-22, size 0-16 line 3197 [ 578.686460] binder: BINDER_SET_CONTEXT_MGR already set [ 578.686467] binder: 8210:8218 ioctl 40046207 0 returned -16 [ 578.687446] binder: 8210:8218 got transaction with invalid offset (0, min 24 max 40) or object. [ 578.687531] binder: 8210:8218 transaction failed 29201/-22, size 40-16 line 3197 [ 578.698818] binder: BINDER_SET_CONTEXT_MGR already set ** 6 printk messages dropped ** [ 578.744085] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x0, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 8 printk messages dropped ** [ 578.794929] binder: 8240:8245 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8) ** 16 printk messages dropped ** [ 578.870763] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 12 printk messages dropped ** [ 578.931572] binder: 8274:8279 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0x0, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 1 printk messages dropped ** [ 578.932134] binder: undelivered TRANSACTION_ERROR: 29201 ** 1 printk messages dropped ** [ 578.980262] binder: undelivered TRANSACTION_ERROR: 29201 ** 2 printk messages dropped ** [ 579.007037] binder: undelivered TRANSACTION_ERROR: 29201 ** 1 printk messages dropped ** [ 579.028692] binder: 8294:8299 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0x0, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 18 printk messages dropped ** [ 579.086236] binder: 8298:8311 transaction failed 29201/-22, size 40-16 line 3197 ** 3 printk messages dropped ** [ 579.135220] binder: 8322:8327 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 6 printk messages dropped ** [ 579.158881] binder: 8330:8335 ioctl 40046207 0 returned -16 ** 11 printk messages dropped ** [ 579.203045] binder: 8344:8348 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:25 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0x0, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 5 printk messages dropped ** [ 579.296779] binder: 8358:8364 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 2 printk messages dropped ** [ 579.301419] binder: 8355:8362 transaction failed 29201/-22, size 0-16 line 3197 ** 14 printk messages dropped ** [ 579.321002] binder: 8360:8369 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) 2018/03/30 14:58:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 6 printk messages dropped ** [ 579.395183] binder: undelivered TRANSACTION_ERROR: 29201 ** 1 printk messages dropped ** [ 579.416701] binder: undelivered TRANSACTION_ERROR: 29201 ** 1 printk messages dropped ** [ 579.429593] binder: 8388:8398 ioctl 40046207 0 returned -16 [ 579.429715] binder_alloc: 8389: binder_alloc_buf, no vma [ 579.429756] binder: 8388:8398 transaction failed 29189/-3, size 0-16 line 3134 ** 11 printk messages dropped ** [ 579.478510] binder: 8401:8406 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 7 printk messages dropped ** [ 579.506067] binder: BINDER_SET_CONTEXT_MGR already set ** 3 printk messages dropped ** [ 579.514797] binder: undelivered TRANSACTION_ERROR: 29189 ** 5 printk messages dropped ** [ 579.569529] binder: undelivered TRANSACTION_ERROR: 29201 [ 579.605559] binder: BINDER_SET_CONTEXT_MGR already set [ 579.605567] binder: 8431:8433 ioctl 40046207 0 returned -16 [ 579.606191] binder: 8427:8434 got transaction with invalid offset (0, min 0 max 0) or object. [ 579.606197] binder: 8431:8433 got transaction with invalid offset (0, min 0 max 0) or object. [ 579.606249] binder: 8427:8434 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) [ 579.606254] binder: 8431:8433 transaction failed 29201/-22, size 0-16 line 3197 [ 579.606445] binder: 8428:8437 got transaction with invalid offset (0, min 24 max 40) or object. [ 579.606528] binder: 8428:8437 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) ** 10 printk messages dropped ** [ 579.634682] binder: undelivered TRANSACTION_ERROR: 29201 ** 4 printk messages dropped ** [ 579.683283] binder: 8442:8454 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x0, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 3 printk messages dropped ** [ 579.704565] binder: BINDER_SET_CONTEXT_MGR already set [ 579.704573] binder: 8458:8461 ioctl 40046207 0 returned -16 [ 579.705354] binder: 8458:8461 got transaction with invalid offset (0, min 24 max 40) or object. ** 1 printk messages dropped ** [ 579.706097] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:25 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) 2018/03/30 14:58:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 8 printk messages dropped ** [ 579.748674] binder: 8470:8474 transaction failed 29201/-22, size 0-16 line 3197 ** 5 printk messages dropped ** [ 579.772289] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) 2018/03/30 14:58:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x0, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x0, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 1 printk messages dropped ** [ 579.795727] binder: 8481:8484 got transaction with invalid offset (0, min 0 max 0) or object. ** 15 printk messages dropped ** [ 579.848467] binder: undelivered TRANSACTION_ERROR: 29201 ** 8 printk messages dropped ** [ 579.945451] binder: 8521:8525 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) 2018/03/30 14:58:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x0, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x0, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 579.945544] binder: 8521:8525 transaction failed 29201/-22, size 40-16 line 3197 [ 579.947285] binder: 8518:8522 got transaction with invalid offset (0, min 0 max 0) or object. [ 579.947340] binder: 8518:8522 transaction failed 29201/-22, size 0-16 line 3197 [ 579.955871] binder: BINDER_SET_CONTEXT_MGR already set [ 579.955878] binder: 8524:8530 ioctl 40046207 0 returned -16 2018/03/30 14:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x0, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 15 printk messages dropped ** [ 580.019734] binder: undelivered TRANSACTION_ERROR: 29201 ** 3 printk messages dropped ** [ 580.057399] binder: 8546:8550 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 6 printk messages dropped ** [ 580.079890] binder: 8557:8561 transaction failed 29201/-22, size 0-16 line 3197 ** 4 printk messages dropped ** [ 580.115191] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x0, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 5 printk messages dropped ** [ 580.138135] binder: 8570:8572 transaction failed 29201/-22, size 40-16 line 3197 [ 580.157459] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.164091] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.170115] binder: 8581:8582 got transaction with invalid offset (0, min 0 max 0) or object. [ 580.170173] binder: 8581:8582 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d06"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 12 printk messages dropped ** [ 580.290106] binder: 8600:8605 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x0, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 5 printk messages dropped ** [ 580.299029] binder: 8607:8608 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 8 printk messages dropped ** [ 580.308449] binder: 8602:8609 transaction failed 29201/-22, size 0-16 line 3197 ** 7 printk messages dropped ** [ 580.402651] binder: undelivered TRANSACTION_ERROR: 29201 ** 2 printk messages dropped ** [ 580.417506] binder: BINDER_SET_CONTEXT_MGR already set ** 4 printk messages dropped ** [ 580.425154] binder: 8630:8642 ioctl 40046207 0 returned -16 2018/03/30 14:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d06"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x0]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x0, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 580.426264] binder: 8635:8639 got transaction with invalid offset (0, min 0 max 0) or object. [ 580.426322] binder: 8635:8639 transaction failed 29201/-22, size 0-16 line 3197 [ 580.430023] binder: 8637:8643 got transaction with invalid offset (0, min 0 max 0) or object. [ 580.430082] binder: 8637:8643 transaction failed 29201/-22, size 0-16 line 3197 [ 580.435301] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 14:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 16 printk messages dropped ** [ 580.536847] binder: 8671:8673 transaction failed 29201/-22, size 0-16 line 3197 ** 2 printk messages dropped ** [ 580.578770] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d06"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x0]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 580.594351] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.609634] binder: undelivered TRANSACTION_ERROR: 29201 ** 1 printk messages dropped ** [ 580.648525] binder: 8690:8693 got transaction with invalid offset (0, min 0 max 0) or object. [ 580.648578] binder: 8690:8693 transaction failed 29201/-22, size 0-16 line 3197 ** 3 printk messages dropped ** [ 580.649928] binder: 8686:8694 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59c"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x0]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 14 printk messages dropped ** [ 580.751062] binder: 8722:8725 transaction failed 29201/-22, size 0-16 line 3197 [ 580.770305] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.780173] binder: BINDER_SET_CONTEXT_MGR already set [ 580.780181] binder: 8716:8721 ioctl 40046207 0 returned -16 [ 580.782114] binder: BINDER_SET_CONTEXT_MGR already set [ 580.782123] binder: 8726:8732 ioctl 40046207 0 returned -16 ** 3 printk messages dropped ** [ 580.803493] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 14:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 14 printk messages dropped ** [ 580.928669] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 14:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59c"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 2 printk messages dropped ** [ 580.929039] binder: 8750:8762 transaction failed 29201/-22, size 0-16 line 3197 ** 1 printk messages dropped ** [ 580.931126] binder: 8756:8764 ioctl 40046207 0 returned -16 [ 580.932558] binder: 8754:8763 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 12 printk messages dropped ** [ 581.038801] binder: 8787:8791 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 5 printk messages dropped ** [ 581.061644] binder: 8790:8797 transaction failed 29189/-22, size 0-16 line 3011 [ 581.066045] binder: BINDER_SET_CONTEXT_MGR already set ** 5 printk messages dropped ** [ 581.072932] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.092257] binder: 8796:8802 got transaction with invalid offset (0, min 0 max 0) or object. [ 581.092313] binder: 8796:8802 transaction failed 29201/-22, size 0-16 line 3197 [ 581.094751] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.096736] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.112355] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59c"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) 2018/03/30 14:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 581.139256] binder: undelivered TRANSACTION_ERROR: 29189 [ 581.141670] binder: 8817:8821 got transaction with invalid offset (0, min 24 max 40) or object. [ 581.141743] binder: 8817:8821 transaction failed 29201/-22, size 40-16 line 3197 [ 581.146364] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 11 printk messages dropped ** [ 581.250324] binder: 8831:8838 got transaction with invalid offset (0, min 0 max 0) or object. [ 581.250653] binder: 8831:8838 transaction failed 29201/-22, size 0-16 line 3197 [ 581.261274] binder: 8834:8845 transaction failed 29189/-22, size 0-16 line 3011 2018/03/30 14:58:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 581.262219] binder: BINDER_SET_CONTEXT_MGR already set [ 581.262227] binder: 8832:8846 ioctl 40046207 0 returned -16 [ 581.263235] binder: 8832:8846 got transaction with invalid offset (0, min 24 max 40) or object. [ 581.263324] binder: 8832:8846 transaction failed 29201/-22, size 40-16 line 3197 [ 581.267340] binder: BINDER_SET_CONTEXT_MGR already set [ 581.267347] binder: 8835:8842 ioctl 40046207 0 returned -16 ** 13 printk messages dropped ** [ 581.357950] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.358023] binder: 8840:8852 got transaction with invalid offset (0, min 24 max 40) or object. [ 581.358053] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.358113] binder: 8840:8852 transaction failed 29201/-22, size 40-16 line 3197 [ 581.372007] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.384012] binder: 8866:8871 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8) 2018/03/30 14:58:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) 2018/03/30 14:58:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 581.384071] binder: 8866:8871 transaction failed 29201/-22, size 0-16 line 3197 [ 581.387977] binder: 8868:8872 got transaction with invalid offset (0, min 0 max 0) or object. [ 581.388030] binder: 8868:8872 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 13 printk messages dropped ** [ 581.454988] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:27 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) 2018/03/30 14:58:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8) 2018/03/30 14:58:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 2 printk messages dropped ** [ 581.485051] binder: undelivered TRANSACTION_ERROR: 29201 ** 2 printk messages dropped ** [ 581.514246] binder: 8898:8903 got transaction with invalid offset (0, min 24 max 40) or object. ** 2 printk messages dropped ** [ 581.515008] binder: 8898:8903 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 12 printk messages dropped ** [ 581.577051] binder: 8897:8910 got transaction with invalid offset (0, min 24 max 40) or object. ** 7 printk messages dropped ** [ 581.624571] binder: 8928:8931 got transaction with invalid offset (0, min 24 max 40) or object. [ 581.624660] binder: 8928:8931 transaction failed 29201/-22, size 40-16 line 3197 [ 581.627700] binder: BINDER_SET_CONTEXT_MGR already set [ 581.627708] binder: 8933:8935 ioctl 40046207 0 returned -16 2018/03/30 14:58:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464ab"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8) 2018/03/30 14:58:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[]}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(0xffffffffffffffff, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x0) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) ** 1 printk messages dropped ** [ 581.628600] binder: 8933:8935 transaction failed 29201/-22, size 40-16 line 3197 [ 581.636204] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.636287] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.639960] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.662799] binder: 8932:8934 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 13 printk messages dropped ** [ 581.719690] binder: send failed reply for transaction 46115 to 8936:8946 2018/03/30 14:58:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464ab"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 5 printk messages dropped ** [ 581.759592] binder: undelivered TRANSACTION_ERROR: 29201 ** 6 printk messages dropped ** [ 581.801779] binder: 8971:8979 ioctl 40046207 0 returned -16 [ 581.804131] binder_alloc: 8975: binder_alloc_buf, no vma ** 11 printk messages dropped ** [ 581.836727] binder: 8970:8977 got transaction with invalid offset (0, min 24 max 40) or object. [ 581.836813] binder: 8970:8977 transaction failed 29201/-22, size 40-16 line 3197 [ 581.847776] binder: undelivered TRANSACTION_ERROR: 29189 [ 581.861019] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.875279] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.886468] binder_alloc: 9000: binder_alloc_buf, no vma [ 581.886504] binder: 9000:9004 transaction failed 29189/-3, size 0-16 line 3134 [ 581.894277] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:27 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) 2018/03/30 14:58:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(0xffffffffffffffff, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464ab"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 581.894331] binder: send failed reply for transaction 46135 to 8971:8979 [ 581.908656] binder: undelivered TRANSACTION_COMPLETE [ 581.908671] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 14:58:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 8 printk messages dropped ** [ 581.950225] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 14:58:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(0xffffffffffffffff, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 8 printk messages dropped ** [ 581.957104] binder: 9016:9018 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) ** 7 printk messages dropped ** [ 582.037303] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 582.062066] binder: 9044:9046 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 6 printk messages dropped ** [ 582.083419] binder: 9051:9056 got transaction with invalid offset (0, min 24 max 40) or object. [ 582.083505] binder: 9051:9056 transaction failed 29201/-22, size 40-16 line 3197 [ 582.105108] binder: undelivered TRANSACTION_ERROR: 29201 [ 582.112053] binder: 9052:9058 got transaction with invalid offset (0, min 0 max 0) or object. ** 6 printk messages dropped ** [ 582.189544] binder_alloc: 9071: binder_alloc_buf, no vma [ 582.189583] binder: 9071:9084 transaction failed 29189/-3, size 40-16 line 3134 [ 582.193858] binder: 9075:9083 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x39, 0x0, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, 0xffffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) [ 582.193947] binder: 9075:9083 transaction failed 29201/-22, size 40-16 line 3197 [ 582.194084] binder: BINDER_SET_CONTEXT_MGR already set [ 582.194090] binder: 9073:9081 ioctl 40046207 0 returned -16 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, 0xffffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 13 printk messages dropped ** [ 582.201205] binder: 9076:9085 transaction failed 29201/-22, size 0-16 line 3197 ** 1 printk messages dropped ** [ 582.218025] binder: 9078:9086 transaction failed 29201/-22, size 40-16 line 3197 ** 3 printk messages dropped ** [ 582.273218] binder: undelivered TRANSACTION_ERROR: 29201 ** 7 printk messages dropped ** [ 582.364296] binder: 9116:9123 got transaction with invalid offset (0, min 24 max 40) or object. [ 582.364389] binder: 9116:9123 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x39, 0x0, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, 0xffffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) [ 582.365666] binder: 9114:9122 got transaction with invalid offset (0, min 0 max 0) or object. [ 582.365716] binder: 9114:9122 transaction failed 29201/-22, size 0-16 line 3197 [ 582.366137] binder: BINDER_SET_CONTEXT_MGR already set [ 582.366144] binder: 9115:9127 ioctl 40046207 0 returned -16 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 11 printk messages dropped ** [ 582.385653] binder: 9118:9128 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x39, 0x0, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 7 printk messages dropped ** [ 582.446448] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x0, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 11 printk messages dropped ** [ 582.507024] binder: undelivered TRANSACTION_ERROR: 29201 ** 8 printk messages dropped ** [ 582.568289] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 14:58:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0x0, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) ** 3 printk messages dropped ** [ 582.601296] binder: undelivered TRANSACTION_ERROR: 29201 ** 11 printk messages dropped ** [ 582.664347] binder: 9188:9197 got transaction with invalid offset (0, min 24 max 40) or object. ** 6 printk messages dropped ** [ 582.894653] binder: BINDER_SET_CONTEXT_MGR already set ** 2 printk messages dropped ** [ 582.898269] binder: 9217:9218 transaction failed 29201/-22, size 40-16 line 3197 [ 582.901936] binder: 9212:9214 got transaction with invalid offset (0, min 24 max 40) or object. ** 1 printk messages dropped ** [ 582.924726] binder: 9211:9219 got transaction with invalid offset (0, min 0 max 0) or object. [ 582.924784] binder: 9211:9219 transaction failed 29201/-22, size 0-16 line 3197 2018/03/30 14:58:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x0, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 6: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) 2018/03/30 14:58:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0x0, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 582.943972] binder: undelivered TRANSACTION_ERROR: 29201 [ 582.981925] binder: undelivered TRANSACTION_ERROR: 29201 [ 582.982298] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.000732] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.014853] binder: 9234:9235 got transaction with invalid offset (0, min 24 max 40) or object. [ 583.014943] binder: 9234:9235 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 9 printk messages dropped ** [ 583.052424] binder: 9241:9245 got transaction with invalid offset (0, min 0 max 0) or object. [ 583.052479] binder: 9241:9245 transaction failed 29201/-22, size 0-16 line 3197 [ 583.057209] binder: 9238:9249 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/30 14:58:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 583.057294] binder: 9238:9249 transaction failed 29201/-22, size 40-16 line 3197 ** 6 printk messages dropped ** [ 583.101378] binder: undelivered TRANSACTION_ERROR: 29201 ** 9 printk messages dropped ** [ 583.164550] binder: 9272:9276 transaction failed 29201/-22, size 40-16 line 3197 [ 583.164760] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.187213] binder: undelivered TRANSACTION_ERROR: 29189 [ 583.187705] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.201862] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.231704] binder: 9284:9291 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0x0, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x0, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 6: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) 2018/03/30 14:58:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) [ 583.231775] binder: 9284:9291 transaction failed 29201/-22, size 0-16 line 3197 [ 583.232401] binder: 9288:9289 got transaction with invalid offset (0, min 24 max 40) or object. [ 583.232481] binder: 9288:9289 transaction failed 29201/-22, size 40-16 line 3197 [ 583.240857] binder: 9287:9294 got transaction with invalid offset (0, min 24 max 40) or object. [ 583.240942] binder: 9287:9294 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 583.243834] binder: 9285:9295 got transaction with invalid offset (0, min 24 max 40) or object. ** 10 printk messages dropped ** [ 583.254721] binder: 9283:9292 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x0, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) ioprio_set$uid(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) [ 583.285173] binder: 9296:9305 got transaction with invalid offset (0, min 24 max 40) or object. [ 583.285276] binder: 9296:9305 transaction failed 29201/-22, size 40-16 line 3197 2018/03/30 14:58:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x0, 0x0, 0x2c]}, 0x4) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r2, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x0, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) 2018/03/30 14:58:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:29 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x0, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x0, 0x0, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) 2018/03/30 14:58:29 executing program 6: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r1, r1, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(r1, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x0, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="7e0000006e356a5b5161840dce3d6a16a2d48b505f9d066641c065882efbfd3c7a02fb9d562fc85c9a2464abe2b3"], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766a389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e022aeac9721ede2778274738ec6ee03c9d622d847775a4dbfba30d31c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e071") socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r1, 0x4, 0x8000005ffe) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r2, 0x0) ** 6 printk messages dropped ** [ 583.360126] binder: 9321:9326 transaction failed 29201/-22, size 40-16 line 3197 ** 3 printk messages dropped ** [ 583.379512] binder: 9323:9330 got transaction with invalid offset (0, min 0 max 0) or object. 2018/03/30 14:58:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e521d0146b35e59cf5"], 0x1) r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') tee(r2, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) setns(0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x916, 0xffffffff, 0x1ff, 0x9, 0x7f, 0x6}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$setstatus(r2, 0x4, 0x8000005ffe) write$cgroup_int(r1, &(0x7f0000000240)={[0x34, 0x39, 0x3f, 0x0, 0x2c]}, 0x5) getresuid(&(0x7f00000003c0), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) ioprio_set$uid(0x0, r3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfff}, 0x8) ** 17 printk messages dropped ** [ 583.480026] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.480107] binder: undelivered TRANSACTION_ERROR: 29201 ** 5 printk messages dropped ** [ 583.526557] binder: 9357:9361 transaction failed 29201/-22, size 40-16 line 3197 [ 583.547861] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.579631] binder: 9369:9373 got transaction with invalid offset (0, min 0 max 0) or object. [ 583.579691] binder: 9369:9373 transaction failed 29201/-22, size 0-16 line 3197 ** 160 printk messages dropped ** [ 584.385476] binder: 9564:9572 transaction failed 29201/-22, size 40-16 line 3197 [ 584.388602] binder: BINDER_SET_CONTEXT_MGR already set [ 584.388609] binder: 9569:9574 ioctl 40046207 0 returned -16 [ 584.389033] binder: 9570:9575 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.389384] binder: 9569:9574 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.389469] binder: 9569:9574 transaction failed 29201/-22, size 40-16 line 3197 [ 584.389874] binder: 9570:9575 transaction failed 29201/-22, size 0-16 line 3197 [ 584.422938] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.438799] binder: release 9563:9565 transaction 46473 out, still active [ 584.438804] binder: unexpected work type, 4, not freed [ 584.438806] binder: undelivered TRANSACTION_COMPLETE [ 584.446852] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.456823] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.470193] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.476282] binder: BINDER_SET_CONTEXT_MGR already set [ 584.476290] binder: 9597:9601 ioctl 40046207 0 returned -16 [ 584.484191] binder: 9599:9603 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.484282] binder: 9599:9603 transaction failed 29201/-22, size 40-16 line 3197 [ 584.491413] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.494471] binder: 9602:9604 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.494529] binder: 9602:9604 transaction failed 29201/-22, size 0-16 line 3197 [ 584.497077] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.497147] binder: send failed reply for transaction 46473, target dead [ 584.497162] binder: send failed reply for transaction 46490 to 9597:9601 [ 584.506095] binder: 9606:9612 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.506152] binder: 9606:9612 transaction failed 29201/-22, size 0-16 line 3197 [ 584.516366] binder: 9582:9600 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.516453] binder: 9582:9600 transaction failed 29201/-22, size 40-16 line 3197 [ 584.524766] binder: 9605:9609 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.524855] binder: 9605:9609 transaction failed 29201/-22, size 40-16 line 3197 [ 584.540841] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.546303] binder: BINDER_SET_CONTEXT_MGR already set [ 584.546311] binder: 9616:9620 ioctl 40046207 0 returned -16 [ 584.547387] binder: 9616:9620 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.547520] binder: 9616:9620 transaction failed 29201/-22, size 40-16 line 3197 [ 584.564748] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.567000] binder: undelivered TRANSACTION_COMPLETE [ 584.567014] binder: undelivered TRANSACTION_ERROR: 29189 [ 584.567388] binder: BINDER_SET_CONTEXT_MGR already set [ 584.567395] binder: 9619:9626 ioctl 40046207 0 returned -16 [ 584.568182] binder: 9619:9626 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.568273] binder: 9619:9626 transaction failed 29201/-22, size 40-16 line 3197 [ 584.593401] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.601792] binder: 9635:9640 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.601875] binder: 9635:9640 transaction failed 29201/-22, size 40-16 line 3197 [ 584.603785] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.617078] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.621097] binder: 9630:9633 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.621160] binder: 9630:9633 transaction failed 29201/-22, size 0-16 line 3197 [ 584.630677] binder: 9642:9646 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.630734] binder: 9642:9646 transaction failed 29201/-22, size 0-16 line 3197 [ 584.631396] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.666073] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.674761] binder: release 9636:9643 transaction 46522 out, still active [ 584.674766] binder: unexpected work type, 4, not freed [ 584.674768] binder: undelivered TRANSACTION_COMPLETE [ 584.674869] binder: send failed reply for transaction 46522, target dead [ 584.687684] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.699645] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.699733] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.724690] binder: 9659:9662 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.724776] binder: 9659:9662 transaction failed 29201/-22, size 40-16 line 3197 [ 584.730272] binder: 9664:9668 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.731411] binder: 9658:9665 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.731498] binder: 9658:9665 transaction failed 29201/-22, size 40-16 line 3197 [ 584.732970] binder: 9664:9668 transaction failed 29201/-22, size 0-16 line 3197 [ 584.735240] binder: 9661:9667 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.735294] binder: 9661:9667 transaction failed 29201/-22, size 0-16 line 3197 [ 584.742220] binder: BINDER_SET_CONTEXT_MGR already set [ 584.742228] binder: 9657:9670 ioctl 40046207 0 returned -16 [ 584.743420] binder: 9657:9670 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.743525] binder: 9657:9670 transaction failed 29201/-22, size 40-16 line 3197 [ 584.746734] binder: BINDER_SET_CONTEXT_MGR already set [ 584.746742] binder: 9666:9671 ioctl 40046207 0 returned -16 [ 584.756007] binder: 9660:9663 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.756098] binder: 9660:9663 transaction failed 29201/-22, size 40-16 line 3197 [ 584.767354] binder: BINDER_SET_CONTEXT_MGR already set [ 584.767361] binder: 9669:9676 ioctl 40046207 0 returned -16 [ 584.768131] binder: 9669:9676 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.768215] binder: 9669:9676 transaction failed 29201/-22, size 40-16 line 3197 [ 584.794071] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.797229] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.806061] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.806121] binder: send failed reply for transaction 46542 to 9666:9671 [ 584.815687] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.817226] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.829712] binder: undelivered TRANSACTION_COMPLETE [ 584.829726] binder: undelivered TRANSACTION_ERROR: 29189 [ 584.851718] binder: 9697:9703 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.851805] binder: 9697:9703 transaction failed 29201/-22, size 40-16 line 3197 [ 584.861218] binder: 9698:9704 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.861305] binder: 9698:9704 transaction failed 29201/-22, size 40-16 line 3197 [ 584.863365] binder: 9694:9702 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.863421] binder: 9694:9702 transaction failed 29201/-22, size 0-16 line 3197 [ 584.864517] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.865044] binder: BINDER_SET_CONTEXT_MGR already set [ 584.865051] binder: 9700:9706 ioctl 40046207 0 returned -16 [ 584.870866] binder: 9695:9705 got transaction with invalid offset (0, min 0 max 0) or object. [ 584.870920] binder: 9695:9705 transaction failed 29201/-22, size 0-16 line 3197 [ 584.875827] binder: BINDER_SET_CONTEXT_MGR already set [ 584.875834] binder: 9696:9707 ioctl 40046207 0 returned -16 [ 584.876661] binder: 9696:9707 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.876740] binder: 9696:9707 transaction failed 29201/-22, size 40-16 line 3197 [ 584.896633] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.917429] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.933009] binder: BINDER_SET_CONTEXT_MGR already set [ 584.933017] binder: 9715:9724 ioctl 40046207 0 returned -16 [ 584.935247] binder: 9715:9724 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.935334] binder: 9715:9724 transaction failed 29201/-22, size 40-16 line 3197 [ 584.936367] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.936422] binder: send failed reply for transaction 46562 to 9700:9706 [ 584.947404] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.959550] binder: 9728:9729 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.959637] binder: 9728:9729 transaction failed 29201/-22, size 40-16 line 3197 [ 584.960835] binder: undelivered TRANSACTION_COMPLETE [ 584.960849] binder: undelivered TRANSACTION_ERROR: 29189 [ 584.960933] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.973736] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.983562] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.988232] binder: 9730:9732 got transaction with invalid offset (0, min 24 max 40) or object. [ 584.988319] binder: 9730:9732 transaction failed 29201/-22, size 40-16 line 3197 [ 584.999583] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.012320] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.038257] binder: 9738:9743 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.038344] binder: 9738:9743 transaction failed 29201/-22, size 40-16 line 3197 [ 585.044617] binder: BINDER_SET_CONTEXT_MGR already set [ 585.044624] binder: 9741:9748 ioctl 40046207 0 returned -16 [ 585.055714] binder: BINDER_SET_CONTEXT_MGR already set [ 585.055722] binder: 9742:9747 ioctl 40046207 0 returned -16 [ 585.056672] binder: 9742:9747 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.056761] binder: 9742:9747 transaction failed 29201/-22, size 40-16 line 3197 [ 585.057109] binder: 9739:9749 got transaction with invalid offset (0, min 0 max 0) or object. [ 585.057159] binder: 9739:9749 transaction failed 29201/-22, size 0-16 line 3197 [ 585.057540] binder: 9744:9751 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.057627] binder: 9744:9751 transaction failed 29201/-22, size 40-16 line 3197 [ 585.064567] binder_alloc: 9746: binder_alloc_buf, no vma [ 585.064606] binder: 9746:9752 transaction failed 29189/-3, size 0-16 line 3134 [ 585.065632] binder: BINDER_SET_CONTEXT_MGR already set [ 585.065640] binder: 9740:9750 ioctl 40046207 0 returned -16 [ 585.066484] binder: 9740:9750 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.066570] binder: 9740:9750 transaction failed 29201/-22, size 40-16 line 3197 [ 585.085330] binder: 9745:9755 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.085414] binder: 9745:9755 transaction failed 29201/-22, size 40-16 line 3197 [ 585.096113] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.096166] binder: send failed reply for transaction 46585 to 9741:9748 [ 585.119363] binder: undelivered TRANSACTION_COMPLETE [ 585.119378] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.123719] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.128504] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.128596] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.145893] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.153294] binder: 9773:9774 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.153383] binder: 9773:9774 transaction failed 29201/-22, size 40-16 line 3197 [ 585.162840] binder: BINDER_SET_CONTEXT_MGR already set [ 585.162848] binder: 9777:9786 ioctl 40046207 0 returned -16 [ 585.163757] binder: 9777:9786 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.164512] binder: 9777:9786 transaction failed 29201/-22, size 40-16 line 3197 [ 585.171322] binder: 9782:9784 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.171399] binder: BINDER_SET_CONTEXT_MGR already set [ 585.171406] binder: 9781:9789 ioctl 40046207 0 returned -16 [ 585.171415] binder: 9782:9784 transaction failed 29201/-22, size 40-16 line 3197 [ 585.172219] binder: 9781:9789 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.172306] binder: 9781:9789 transaction failed 29201/-22, size 40-16 line 3197 [ 585.175814] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.180609] binder_alloc: 9780: binder_alloc_buf, no vma [ 585.180647] binder: 9780:9790 transaction failed 29189/-3, size 0-16 line 3134 [ 585.189969] binder: 9785:9794 got transaction with invalid offset (0, min 0 max 0) or object. [ 585.190027] binder: 9785:9794 transaction failed 29201/-22, size 0-16 line 3197 [ 585.195080] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.219844] binder: 9796:9798 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.219934] binder: 9796:9798 transaction failed 29201/-22, size 40-16 line 3197 [ 585.224809] binder: BINDER_SET_CONTEXT_MGR already set [ 585.224818] binder: 9801:9805 ioctl 40046207 0 returned -16 [ 585.229030] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.229906] binder: 9801:9805 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.230684] binder: 9801:9805 transaction failed 29201/-22, size 40-16 line 3197 [ 585.238574] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.253207] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.261214] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.264560] binder: BINDER_SET_CONTEXT_MGR already set [ 585.264567] binder: 9812:9814 ioctl 40046207 0 returned -16 [ 585.266415] binder: 9812:9814 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.266499] binder: 9812:9814 transaction failed 29201/-22, size 40-16 line 3197 [ 585.274364] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.275246] binder_alloc: 9813: binder_alloc_buf, no vma [ 585.275286] binder: 9813:9818 transaction failed 29189/-3, size 0-16 line 3134 [ 585.278806] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.282441] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.300896] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.309189] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.337019] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.351685] binder: 9826:9832 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.351772] binder: 9826:9832 transaction failed 29201/-22, size 40-16 line 3197 [ 585.356135] binder: 9828:9833 got transaction with invalid offset (0, min 0 max 0) or object. [ 585.356186] binder: 9828:9833 transaction failed 29201/-22, size 0-16 line 3197 [ 585.358909] binder: BINDER_SET_CONTEXT_MGR already set [ 585.358916] binder: 9825:9827 ioctl 40046207 0 returned -16 [ 585.359944] binder: BINDER_SET_CONTEXT_MGR already set [ 585.359952] binder: 9831:9834 ioctl 40046207 0 returned -16 [ 585.359957] binder: 9825:9827 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.360042] binder: 9825:9827 transaction failed 29201/-22, size 40-16 line 3197 [ 585.360663] binder_alloc: 9829: binder_alloc_buf, no vma [ 585.360699] binder: 9829:9837 transaction failed 29189/-3, size 0-16 line 3134 [ 585.360794] binder: 9831:9834 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.360882] binder: 9831:9834 transaction failed 29201/-22, size 40-16 line 3197 [ 585.372052] binder: 9824:9836 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.372142] binder: 9824:9836 transaction failed 29201/-22, size 40-16 line 3197 [ 585.391361] binder: BINDER_SET_CONTEXT_MGR already set [ 585.391369] binder: 9835:9838 ioctl 40046207 0 returned -16 [ 585.392741] binder: 9835:9838 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.392829] binder: 9835:9838 transaction failed 29201/-22, size 40-16 line 3197 [ 585.399366] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.402880] binder: 9830:9842 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.403116] binder: 9830:9842 transaction failed 29201/-22, size 40-16 line 3197 [ 585.420107] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.437366] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.440538] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.452316] binder_alloc: 9856: binder_alloc_buf, no vma [ 585.452359] binder: 9856:9860 transaction failed 29189/-3, size 0-16 line 3134 [ 585.459180] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.459674] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.476495] binder: 9865:9867 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.476588] binder: 9865:9867 transaction failed 29201/-22, size 40-16 line 3197 [ 585.480275] binder: 9862:9869 got transaction with invalid offset (0, min 0 max 0) or object. [ 585.480463] binder: 9862:9869 transaction failed 29201/-22, size 0-16 line 3197 [ 585.487656] binder: 9872:9874 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.487803] binder: 9872:9874 transaction failed 29201/-22, size 40-16 line 3197 [ 585.505798] binder: BINDER_SET_CONTEXT_MGR already set [ 585.505805] binder: 9873:9876 ioctl 40046207 0 returned -16 [ 585.505935] binder: BINDER_SET_CONTEXT_MGR already set [ 585.505941] binder: 9866:9871 ioctl 40046207 0 returned -16 [ 585.506670] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.507020] binder: 9866:9871 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.507118] binder: 9866:9871 transaction failed 29201/-22, size 40-16 line 3197 [ 585.507124] binder: 9873:9876 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.507232] binder: 9873:9876 transaction failed 29201/-22, size 40-16 line 3197 [ 585.518410] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.525004] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.552903] binder_alloc: 9887: binder_alloc_buf, no vma [ 585.552951] binder: 9887:9892 transaction failed 29189/-3, size 0-16 line 3134 [ 585.559515] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.562935] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.574538] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.588209] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.588351] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.589475] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.597350] binder: 9895:9897 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.597435] binder: 9895:9897 transaction failed 29201/-22, size 40-16 line 3197 [ 585.616131] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.650186] binder: 9900:9908 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.650267] binder: 9900:9908 transaction failed 29201/-22, size 40-16 line 3197 [ 585.650548] binder: 9904:9907 got transaction with invalid offset (0, min 0 max 0) or object. [ 585.650600] binder: 9904:9907 transaction failed 29201/-22, size 0-16 line 3197 [ 585.651191] binder: 9905:9910 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.651279] binder: 9905:9910 transaction failed 29201/-22, size 40-16 line 3197 [ 585.654636] binder_alloc: 9901: binder_alloc_buf, no vma [ 585.654674] binder: 9901:9913 transaction failed 29189/-3, size 0-16 line 3134 [ 585.656274] binder_alloc: 9906: binder_alloc_buf, no vma [ 585.656313] binder: 9906:9912 transaction failed 29189/-3, size 0-16 line 3134 [ 585.656886] binder: BINDER_SET_CONTEXT_MGR already set [ 585.656892] binder: 9902:9909 ioctl 40046207 0 returned -16 [ 585.657869] binder: 9902:9909 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.657953] binder: 9902:9909 transaction failed 29201/-22, size 40-16 line 3197 [ 585.668760] binder: BINDER_SET_CONTEXT_MGR already set [ 585.668767] binder: 9903:9911 ioctl 40046207 0 returned -16 [ 585.669879] binder: 9903:9911 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.669970] binder: 9903:9911 transaction failed 29201/-22, size 40-16 line 3197 [ 585.691776] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.709407] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.718233] binder: 9914:9929 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.718322] binder: 9914:9929 transaction failed 29201/-22, size 40-16 line 3197 [ 585.720251] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.732117] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.737095] binder: 9933:9936 transaction failed 29189/-22, size 0-16 line 3011 [ 585.744980] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.749061] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.756331] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.776196] binder: 9935:9937 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.776282] binder: 9935:9937 transaction failed 29201/-22, size 40-16 line 3197 [ 585.781556] binder: 9941:9946 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.781753] binder: 9941:9946 transaction failed 29201/-22, size 40-16 line 3197 [ 585.787568] binder: BINDER_SET_CONTEXT_MGR already set [ 585.787576] binder: 9942:9952 ioctl 40046207 0 returned -16 [ 585.788533] binder: 9942:9952 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.789789] binder: 9942:9952 transaction failed 29201/-22, size 40-16 line 3197 [ 585.790037] binder: BINDER_SET_CONTEXT_MGR already set [ 585.790043] binder: 9948:9951 ioctl 40046207 0 returned -16 [ 585.792200] binder: 9948:9951 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.792389] binder: 9948:9951 transaction failed 29201/-22, size 40-16 line 3197 [ 585.795492] binder: 9947:9954 got transaction with invalid offset (0, min 0 max 0) or object. [ 585.796747] binder: 9947:9954 transaction failed 29201/-22, size 0-16 line 3197 [ 585.800122] binder_alloc: 9939: binder_alloc_buf, no vma [ 585.800157] binder: 9939:9949 transaction failed 29189/-3, size 0-16 line 3134 [ 585.816738] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.822427] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.824206] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.826638] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.847748] binder: 9963:9966 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.847840] binder: 9963:9966 transaction failed 29201/-22, size 40-16 line 3197 [ 585.865699] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.869594] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.878315] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.884853] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.895041] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.938891] binder: 9975:9980 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.938979] binder: 9975:9980 transaction failed 29201/-22, size 40-16 line 3197 [ 585.947278] binder: 9977:9984 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.947368] binder: 9977:9984 transaction failed 29201/-22, size 40-16 line 3197 [ 585.950694] binder: 9976:9985 got transaction with invalid offset (0, min 0 max 0) or object. [ 585.950752] binder: 9976:9985 transaction failed 29201/-22, size 0-16 line 3197 [ 585.952716] binder: 9981:9987 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.952806] binder: 9981:9987 transaction failed 29201/-22, size 40-16 line 3197 [ 585.953109] binder: BINDER_SET_CONTEXT_MGR already set [ 585.953116] binder: 9978:9986 ioctl 40046207 0 returned -16 [ 585.954117] binder: 9979:9983 transaction failed 29189/-22, size 0-16 line 3011 [ 585.954186] binder: BINDER_SET_CONTEXT_MGR already set [ 585.954192] binder: 9973:9982 ioctl 40046207 0 returned -16 [ 585.955914] binder: 9973:9982 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.955999] binder: 9973:9982 transaction failed 29201/-22, size 40-16 line 3197 [ 585.956670] binder: 9978:9986 got transaction with invalid offset (0, min 24 max 40) or object. [ 585.956756] binder: 9978:9986 transaction failed 29201/-22, size 40-16 line 3197 [ 585.967586] binder_alloc: 9974: binder_alloc_buf, no vma [ 585.967624] binder: 9974:9988 transaction failed 29189/-3, size 0-16 line 3134 [ 586.008317] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.026535] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.039509] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.050391] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.050506] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.050704] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.054337] binder: 10012:10013 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.054426] binder: 10012:10013 transaction failed 29201/-22, size 40-16 line 3197 [ 586.056084] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.078601] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.089199] binder: 10015:10020 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.089285] binder: 10015:10020 transaction failed 29201/-22, size 40-16 line 3197 [ 586.089473] binder: 10017:10021 transaction failed 29189/-22, size 0-16 line 3011 [ 586.099130] binder: BINDER_SET_CONTEXT_MGR already set [ 586.099137] binder: 10018:10026 ioctl 40046207 0 returned -16 [ 586.100068] binder: 10018:10026 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.100148] binder: 10018:10026 transaction failed 29201/-22, size 40-16 line 3197 [ 586.100588] binder: BINDER_SET_CONTEXT_MGR already set [ 586.100595] binder: 10019:10025 ioctl 40046207 0 returned -16 [ 586.101364] binder: 10019:10025 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.101451] binder: 10019:10025 transaction failed 29201/-22, size 40-16 line 3197 [ 586.103450] binder: 10016:10027 got transaction with invalid offset (0, min 0 max 0) or object. [ 586.103697] binder: 10016:10027 transaction failed 29201/-22, size 0-16 line 3197 [ 586.122101] binder_alloc: 10024: binder_alloc_buf, no vma [ 586.122139] binder: 10024:10031 transaction failed 29189/-3, size 0-16 line 3134 [ 586.130209] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.144365] binder: 10023:10037 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.144455] binder: 10023:10037 transaction failed 29201/-22, size 40-16 line 3197 [ 586.151334] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.164588] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.180629] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.180714] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.183624] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.188160] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.202173] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.228146] binder: 10055:10058 got transaction with invalid offset (0, min 0 max 0) or object. [ 586.228199] binder: 10055:10058 transaction failed 29201/-22, size 0-16 line 3197 [ 586.234998] binder: 10053:10059 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.235088] binder: 10053:10059 transaction failed 29201/-22, size 40-16 line 3197 [ 586.237571] binder: BINDER_SET_CONTEXT_MGR already set [ 586.237579] binder: 10054:10063 ioctl 40046207 0 returned -16 [ 586.237921] binder: 10051:10060 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.238188] binder: 10051:10060 transaction failed 29201/-22, size 40-16 line 3197 [ 586.238540] binder: 10054:10063 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.238626] binder: 10054:10063 transaction failed 29201/-22, size 40-16 line 3197 [ 586.244790] binder: BINDER_SET_CONTEXT_MGR already set [ 586.244798] binder: 10052:10061 ioctl 40046207 0 returned -16 [ 586.247719] binder_alloc: 10056: binder_alloc_buf, no vma [ 586.247761] binder: 10056:10064 transaction failed 29189/-3, size 0-16 line 3134 [ 586.283142] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.299502] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.304581] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.327876] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.342494] binder: 10065:10080 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.342587] binder: 10065:10080 transaction failed 29201/-22, size 40-16 line 3197 [ 586.344255] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.357145] binder: 10090:10092 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.357236] binder: 10090:10092 transaction failed 29201/-22, size 40-16 line 3197 [ 586.366282] binder: 10091:10098 got transaction with invalid offset (0, min 0 max 0) or object. [ 586.366336] binder: 10091:10098 transaction failed 29201/-22, size 0-16 line 3197 [ 586.368881] binder: BINDER_SET_CONTEXT_MGR already set [ 586.368888] binder: 10088:10097 ioctl 40046207 0 returned -16 [ 586.369455] binder: 10089:10099 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.369549] binder: 10089:10099 transaction failed 29201/-22, size 40-16 line 3197 [ 586.382559] binder: BINDER_SET_CONTEXT_MGR already set [ 586.382567] binder: 10095:10103 ioctl 40046207 0 returned -16 [ 586.383319] binder_alloc: 10093: binder_alloc_buf, no vma [ 586.383356] binder: 10093:10096 transaction failed 29189/-3, size 0-16 line 3134 [ 586.384529] binder: 10095:10103 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.384621] binder: 10095:10103 transaction failed 29201/-22, size 40-16 line 3197 [ 586.425276] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.433039] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.446949] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.463006] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.477074] binder: BINDER_SET_CONTEXT_MGR already set [ 586.477082] binder: 10124:10126 ioctl 40046207 0 returned -16 [ 586.478475] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.479529] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.485827] binder: 10125:10127 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.485920] binder: 10125:10127 transaction failed 29201/-22, size 40-16 line 3197 [ 586.491277] binder: 10123:10129 got transaction with invalid offset (0, min 0 max 0) or object. [ 586.491333] binder: 10123:10129 transaction failed 29201/-22, size 0-16 line 3197 [ 586.507161] binder: 10132:10133 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.507252] binder: 10132:10133 transaction failed 29201/-22, size 40-16 line 3197 [ 586.519166] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.544321] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.555776] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.585852] binder: 10143:10145 got transaction with invalid offset (0, min 0 max 0) or object. [ 586.586104] binder: 10143:10145 transaction failed 29201/-22, size 0-16 line 3197 [ 586.596930] binder: 10142:10150 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.601989] binder: 10146:10151 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.602075] binder: 10146:10151 transaction failed 29201/-22, size 40-16 line 3197 [ 586.602315] binder: 10142:10150 transaction failed 29201/-22, size 40-16 line 3197 [ 586.603672] binder: BINDER_SET_CONTEXT_MGR already set [ 586.603679] binder: 10144:10152 ioctl 40046207 0 returned -16 [ 586.604503] binder: 10144:10152 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.604521] binder_alloc: 10141: binder_alloc_buf, no vma [ 586.604557] binder: 10141:10148 transaction failed 29189/-3, size 0-16 line 3134 [ 586.604595] binder: 10144:10152 transaction failed 29201/-22, size 40-16 line 3197 [ 586.608289] binder: 10147:10154 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.608377] binder: 10147:10154 transaction failed 29201/-22, size 40-16 line 3197 [ 586.634497] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.653470] binder: 10155:10169 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.653555] binder: 10155:10169 transaction failed 29201/-22, size 40-16 line 3197 [ 586.662908] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.665421] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.669026] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.694164] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.704818] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.718871] binder: 10177:10180 got transaction with invalid offset (0, min 0 max 0) or object. [ 586.718930] binder: 10177:10180 transaction failed 29201/-22, size 0-16 line 3197 [ 586.721533] binder: 10176:10181 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.721620] binder: 10176:10181 transaction failed 29201/-22, size 40-16 line 3197 [ 586.727188] binder: BINDER_SET_CONTEXT_MGR already set [ 586.727196] binder: 10182:10184 ioctl 40046207 0 returned -16 [ 586.727977] binder: 10182:10184 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.728053] binder: 10182:10184 transaction failed 29201/-22, size 40-16 line 3197 [ 586.730925] binder: 10175:10179 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.731074] binder: 10175:10179 transaction failed 29201/-22, size 40-16 line 3197 [ 586.741306] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.747404] binder: 10185:10191 transaction failed 29189/-22, size 40-16 line 3011 [ 586.778712] binder_alloc: 10187: binder_alloc_buf, no vma [ 586.778753] binder: 10187:10198 transaction failed 29189/-3, size 0-16 line 3134 [ 586.799146] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.799214] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.800987] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.810234] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.831493] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.845688] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.878932] binder: 10213:10221 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.879019] binder: 10213:10221 transaction failed 29201/-22, size 40-16 line 3197 [ 586.879292] binder: 10211:10219 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.879376] binder: 10211:10219 transaction failed 29201/-22, size 40-16 line 3197 [ 586.884656] binder: 10215:10222 transaction failed 29189/-22, size 40-16 line 3011 [ 586.887269] binder: 10216:10220 got transaction with invalid offset (0, min 0 max 0) or object. [ 586.887325] binder: 10216:10220 transaction failed 29201/-22, size 0-8 line 3197 [ 586.888816] binder: 10210:10218 got transaction with invalid offset (0, min 0 max 0) or object. [ 586.888870] binder: 10210:10218 transaction failed 29201/-22, size 0-16 line 3197 [ 586.892740] binder: BINDER_SET_CONTEXT_MGR already set [ 586.892748] binder: 10212:10223 ioctl 40046207 0 returned -16 [ 586.893745] binder: 10212:10223 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.893828] binder: 10212:10223 transaction failed 29201/-22, size 40-16 line 3197 [ 586.904866] binder_alloc: 10217: binder_alloc_buf, no vma [ 586.904901] binder: 10217:10227 transaction failed 29189/-3, size 0-16 line 3134 [ 586.933402] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.938041] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.961745] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.962180] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.971589] binder: 10245:10248 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.971662] binder: 10245:10248 transaction failed 29201/-22, size 40-16 line 3197 [ 586.978526] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.978848] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.995231] binder: 10214:10229 got transaction with invalid offset (0, min 24 max 40) or object. [ 586.995322] binder: 10214:10229 transaction failed 29201/-22, size 40-16 line 3197 [ 586.998934] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.005695] binder: BINDER_SET_CONTEXT_MGR already set [ 587.005703] binder: 10250:10254 ioctl 40046207 0 returned -16 [ 587.006549] binder: 10250:10254 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.006641] binder: 10250:10254 transaction failed 29201/-22, size 40-16 line 3197 [ 587.009116] binder: 10244:10247 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.009172] binder: 10244:10247 transaction failed 29201/-22, size 0-16 line 3197 [ 587.012177] binder: 10249:10255 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.012227] binder: 10249:10255 transaction failed 29201/-22, size 0-8 line 3197 [ 587.013438] binder: 10253:10258 transaction failed 29189/-22, size 40-16 line 3011 [ 587.039692] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.064758] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.079763] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.079850] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.087846] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.102404] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.133978] binder: 10273:10274 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.134070] binder: 10273:10274 transaction failed 29201/-22, size 40-16 line 3197 [ 587.141134] binder: BINDER_SET_CONTEXT_MGR already set [ 587.141142] binder: 10277:10282 ioctl 40046207 0 returned -16 [ 587.141387] binder: 10275:10280 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.141438] binder: 10275:10280 transaction failed 29201/-22, size 0-16 line 3197 [ 587.142266] binder: 10277:10282 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.142354] binder: 10277:10282 transaction failed 29201/-22, size 40-16 line 3197 [ 587.144490] binder: BINDER_SET_CONTEXT_MGR already set [ 587.144498] binder: 10272:10283 ioctl 40046207 0 returned -16 [ 587.145426] binder_alloc: 10276: binder_alloc_buf, no vma [ 587.145462] binder: 10276:10281 transaction failed 29189/-3, size 0-16 line 3134 [ 587.145900] binder_alloc: 10278: binder_alloc_buf, no vma [ 587.145940] binder: 10278:10284 transaction failed 29189/-3, size 40-16 line 3134 [ 587.153321] binder: 10279:10286 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.153375] binder: 10279:10286 transaction failed 29201/-22, size 0-8 line 3197 [ 587.157696] binder: 10272:10283 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.157789] binder: 10272:10283 transaction failed 29201/-22, size 40-16 line 3197 [ 587.193123] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.199385] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.213328] binder: 10285:10290 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.213418] binder: 10285:10290 transaction failed 29201/-22, size 40-16 line 3197 [ 587.226346] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.229858] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.229909] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.231943] binder: 10307:10310 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.232036] binder: 10307:10310 transaction failed 29201/-22, size 40-16 line 3197 [ 587.239830] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.259441] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.272746] binder_alloc: 10309: binder_alloc_buf, no vma [ 587.272784] binder: 10309:10312 transaction failed 29189/-3, size 40-16 line 3134 [ 587.285429] binder: 10316:10321 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.285487] binder: 10316:10321 transaction failed 29201/-22, size 0-8 line 3197 [ 587.302248] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.305354] binder: 10318:10328 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.305408] binder: 10318:10328 transaction failed 29201/-22, size 0-16 line 3197 [ 587.305547] binder: BINDER_SET_CONTEXT_MGR already set [ 587.305553] binder: 10317:10327 ioctl 40046207 0 returned -16 [ 587.307057] binder_alloc: 10307: binder_alloc_buf, no vma [ 587.307098] binder: 10317:10327 transaction failed 29189/-3, size 40-16 line 3134 [ 587.309730] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.326277] binder: 10322:10326 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.326367] binder: 10322:10326 transaction failed 29201/-22, size 40-16 line 3197 [ 587.329926] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.333300] binder_alloc: 10320: binder_alloc_buf, no vma [ 587.333332] binder: 10320:10325 transaction failed 29189/-3, size 0-16 line 3134 [ 587.356371] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.360269] binder: BINDER_SET_CONTEXT_MGR already set [ 587.360278] binder: 10331:10335 ioctl 40046207 0 returned -16 [ 587.361419] binder: 10331:10335 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.361551] binder: 10331:10335 transaction failed 29201/-22, size 40-16 line 3197 [ 587.371826] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.386112] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.390123] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.395409] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.409993] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.438560] binder_alloc: 10349: binder_alloc_buf, no vma [ 587.438598] binder: 10349:10357 transaction failed 29189/-3, size 40-16 line 3134 [ 587.439946] binder: 10348:10355 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.440002] binder: 10348:10355 transaction failed 29201/-22, size 0-16 line 3197 [ 587.445819] binder: 10356:10360 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.446213] binder: 10356:10360 transaction failed 29201/-22, size 40-16 line 3197 [ 587.451272] binder: BINDER_SET_CONTEXT_MGR already set [ 587.451279] binder: 10354:10362 ioctl 40046207 0 returned -16 [ 587.452037] binder: 10354:10362 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.452964] binder: 10354:10362 transaction failed 29201/-22, size 40-16 line 3197 [ 587.453049] binder: 10353:10359 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.453105] binder: 10353:10359 transaction failed 29201/-22, size 0-8 line 3197 [ 587.454575] binder: BINDER_SET_CONTEXT_MGR already set [ 587.454582] binder: 10352:10361 ioctl 40046207 0 returned -16 [ 587.456033] binder: 10352:10361 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.456119] binder: 10352:10361 transaction failed 29201/-22, size 40-16 line 3197 [ 587.460451] binder_alloc: 10351: binder_alloc_buf, no vma [ 587.460491] binder: 10351:10358 transaction failed 29189/-3, size 0-16 line 3134 [ 587.474366] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.483134] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.509827] binder: 10380:10382 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.509917] binder: 10380:10382 transaction failed 29201/-22, size 40-16 line 3197 [ 587.515727] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.526359] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.536856] binder: 10350:10367 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.536957] binder: 10350:10367 transaction failed 29201/-22, size 40-16 line 3197 [ 587.551262] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.551642] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.553919] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.556876] binder: 10387:10391 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.557266] binder: 10387:10391 transaction failed 29201/-22, size 0-16 line 3197 [ 587.559249] binder_alloc: 10386: binder_alloc_buf, no vma [ 587.559286] binder: 10386:10390 transaction failed 29189/-3, size 0-16 line 3134 [ 587.568270] binder: 10388:10392 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.568359] binder: 10388:10392 transaction failed 29201/-22, size 40-16 line 3197 [ 587.582949] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.592861] binder: BINDER_SET_CONTEXT_MGR already set [ 587.592869] binder: 10395:10406 ioctl 40046207 0 returned -16 [ 587.593654] binder: 10395:10406 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.593744] binder: 10395:10406 transaction failed 29201/-22, size 40-16 line 3197 [ 587.604473] binder: BINDER_SET_CONTEXT_MGR already set [ 587.604481] binder: 10397:10403 ioctl 40046207 0 returned -16 [ 587.605332] binder: 10397:10403 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.606717] binder: 10397:10403 transaction failed 29201/-22, size 40-16 line 3197 [ 587.611542] binder: 10396:10405 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.611600] binder: 10396:10405 transaction failed 29201/-22, size 0-8 line 3197 [ 587.614746] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.628981] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.653092] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.653283] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.681369] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.693005] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.704276] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.743130] binder: 10422:10426 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.743188] binder: 10422:10426 transaction failed 29201/-22, size 0-16 line 3197 [ 587.745073] binder: 10425:10430 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.745161] binder: 10425:10430 transaction failed 29201/-22, size 40-16 line 3197 [ 587.752526] binder_alloc: 10421: binder_alloc_buf, no vma [ 587.752564] binder: 10421:10428 transaction failed 29189/-3, size 0-16 line 3134 [ 587.754539] binder: 10423:10434 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.754609] binder: 10423:10434 transaction failed 29201/-22, size 40-16 line 3197 [ 587.761087] binder: BINDER_SET_CONTEXT_MGR already set [ 587.761094] binder: 10429:10435 ioctl 40046207 0 returned -16 [ 587.762106] binder: 10429:10435 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.762190] binder: 10429:10435 transaction failed 29201/-22, size 40-16 line 3197 [ 587.764867] binder: 10427:10432 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.764920] binder: 10427:10432 transaction failed 29201/-22, size 0-16 line 3197 [ 587.786202] binder: BINDER_SET_CONTEXT_MGR already set [ 587.786211] binder: 10441:10446 ioctl 40046207 0 returned -16 [ 587.788729] binder: 10441:10446 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.788818] binder: 10441:10446 transaction failed 29201/-22, size 40-16 line 3197 [ 587.791763] binder: 10431:10436 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.791856] binder: 10431:10436 transaction failed 29201/-22, size 40-16 line 3197 [ 587.797266] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.818069] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.828408] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.837013] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.838801] binder: 10454:10459 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.839249] binder: 10454:10459 transaction failed 29201/-22, size 40-16 line 3197 [ 587.852854] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.856751] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.886346] binder: 10460:10471 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.886403] binder: 10460:10471 transaction failed 29201/-22, size 0-16 line 3197 [ 587.886787] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.892711] binder: BINDER_SET_CONTEXT_MGR already set [ 587.892719] binder: 10469:10474 ioctl 40046207 0 returned -16 [ 587.893526] binder: 10469:10474 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.893615] binder: 10469:10474 transaction failed 29201/-22, size 40-16 line 3197 [ 587.896864] binder: 10465:10473 got transaction with invalid offset (0, min 0 max 0) or object. [ 587.896914] binder: 10465:10473 transaction failed 29201/-22, size 0-16 line 3197 [ 587.898609] binder_alloc: 10466: binder_alloc_buf, no vma [ 587.898646] binder: 10466:10472 transaction failed 29189/-3, size 0-16 line 3134 [ 587.906159] binder: BINDER_SET_CONTEXT_MGR already set [ 587.906167] binder: 10468:10475 ioctl 40046207 0 returned -16 [ 587.907882] binder: 10468:10475 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.907966] binder: 10468:10475 transaction failed 29201/-22, size 40-16 line 3197 [ 587.919119] binder: BINDER_SET_CONTEXT_MGR already set [ 587.919129] binder: 10477:10480 ioctl 40046207 0 returned -16 [ 587.919949] binder: 10477:10480 got transaction with invalid offset (0, min 24 max 40) or object. [ 587.920037] binder: 10477:10480 transaction failed 29201/-22, size 40-16 line 3197 [ 587.930784] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.934518] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.959624] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.965697] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.973880] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.973950] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.002932] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.005115] binder: 10499:10501 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.005164] binder: 10499:10501 transaction failed 29201/-22, size 0-16 line 3197 [ 588.010676] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.021575] binder_alloc: 10500: binder_alloc_buf, no vma [ 588.021612] binder: 10500:10505 transaction failed 29189/-3, size 0-16 line 3134 [ 588.024827] binder: 10502:10504 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.024923] binder: 10502:10504 transaction failed 29201/-22, size 40-16 line 3197 [ 588.036006] binder: 10498:10506 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.036092] binder: 10498:10506 transaction failed 29201/-22, size 40-16 line 3197 [ 588.042763] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.065213] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.069161] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.069652] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.093660] binder: 10516:10520 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.093749] binder: 10516:10520 transaction failed 29201/-22, size 40-16 line 3197 [ 588.104635] binder: BINDER_SET_CONTEXT_MGR already set [ 588.104643] binder: 10518:10526 ioctl 40046207 0 returned -16 [ 588.105969] binder: 10518:10526 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.106544] binder: 10518:10526 transaction failed 29201/-22, size 40-16 line 3197 [ 588.109742] binder: BINDER_SET_CONTEXT_MGR already set [ 588.109750] binder: 10521:10527 ioctl 40046207 0 returned -16 [ 588.109900] binder: 10521:10527 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.109954] binder: 10521:10527 transaction failed 29201/-22, size 0-16 line 3197 [ 588.114577] binder: 10519:10522 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.114633] binder: 10519:10522 transaction failed 29201/-22, size 0-16 line 3197 [ 588.139741] binder_alloc: 10525: binder_alloc_buf, no vma [ 588.139780] binder: 10525:10528 transaction failed 29189/-3, size 0-16 line 3134 [ 588.144381] binder: BINDER_SET_CONTEXT_MGR already set [ 588.144388] binder: 10524:10531 ioctl 40046207 0 returned -16 [ 588.145568] binder: 10524:10531 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.145655] binder: 10524:10531 transaction failed 29201/-22, size 40-16 line 3197 [ 588.157135] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.166949] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.188632] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.195403] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.195704] binder: 10535:10544 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.195799] binder: 10535:10544 transaction failed 29201/-22, size 40-16 line 3197 [ 588.201235] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.209643] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.230193] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.263440] binder: 10554:10561 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.263528] binder: 10554:10561 transaction failed 29201/-22, size 40-16 line 3197 [ 588.269654] binder: BINDER_SET_CONTEXT_MGR already set [ 588.269662] binder: 10560:10563 ioctl 40046207 0 returned -16 [ 588.270498] binder: BINDER_SET_CONTEXT_MGR already set [ 588.270505] binder: 10557:10564 ioctl 40046207 0 returned -16 [ 588.270868] binder: 10560:10563 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.270955] binder: 10560:10563 transaction failed 29201/-22, size 40-16 line 3197 [ 588.271079] binder: 10557:10564 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.271133] binder: 10557:10564 transaction failed 29201/-22, size 0-16 line 3197 [ 588.273914] binder: 10555:10562 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.274043] binder: 10555:10562 transaction failed 29201/-22, size 0-16 line 3197 [ 588.274327] binder: 10558:10566 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.274413] binder: 10558:10566 transaction failed 29201/-22, size 40-16 line 3197 [ 588.282379] binder: BINDER_SET_CONTEXT_MGR already set [ 588.282386] binder: 10559:10567 ioctl 40046207 0 returned -16 [ 588.282417] binder_alloc: 10556: binder_alloc_buf, no vma [ 588.282455] binder: 10556:10565 transaction failed 29189/-3, size 0-16 line 3134 [ 588.283245] binder: 10559:10567 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.283508] binder: 10559:10567 transaction failed 29201/-22, size 40-16 line 3197 [ 588.307538] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.326069] binder: 10569:10576 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.326160] binder: 10569:10576 transaction failed 29201/-22, size 40-16 line 3197 [ 588.331381] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.349215] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.358605] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.362093] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.374455] binder: 10589:10591 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.374547] binder: 10589:10591 transaction failed 29201/-22, size 40-16 line 3197 [ 588.377481] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.377564] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.395627] binder: 10592:10598 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.395685] binder: 10592:10598 transaction failed 29201/-22, size 0-16 line 3197 [ 588.398395] binder_alloc: 10590: binder_alloc_buf, no vma [ 588.398429] binder: 10590:10599 transaction failed 29189/-3, size 0-16 line 3134 [ 588.409091] binder: BINDER_SET_CONTEXT_MGR already set [ 588.409099] binder: 10595:10597 ioctl 40046207 0 returned -16 [ 588.412407] binder: 10595:10597 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.412497] binder: 10595:10597 transaction failed 29201/-22, size 40-16 line 3197 [ 588.420018] binder: BINDER_SET_CONTEXT_MGR already set [ 588.420025] binder: 10596:10605 ioctl 40046207 0 returned -16 [ 588.422317] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.422421] binder: 10596:10605 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.422507] binder: 10596:10605 transaction failed 29201/-22, size 40-16 line 3197 [ 588.425215] binder: 10602:10608 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.425271] binder: 10602:10608 transaction failed 29201/-22, size 0-16 line 3197 [ 588.434989] binder: 10601:10606 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.435075] binder: 10601:10606 transaction failed 29201/-22, size 40-16 line 3197 [ 588.442218] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.450289] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.459656] binder: 10612:10613 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.459712] binder: 10612:10613 transaction failed 29201/-22, size 0-16 line 3197 [ 588.478732] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.487825] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.491811] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.493471] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.515716] binder_alloc: 10625: binder_alloc_buf, no vma [ 588.515752] binder: 10625:10628 transaction failed 29189/-3, size 0-16 line 3134 [ 588.521194] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.525924] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.529969] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.538719] binder: 10629:10630 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.538811] binder: 10629:10630 transaction failed 29201/-22, size 40-16 line 3197 [ 588.554525] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.580713] binder: 10634:10636 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.580903] binder: 10634:10636 transaction failed 29201/-22, size 40-16 line 3197 [ 588.587659] binder: BINDER_SET_CONTEXT_MGR already set [ 588.587666] binder: 10637:10641 ioctl 40046207 0 returned -16 [ 588.588564] binder: 10637:10641 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.588651] binder: 10637:10641 transaction failed 29201/-22, size 40-16 line 3197 [ 588.593929] binder: 10639:10643 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.593981] binder: 10639:10643 transaction failed 29201/-22, size 0-16 line 3197 [ 588.597509] binder: 10635:10642 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.597565] binder: 10635:10642 transaction failed 29201/-22, size 0-16 line 3197 [ 588.599316] binder: 10638:10645 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.599403] binder: 10638:10645 transaction failed 29201/-22, size 40-16 line 3197 [ 588.602188] binder: BINDER_SET_CONTEXT_MGR already set [ 588.602195] binder: 10633:10644 ioctl 40046207 0 returned -16 [ 588.603115] binder: 10633:10644 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.603202] binder: 10633:10644 transaction failed 29201/-22, size 40-16 line 3197 [ 588.608902] binder_alloc: 10640: binder_alloc_buf, no vma [ 588.608940] binder: 10640:10646 transaction failed 29189/-3, size 0-16 line 3134 [ 588.645887] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.660811] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.668393] binder: 10649:10657 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.668485] binder: 10649:10657 transaction failed 29201/-22, size 40-16 line 3197 [ 588.672608] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.677177] binder: 10669:10671 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.677267] binder: 10669:10671 transaction failed 29201/-22, size 40-16 line 3197 [ 588.684303] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.709830] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.713329] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.713441] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.737171] binder: BINDER_SET_CONTEXT_MGR already set [ 588.737179] binder: 10672:10684 ioctl 40046207 0 returned -16 [ 588.738705] binder: 10672:10684 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.738801] binder: 10672:10684 transaction failed 29201/-22, size 40-16 line 3197 [ 588.741309] binder: 10673:10685 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.741363] binder: 10673:10685 transaction failed 29201/-22, size 0-16 line 3197 [ 588.744949] binder: 10675:10679 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.745001] binder: 10675:10679 transaction failed 29201/-22, size 0-16 line 3197 [ 588.747115] binder: 10678:10682 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.747200] binder: 10678:10682 transaction failed 29201/-22, size 40-16 line 3197 [ 588.749197] binder: BINDER_SET_CONTEXT_MGR already set [ 588.749203] binder: 10670:10680 ioctl 40046207 0 returned -16 [ 588.750884] binder: 10670:10680 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.750970] binder: 10670:10680 transaction failed 29201/-22, size 40-16 line 3197 [ 588.767410] binder_alloc: 10681: binder_alloc_buf, no vma [ 588.767443] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.770571] binder: 10681:10689 transaction failed 29189/-3, size 0-16 line 3134 [ 588.803933] binder: 10699:10706 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.804023] binder: 10699:10706 transaction failed 29201/-22, size 40-16 line 3197 [ 588.804932] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.816014] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.833552] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.833599] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.833736] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.838807] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.844307] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.858679] binder: 10710:10713 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.858734] binder: 10710:10713 transaction failed 29201/-22, size 0-16 line 3197 [ 588.867476] binder: BINDER_SET_CONTEXT_MGR already set [ 588.867484] binder: 10712:10716 ioctl 40046207 0 returned -16 [ 588.868312] binder: 10712:10716 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.868398] binder: 10712:10716 transaction failed 29201/-22, size 40-16 line 3197 [ 588.875506] binder: 10708:10711 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.875595] binder: 10708:10711 transaction failed 29201/-22, size 40-16 line 3197 [ 588.889824] binder: 10719:10723 got transaction with invalid offset (0, min 0 max 0) or object. [ 588.889879] binder: 10719:10723 transaction failed 29201/-22, size 0-16 line 3197 [ 588.894705] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.903948] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.907839] binder: 10714:10718 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.907932] binder: 10714:10718 transaction failed 29201/-22, size 40-16 line 3197 [ 588.926231] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.926473] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.933193] binder: 10721:10732 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.933282] binder: 10721:10732 transaction failed 29201/-22, size 40-16 line 3197 [ 588.949052] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.949264] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.971119] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.997967] binder: 10739:10745 got transaction with invalid offset (0, min 24 max 40) or object. [ 588.998057] binder: 10739:10745 transaction failed 29201/-22, size 40-16 line 3197 [ 589.002231] binder: 10737:10744 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.002285] binder: 10737:10744 transaction failed 29201/-22, size 0-16 line 3197 [ 589.004060] binder: BINDER_SET_CONTEXT_MGR already set [ 589.004067] binder: 10742:10747 ioctl 40046207 0 returned -16 [ 589.004364] binder: BINDER_SET_CONTEXT_MGR already set [ 589.004370] binder: 10741:10746 ioctl 40046207 0 returned -16 [ 589.005085] binder: 10742:10747 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.005161] binder: 10742:10747 transaction failed 29201/-22, size 40-16 line 3197 [ 589.005397] binder: 10741:10746 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.005490] binder: 10741:10746 transaction failed 29201/-22, size 40-16 line 3197 [ 589.010276] binder: 10743:10748 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.010626] binder: 10743:10748 transaction failed 29201/-22, size 0-16 line 3197 [ 589.017208] binder: 10740:10751 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.017292] binder: 10740:10751 transaction failed 29201/-22, size 40-16 line 3197 [ 589.020546] binder_alloc: 10738: binder_alloc_buf, no vma [ 589.020582] binder: 10738:10750 transaction failed 29189/-3, size 0-16 line 3134 [ 589.053774] binder: 10749:10759 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.053865] binder: 10749:10759 transaction failed 29201/-22, size 40-16 line 3197 [ 589.060961] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.070273] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.073532] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.089054] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.104326] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.116625] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.121706] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.133746] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.166896] binder: 10780:10783 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.167131] binder: 10780:10783 transaction failed 29201/-22, size 40-16 line 3197 [ 589.173454] binder: BINDER_SET_CONTEXT_MGR already set [ 589.173462] binder: 10778:10785 ioctl 40046207 0 returned -16 [ 589.174485] binder: 10778:10785 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.174569] binder: 10778:10785 transaction failed 29201/-22, size 40-16 line 3197 [ 589.174726] binder: 10777:10786 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.174817] binder: 10777:10786 transaction failed 29201/-22, size 40-16 line 3197 [ 589.175480] binder: BINDER_SET_CONTEXT_MGR already set [ 589.175487] binder: 10776:10784 ioctl 40046207 0 returned -16 [ 589.176449] binder: 10776:10784 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.176537] binder: 10776:10784 transaction failed 29201/-22, size 40-16 line 3197 [ 589.179620] binder: 10779:10787 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.179677] binder: 10779:10787 transaction failed 29201/-22, size 0-16 line 3197 [ 589.182059] binder: 10782:10788 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.182113] binder: 10782:10788 transaction failed 29201/-22, size 0-16 line 3197 [ 589.186562] binder_alloc: 10781: binder_alloc_buf, no vma [ 589.186597] binder: 10781:10789 transaction failed 29189/-3, size 0-16 line 3134 [ 589.225577] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.236610] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.248706] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.253997] binder: 10794:10804 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.254085] binder: 10794:10804 transaction failed 29201/-22, size 40-16 line 3197 [ 589.262737] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.262850] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.264263] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.276395] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.290107] binder: 10811:10816 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.290195] binder: 10811:10816 transaction failed 29201/-22, size 40-16 line 3197 [ 589.296288] binder: 10812:10817 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.296345] binder: 10812:10817 transaction failed 29201/-22, size 0-16 line 3197 [ 589.296352] binder: 10813:10819 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.296442] binder: 10813:10819 transaction failed 29201/-22, size 40-16 line 3197 [ 589.304427] binder: BINDER_SET_CONTEXT_MGR already set [ 589.304435] binder: 10820:10824 ioctl 40046207 0 returned -16 [ 589.305100] binder: 10815:10821 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.305172] binder: 10815:10821 transaction failed 29201/-22, size 0-16 line 3197 [ 589.305370] binder: 10820:10824 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.305456] binder: 10820:10824 transaction failed 29201/-22, size 40-16 line 3197 [ 589.308400] binder: BINDER_SET_CONTEXT_MGR already set [ 589.308408] binder: 10814:10823 ioctl 40046207 0 returned -16 [ 589.309303] binder: 10814:10823 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.309634] binder: 10814:10823 transaction failed 29201/-22, size 40-16 line 3197 [ 589.316561] binder_alloc: 10818: binder_alloc_buf, no vma [ 589.316600] binder: 10818:10826 transaction failed 29189/-3, size 0-16 line 3134 [ 589.355697] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.360639] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.372509] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.395306] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.395389] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.396952] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.403513] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.406461] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.422241] binder: 10848:10849 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.422328] binder: 10848:10849 transaction failed 29201/-22, size 40-16 line 3197 [ 589.439478] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.467423] binder: 10854:10860 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.467481] binder: 10854:10860 transaction failed 29201/-22, size 0-16 line 3197 [ 589.471085] binder: 10852:10861 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.471139] binder: BINDER_SET_CONTEXT_MGR already set [ 589.471145] binder: 10855:10863 ioctl 40046207 0 returned -16 [ 589.471585] binder: 10852:10861 transaction failed 29201/-22, size 40-16 line 3197 [ 589.472041] binder: 10855:10863 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.472128] binder: 10855:10863 transaction failed 29201/-22, size 40-16 line 3197 [ 589.476142] binder: 10857:10862 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.476195] binder: 10857:10862 transaction failed 29201/-22, size 0-16 line 3197 [ 589.482016] binder: BINDER_SET_CONTEXT_MGR already set [ 589.482023] binder: 10859:10866 ioctl 40046207 0 returned -16 [ 589.483165] binder: 10859:10866 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.483249] binder: 10859:10866 transaction failed 29201/-22, size 40-16 line 3197 [ 589.485757] binder: 10853:10864 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.485844] binder: 10853:10864 transaction failed 29201/-22, size 40-16 line 3197 [ 589.496232] binder_alloc: 10858: binder_alloc_buf, no vma [ 589.496272] binder: 10858:10868 transaction failed 29189/-3, size 0-16 line 3134 [ 589.505542] binder: 10856:10865 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.508718] binder: 10856:10865 transaction failed 29201/-22, size 40-16 line 3197 [ 589.539172] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.545189] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.557344] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.557453] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.562442] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.570446] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.591821] binder: 10892:10893 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.591882] binder: 10892:10893 transaction failed 29201/-22, size 0-16 line 3197 [ 589.597333] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.605823] binder: 10891:10899 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.605914] binder: 10891:10899 transaction failed 29201/-22, size 40-16 line 3197 [ 589.610830] binder: 10895:10900 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.610885] binder: 10895:10900 transaction failed 29201/-22, size 0-16 line 3197 [ 589.611152] binder: BINDER_SET_CONTEXT_MGR already set [ 589.611158] binder: 10898:10903 ioctl 40046207 0 returned -16 [ 589.612052] binder: 10898:10903 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.612141] binder: 10898:10903 transaction failed 29201/-22, size 40-16 line 3197 [ 589.612560] binder: BINDER_SET_CONTEXT_MGR already set [ 589.612566] binder: 10897:10901 ioctl 40046207 0 returned -16 [ 589.614568] binder: 10897:10901 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.614734] binder: 10897:10901 transaction failed 29201/-22, size 40-16 line 3197 [ 589.617943] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.624615] binder: 10896:10904 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.624693] binder: 10896:10904 transaction failed 29201/-22, size 40-16 line 3197 [ 589.657104] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.665443] binder_alloc: 10905: binder_alloc_buf, no vma [ 589.665485] binder: 10905:10911 transaction failed 29189/-3, size 0-16 line 3134 [ 589.674653] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.697722] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.697791] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.697916] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.707394] binder_alloc: 10924: binder_alloc_buf, no vma [ 589.707432] binder: 10924:10927 transaction failed 29189/-3, size 0-16 line 3134 [ 589.714474] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.723126] binder: 10928:10931 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.723225] binder: 10928:10931 transaction failed 29201/-22, size 40-16 line 3197 [ 589.729026] binder: 10929:10936 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.729081] binder: 10929:10936 transaction failed 29201/-22, size 0-16 line 3197 [ 589.729227] binder: BINDER_SET_CONTEXT_MGR already set [ 589.729234] binder: 10930:10937 ioctl 40046207 0 returned -16 [ 589.730225] binder: 10923:10933 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.730311] binder: 10923:10933 transaction failed 29201/-22, size 40-16 line 3197 [ 589.731072] binder: 10930:10937 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.731543] binder: BINDER_SET_CONTEXT_MGR already set [ 589.731550] binder: 10934:10938 ioctl 40046207 0 returned -16 [ 589.732336] binder: 10930:10937 transaction failed 29201/-22, size 40-16 line 3197 [ 589.732461] binder: 10934:10938 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.732548] binder: 10934:10938 transaction failed 29201/-22, size 40-16 line 3197 [ 589.735663] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.760072] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.769856] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.782487] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.798732] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.806783] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.812583] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.850326] binder: 10955:10961 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.851570] binder: 10957:10962 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.851661] binder: 10957:10962 transaction failed 29201/-22, size 40-16 line 3197 [ 589.851937] binder: 10955:10961 transaction failed 29201/-22, size 40-16 line 3197 [ 589.854799] binder_alloc: 10954: binder_alloc_buf, no vma [ 589.855012] binder: 10959:10964 got transaction with invalid offset (0, min 0 max 0) or object. [ 589.855125] binder: 10954:10965 transaction failed 29189/-3, size 0-16 line 3134 [ 589.855260] binder: 10959:10964 transaction failed 29201/-22, size 0-16 line 3197 [ 589.856986] binder: BINDER_SET_CONTEXT_MGR already set [ 589.856993] binder: 10958:10967 ioctl 40046207 0 returned -16 [ 589.857948] binder: 10958:10967 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.858317] binder: 10958:10967 transaction failed 29201/-22, size 40-16 line 3197 [ 589.860418] binder: BINDER_SET_CONTEXT_MGR already set [ 589.860425] binder: 10960:10966 ioctl 40046207 0 returned -16 [ 589.861237] binder: 10960:10966 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.861322] binder: 10960:10966 transaction failed 29201/-22, size 40-16 line 3197 [ 589.864983] binder_alloc: 10956: binder_alloc_buf, no vma [ 589.865021] binder: 10956:10963 transaction failed 29189/-3, size 0-16 line 3134 [ 589.886810] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.895904] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.909064] binder: 10968:10975 got transaction with invalid offset (0, min 24 max 40) or object. [ 589.909144] binder: 10968:10975 transaction failed 29201/-22, size 40-16 line 3197 [ 589.923767] binder_alloc: 10981: binder_alloc_buf, no vma [ 589.923805] binder: 10981:10988 transaction failed 29189/-3, size 0-16 line 3134 [ 589.932624] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.933411] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.952146] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.962219] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.962331] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.970641] binder_alloc: 10987: binder_alloc_buf, no vma [ 589.970678] binder: 10987:10991 transaction failed 29189/-3, size 0-16 line 3134 [ 589.981693] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.989514] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.004164] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.033497] binder: 11001:11004 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.033550] binder: 11001:11004 transaction failed 29201/-22, size 0-16 line 3197 [ 590.037145] binder: 10998:11005 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.037226] binder: 10998:11005 transaction failed 29201/-22, size 40-16 line 3197 [ 590.038195] binder: BINDER_SET_CONTEXT_MGR already set [ 590.038202] binder: 10997:11006 ioctl 40046207 0 returned -16 [ 590.039651] binder_alloc: 11002: binder_alloc_buf, no vma [ 590.039688] binder: 11002:11008 transaction failed 29189/-3, size 0-16 line 3134 [ 590.039923] binder: 10997:11006 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.040011] binder: 10997:11006 transaction failed 29201/-22, size 40-16 line 3197 [ 590.046675] binder: BINDER_SET_CONTEXT_MGR already set [ 590.046682] binder: 11003:11009 ioctl 40046207 0 returned -16 [ 590.047577] binder: 11003:11009 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.047662] binder: 11003:11009 transaction failed 29201/-22, size 40-16 line 3197 [ 590.052219] binder: 10999:11007 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.052310] binder: 10999:11007 transaction failed 29201/-22, size 40-16 line 3197 [ 590.058997] binder_alloc: 11000: binder_alloc_buf, no vma [ 590.059036] binder: 11000:11010 transaction failed 29189/-3, size 0-16 line 3134 [ 590.075278] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.090014] binder: 11011:11018 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.090101] binder: 11011:11018 transaction failed 29201/-22, size 40-16 line 3197 [ 590.101969] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.120862] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.124269] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.125209] binder_alloc: 11031: binder_alloc_buf, no vma [ 590.125247] binder: 11031:11035 transaction failed 29189/-3, size 0-16 line 3134 [ 590.136442] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.136555] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.140696] binder: 11034:11037 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.140754] binder: 11034:11037 transaction failed 29201/-22, size 0-16 line 3197 [ 590.143109] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.169085] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.179239] binder: 11042:11047 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.179331] binder: 11042:11047 transaction failed 29201/-22, size 40-16 line 3197 [ 590.180396] binder: 11040:11049 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.180482] binder: 11040:11049 transaction failed 29201/-22, size 40-16 line 3197 [ 590.183399] binder: BINDER_SET_CONTEXT_MGR already set [ 590.183406] binder: 11041:11048 ioctl 40046207 0 returned -16 [ 590.184203] binder: 11041:11048 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.184288] binder: 11041:11048 transaction failed 29201/-22, size 40-16 line 3197 [ 590.193628] binder: BINDER_SET_CONTEXT_MGR already set [ 590.193635] binder: 11044:11054 ioctl 40046207 0 returned -16 [ 590.195209] binder: 11044:11054 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.195298] binder: 11044:11054 transaction failed 29201/-22, size 40-16 line 3197 [ 590.213795] binder_alloc: 11051: binder_alloc_buf, no vma [ 590.213832] binder: 11051:11058 transaction failed 29189/-3, size 0-16 line 3134 [ 590.216127] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.231876] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.242324] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.246064] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.262791] binder_alloc: 11052: binder_alloc_buf, no vma [ 590.262829] binder: 11052:11059 transaction failed 29189/-3, size 0-16 line 3134 [ 590.266002] binder: 11071:11076 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.266060] binder: 11071:11076 transaction failed 29201/-22, size 0-16 line 3197 [ 590.272063] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.274020] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.277851] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.280298] binder: 11075:11078 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.280418] binder: 11075:11078 transaction failed 29201/-22, size 40-16 line 3197 [ 590.292443] binder: 11077:11081 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.292529] binder: 11077:11081 transaction failed 29201/-22, size 40-16 line 3197 [ 590.301693] binder: 11068:11073 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.301750] binder: 11068:11073 transaction failed 29201/-22, size 0-16 line 3197 [ 590.306330] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.336236] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.346552] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.350645] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.359738] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.366345] binder: 11092:11093 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.366441] binder: 11092:11093 transaction failed 29201/-22, size 40-16 line 3197 [ 590.385223] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.413363] binder: 11097:11100 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.413420] binder: 11097:11100 transaction failed 29201/-22, size 0-16 line 3197 [ 590.421783] binder: 11098:11102 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.421842] binder: 11098:11102 transaction failed 29201/-22, size 0-16 line 3197 [ 590.424692] binder: 11096:11106 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.424769] binder: 11096:11106 transaction failed 29201/-22, size 40-16 line 3197 [ 590.425194] binder: 11104:11105 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.425279] binder: 11104:11105 transaction failed 29201/-22, size 40-16 line 3197 [ 590.427363] binder: BINDER_SET_CONTEXT_MGR already set [ 590.427371] binder: 11103:11110 ioctl 40046207 0 returned -16 [ 590.433670] binder: BINDER_SET_CONTEXT_MGR already set [ 590.433677] binder: 11099:11108 ioctl 40046207 0 returned -16 [ 590.434511] binder: 11099:11108 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.434745] binder: 11099:11108 transaction failed 29201/-22, size 40-16 line 3197 [ 590.438631] binder: 11103:11110 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.438720] binder: 11103:11110 transaction failed 29201/-22, size 40-16 line 3197 [ 590.449556] binder_alloc: 11101: binder_alloc_buf, no vma [ 590.449594] binder: 11101:11109 transaction failed 29189/-3, size 0-16 line 3134 [ 590.476173] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.484590] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.502284] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.502990] binder: BINDER_SET_CONTEXT_MGR already set [ 590.502997] binder: 11127:11130 ioctl 40046207 0 returned -16 [ 590.503775] binder: 11127:11130 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.503863] binder: 11127:11130 transaction failed 29201/-22, size 40-16 line 3197 [ 590.513751] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.515656] binder: 11131:11132 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.515728] binder: 11131:11132 transaction failed 29201/-22, size 40-16 line 3197 [ 590.523957] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.539899] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.559557] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.564278] binder: 11136:11141 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.564325] binder: 11136:11141 transaction failed 29201/-22, size 0-16 line 3197 [ 590.565222] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.568664] binder: 11142:11146 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.568710] binder: 11142:11146 transaction failed 29201/-22, size 0-16 line 3197 [ 590.576312] binder: 11138:11143 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.576398] binder: 11138:11143 transaction failed 29201/-22, size 40-16 line 3197 [ 590.580925] binder: BINDER_SET_CONTEXT_MGR already set [ 590.580933] binder: 11114:11124 ioctl 40046207 0 returned -16 [ 590.585496] binder: 11114:11124 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.585633] binder: 11114:11124 transaction failed 29201/-22, size 40-16 line 3197 [ 590.605105] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.616328] binder_alloc: 11144: binder_alloc_buf, no vma [ 590.616365] binder: 11144:11152 transaction failed 29189/-3, size 0-16 line 3134 [ 590.633520] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.634127] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.639424] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.650106] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.666535] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.695104] binder: 11167:11171 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.695227] binder: 11167:11171 transaction failed 29201/-22, size 0-16 line 3197 [ 590.703350] binder: 11161:11166 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.703438] binder: 11161:11166 transaction failed 29201/-22, size 40-16 line 3197 [ 590.704881] binder: 11165:11172 transaction failed 29189/-22, size 0-16 line 3011 [ 590.704954] binder: BINDER_SET_CONTEXT_MGR already set [ 590.704960] binder: 11162:11174 ioctl 40046207 0 returned -16 [ 590.706190] binder: 11162:11174 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.706276] binder: 11162:11174 transaction failed 29201/-22, size 40-16 line 3197 [ 590.706668] binder: BINDER_SET_CONTEXT_MGR already set [ 590.706675] binder: 11163:11169 ioctl 40046207 0 returned -16 [ 590.708126] binder: 11163:11169 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.708215] binder: 11163:11169 transaction failed 29201/-22, size 40-16 line 3197 [ 590.708477] binder: 11164:11168 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.708563] binder: 11164:11168 transaction failed 29201/-22, size 40-16 line 3197 [ 590.716312] binder_alloc: 11170: binder_alloc_buf, no vma [ 590.716350] binder: 11170:11173 transaction failed 29189/-3, size 0-16 line 3134 [ 590.740713] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.749725] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.771575] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.775446] binder: 11194:11198 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.775597] binder: 11194:11198 transaction failed 29201/-22, size 40-16 line 3197 [ 590.778336] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.787594] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.788463] binder: BINDER_SET_CONTEXT_MGR already set [ 590.788470] binder: 11193:11197 ioctl 40046207 0 returned -16 [ 590.789269] binder: 11193:11197 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.789357] binder: 11193:11197 transaction failed 29201/-22, size 40-16 line 3197 [ 590.805754] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.805849] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.812365] binder: BINDER_SET_CONTEXT_MGR already set [ 590.812373] binder: 11201:11204 ioctl 40046207 0 returned -16 [ 590.813424] binder: 11201:11204 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.813495] binder: 11201:11204 transaction failed 29201/-22, size 40-16 line 3197 [ 590.817436] binder: 11202:11205 transaction failed 29189/-22, size 0-16 line 3011 [ 590.831821] binder: BINDER_SET_CONTEXT_MGR already set [ 590.831829] binder: 11176:11188 ioctl 40046207 0 returned -16 [ 590.836202] binder: 11176:11188 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.836329] binder: 11176:11188 transaction failed 29201/-22, size 40-16 line 3197 [ 590.851014] binder: 11209:11214 got transaction with invalid offset (0, min 0 max 0) or object. [ 590.851071] binder: 11209:11214 transaction failed 29201/-22, size 0-16 line 3197 [ 590.858292] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.865531] binder: 11211:11216 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.865625] binder: 11211:11216 transaction failed 29201/-22, size 40-16 line 3197 [ 590.875945] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.885913] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.890496] binder: 11223:11227 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.890585] binder: 11223:11227 transaction failed 29201/-22, size 40-16 line 3197 [ 590.906993] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.914367] binder_alloc: 11210: binder_alloc_buf, no vma [ 590.914408] binder: 11210:11217 transaction failed 29189/-3, size 0-16 line 3134 [ 590.923123] binder: BINDER_SET_CONTEXT_MGR already set [ 590.923131] binder: 11230:11238 ioctl 40046207 0 returned -16 [ 590.923920] binder: 11230:11238 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.924012] binder: 11230:11238 transaction failed 29201/-22, size 40-16 line 3197 [ 590.933631] binder: 11233:11240 transaction failed 29189/-22, size 0-16 line 3011 [ 590.935349] binder: BINDER_SET_CONTEXT_MGR already set [ 590.935356] binder: 11231:11239 ioctl 40046207 0 returned -16 [ 590.936932] binder: 11231:11239 got transaction with invalid offset (0, min 24 max 40) or object. [ 590.937019] binder: 11231:11239 transaction failed 29201/-22, size 40-16 line 3197 [ 590.957283] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.957392] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.962421] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.971913] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.991080] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.008203] binder: 11250:11254 got transaction with invalid offset (0, min 0 max 0) or object. [ 591.008258] binder: 11250:11254 transaction failed 29201/-22, size 0-16 line 3197 [ 591.017002] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.018067] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.019739] binder: 11253:11255 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.019830] binder: 11253:11255 transaction failed 29201/-22, size 40-16 line 3197 [ 591.039983] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.046589] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.062323] binder: 11252:11257 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.062410] binder: 11252:11257 transaction failed 29201/-22, size 40-16 line 3197 [ 591.064582] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.085029] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.121296] binder: 11265:11267 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.121387] binder: 11265:11267 transaction failed 29201/-22, size 40-16 line 3197 [ 591.127014] binder: BINDER_SET_CONTEXT_MGR already set [ 591.127021] binder: 11268:11274 ioctl 40046207 0 returned -16 [ 591.127942] binder: 11268:11274 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.128229] binder: 11268:11274 transaction failed 29201/-22, size 40-16 line 3197 [ 591.137468] binder: BINDER_SET_CONTEXT_MGR already set [ 591.137476] binder: 11270:11276 ioctl 40046207 0 returned -16 [ 591.146753] binder: 11270:11276 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.146842] binder: 11270:11276 transaction failed 29201/-22, size 40-16 line 3197 [ 591.147952] binder_alloc: 11266: binder_alloc_buf, no vma [ 591.147991] binder: 11266:11281 transaction failed 29189/-3, size 0-16 line 3134 [ 591.151789] binder: 11271:11272 got transaction with invalid offset (0, min 0 max 0) or object. [ 591.151845] binder: 11271:11272 transaction failed 29201/-22, size 0-16 line 3197 [ 591.158696] binder: 11275:11278 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.158787] binder: 11275:11278 transaction failed 29201/-22, size 40-16 line 3197 [ 591.159989] binder: BINDER_SET_CONTEXT_MGR already set [ 591.159996] binder: 11273:11280 ioctl 40046207 0 returned -16 [ 591.170782] binder: 11273:11280 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.170874] binder: 11273:11280 transaction failed 29201/-22, size 40-16 line 3197 [ 591.200108] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.201375] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.209841] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.214518] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.238979] binder: 11302:11304 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.239078] binder: 11302:11304 transaction failed 29201/-22, size 40-16 line 3197 [ 591.246062] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.249803] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.250194] binder: BINDER_SET_CONTEXT_MGR already set [ 591.250201] binder: 11305:11307 ioctl 40046207 0 returned -16 [ 591.251520] binder: 11305:11307 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.251701] binder: 11305:11307 transaction failed 29201/-22, size 40-16 line 3197 [ 591.257208] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.270772] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.282352] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.317608] binder: BINDER_SET_CONTEXT_MGR already set [ 591.317616] binder: 11312:11320 ioctl 40046207 0 returned -16 [ 591.318555] binder: 11312:11320 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.318647] binder: 11312:11320 transaction failed 29201/-22, size 40-16 line 3197 [ 591.318655] binder: 11313:11323 got transaction with invalid offset (0, min 0 max 0) or object. [ 591.318712] binder: 11313:11323 transaction failed 29201/-22, size 0-16 line 3197 [ 591.318829] binder: 11319:11325 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.318909] binder: 11319:11325 transaction failed 29201/-22, size 40-16 line 3197 [ 591.321513] binder: BINDER_SET_CONTEXT_MGR already set [ 591.321520] binder: 11318:11322 ioctl 40046207 0 returned -16 [ 591.322393] binder: 11318:11322 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.322479] binder: 11318:11322 transaction failed 29201/-22, size 40-16 line 3197 [ 591.323516] binder: 11315:11321 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.323610] binder: 11315:11321 transaction failed 29201/-22, size 40-16 line 3197 [ 591.339627] binder_alloc: 11316: binder_alloc_buf, no vma [ 591.339665] binder: 11316:11326 transaction failed 29189/-3, size 0-16 line 3134 [ 591.352378] binder: BINDER_SET_CONTEXT_MGR already set [ 591.352386] binder: 11314:11327 ioctl 40046207 0 returned -16 [ 591.353361] binder: 11314:11327 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.353451] binder: 11314:11327 transaction failed 29201/-22, size 40-16 line 3197 [ 591.366653] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.385305] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.398495] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.399784] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.410192] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.427219] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.435117] binder_alloc: 11348: binder_alloc_buf, no vma [ 591.435156] binder: 11348:11351 transaction failed 29189/-3, size 0-16 line 3134 [ 591.448384] binder: 11350:11358 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.448474] binder: 11350:11358 transaction failed 29201/-22, size 40-16 line 3197 [ 591.449969] binder: BINDER_SET_CONTEXT_MGR already set [ 591.449976] binder: 11352:11360 ioctl 40046207 0 returned -16 [ 591.451409] binder: 11352:11360 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.451492] binder: 11352:11360 transaction failed 29201/-22, size 40-16 line 3197 [ 591.458115] binder: 11357:11365 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.458200] binder: 11357:11365 transaction failed 29201/-22, size 40-16 line 3197 [ 591.462417] binder: BINDER_SET_CONTEXT_MGR already set [ 591.462425] binder: 11355:11363 ioctl 40046207 0 returned -16 [ 591.463940] binder: 11355:11363 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.464615] binder: 11355:11363 transaction failed 29201/-22, size 40-16 line 3197 [ 591.467406] binder: 11353:11364 got transaction with invalid offset (0, min 0 max 0) or object. [ 591.467459] binder: 11353:11364 transaction failed 29201/-22, size 0-16 line 3197 [ 591.484842] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.493006] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.507346] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.538335] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.546251] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.546465] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.546988] binder: 11384:11387 transaction failed 29189/-22, size 0-16 line 3011 [ 591.564043] binder: 11389:11390 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.564133] binder: 11389:11390 transaction failed 29201/-22, size 40-16 line 3197 [ 591.564771] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.583520] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.584080] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.619174] binder_alloc: 11393: binder_alloc_buf, no vma [ 591.619214] binder: 11393:11402 transaction failed 29189/-3, size 40-16 line 3134 [ 591.624750] binder: BINDER_SET_CONTEXT_MGR already set [ 591.624758] binder: 11394:11399 ioctl 40046207 0 returned -16 [ 591.625852] binder_alloc: 11393: binder_alloc_buf, no vma [ 591.625889] binder: 11394:11399 transaction failed 29189/-3, size 40-16 line 3134 [ 591.631028] binder: BINDER_SET_CONTEXT_MGR already set [ 591.631035] binder: 11396:11401 ioctl 40046207 0 returned -16 [ 591.631770] binder_alloc: 11393: binder_alloc_buf, no vma [ 591.631807] binder: 11396:11401 transaction failed 29189/-3, size 40-16 line 3134 [ 591.635329] binder: 11398:11403 got transaction with invalid offset (0, min 0 max 0) or object. [ 591.635387] binder: 11398:11403 transaction failed 29201/-22, size 0-16 line 3197 [ 591.637054] binder: 11397:11404 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.637144] binder: 11397:11404 transaction failed 29201/-22, size 40-16 line 3197 [ 591.651818] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.678385] binder_alloc: 11418: binder_alloc_buf, no vma [ 591.678471] binder: 11418:11422 transaction failed 29189/-3, size 40-16 line 3134 [ 591.681755] binder: 11405:11413 transaction failed 29189/-22, size 0-16 line 3011 [ 591.686947] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.695897] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.712904] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.719491] binder: BINDER_SET_CONTEXT_MGR already set [ 591.719497] binder: 11407:11426 ioctl 40046207 0 returned -16 [ 591.720194] binder_alloc: 11418: binder_alloc_buf, no vma [ 591.720232] binder: 11407:11426 transaction failed 29189/-3, size 40-16 line 3134 [ 591.720318] binder: BINDER_SET_CONTEXT_MGR already set [ 591.720328] binder: 11429:11434 ioctl 40046207 0 returned -16 [ 591.729790] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.738480] binder: BINDER_SET_CONTEXT_MGR already set [ 591.738488] binder: 11435:11437 ioctl 40046207 0 returned -16 [ 591.739352] binder_alloc: 11418: binder_alloc_buf, no vma [ 591.739390] binder: 11435:11437 transaction failed 29189/-3, size 40-16 line 3134 [ 591.741361] binder: 11432:11436 got transaction with invalid offset (0, min 0 max 0) or object. [ 591.741416] binder: 11432:11436 transaction failed 29201/-22, size 0-16 line 3197 [ 591.753382] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.754612] binder: 11429:11440 transaction failed 29189/-22, size 40-16 line 3011 [ 591.772109] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.776248] binder: 11443:11449 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.776338] binder: 11443:11449 transaction failed 29201/-22, size 40-16 line 3197 [ 591.794096] binder: 11441:11446 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.794187] binder: 11441:11446 transaction failed 29201/-22, size 40-16 line 3197 [ 591.821304] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.821385] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.823798] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.838991] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.859787] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.869212] binder: 11461:11465 transaction failed 29189/-22, size 0-16 line 3011 [ 591.878123] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.887195] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.922896] binder: 11468:11472 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.922989] binder: 11468:11472 transaction failed 29201/-22, size 40-16 line 3197 [ 591.923627] binder: BINDER_SET_CONTEXT_MGR already set [ 591.923633] binder: 11471:11474 ioctl 40046207 0 returned -16 [ 591.924495] binder: 11471:11474 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.924589] binder: 11471:11474 transaction failed 29201/-22, size 40-16 line 3197 [ 591.926082] binder: 11470:11475 got transaction with invalid offset (0, min 0 max 0) or object. [ 591.926136] binder: 11470:11475 transaction failed 29201/-22, size 0-16 line 3197 [ 591.929284] binder: BINDER_SET_CONTEXT_MGR already set [ 591.929291] binder: 11467:11469 ioctl 40046207 0 returned -16 [ 591.929902] binder: BINDER_SET_CONTEXT_MGR already set [ 591.929909] binder: 11476:11481 ioctl 40046207 0 returned -16 [ 591.931018] binder: 11476:11481 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.931104] binder: 11476:11481 transaction failed 29201/-22, size 40-16 line 3197 [ 591.932213] binder: 11467:11469 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.935265] binder: 11467:11469 transaction failed 29201/-22, size 40-16 line 3197 [ 591.940318] binder: 11477:11479 got transaction with invalid offset (0, min 24 max 40) or object. [ 591.940429] binder: 11477:11479 transaction failed 29201/-22, size 40-16 line 3197 [ 591.955427] binder_alloc: 11478: binder_alloc_buf, no vma [ 591.955467] binder: 11478:11486 transaction failed 29189/-3, size 0-16 line 3134 [ 591.991443] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.008324] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.014299] binder: undelivered TRANSACTION_ERROR: 29189 [ 592.016793] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.018248] binder: 11505:11506 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.018319] binder: 11505:11506 transaction failed 29201/-22, size 40-16 line 3197 [ 592.025747] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.038419] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.042250] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.070233] binder: 11510:11516 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.070300] binder: 11510:11516 transaction failed 29201/-22, size 0-16 line 3197 [ 592.077468] binder: BINDER_SET_CONTEXT_MGR already set [ 592.077476] binder: 11509:11513 ioctl 40046207 0 returned -16 [ 592.077574] binder: 11511:11515 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.077654] binder: 11511:11515 transaction failed 29201/-22, size 40-16 line 3197 [ 592.078502] binder: 11509:11513 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.078592] binder: 11509:11513 transaction failed 29201/-22, size 40-16 line 3197 [ 592.079831] binder: BINDER_SET_CONTEXT_MGR already set [ 592.079838] binder: 11517:11521 ioctl 40046207 0 returned -16 [ 592.081051] binder: 11517:11521 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.081138] binder: 11517:11521 transaction failed 29201/-22, size 40-16 line 3197 [ 592.100676] binder: 11520:11527 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.100734] binder: 11520:11527 transaction failed 29201/-22, size 0-8 line 3197 [ 592.105081] binder_alloc: 11514: binder_alloc_buf, no vma [ 592.105121] binder: 11514:11526 transaction failed 29189/-3, size 0-16 line 3134 [ 592.122272] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.138636] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.154855] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.158791] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.166632] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.172262] binder: undelivered TRANSACTION_ERROR: 29189 [ 592.179008] binder: 11544:11548 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.179175] binder: 11529:11542 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.179264] binder: 11529:11542 transaction failed 29201/-22, size 40-16 line 3197 [ 592.179378] binder: 11544:11548 transaction failed 29201/-22, size 40-16 line 3197 [ 592.183971] binder: 11546:11549 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.184041] binder: 11546:11549 transaction failed 29201/-22, size 0-16 line 3197 [ 592.194891] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.202224] binder: BINDER_SET_CONTEXT_MGR already set [ 592.202232] binder: 11540:11545 ioctl 40046207 0 returned -16 [ 592.203035] binder: 11540:11545 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.203124] binder: 11540:11545 transaction failed 29201/-22, size 40-16 line 3197 [ 592.215421] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.235747] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.248145] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.260228] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.298214] binder: 11561:11571 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.298268] binder: 11561:11571 transaction failed 29201/-22, size 0-8 line 3197 [ 592.305018] binder: 11562:11567 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.305109] binder: 11562:11567 transaction failed 29201/-22, size 40-16 line 3197 [ 592.305321] binder: 11564:11569 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.305408] binder: 11564:11569 transaction failed 29201/-22, size 40-16 line 3197 [ 592.305470] binder: BINDER_SET_CONTEXT_MGR already set [ 592.305476] binder: 11570:11572 ioctl 40046207 0 returned -16 [ 592.306516] binder: 11570:11572 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.306604] binder: 11570:11572 transaction failed 29201/-22, size 40-16 line 3197 [ 592.310172] binder: 11568:11575 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.310225] binder: 11568:11575 transaction failed 29201/-22, size 0-16 line 3197 [ 592.315467] binder: 11566:11574 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.315600] binder: 11566:11574 transaction failed 29201/-22, size 40-16 line 3197 [ 592.317788] binder_alloc: 11565: binder_alloc_buf, no vma [ 592.317826] binder: 11565:11573 transaction failed 29189/-3, size 0-16 line 3134 [ 592.323265] binder: BINDER_SET_CONTEXT_MGR already set [ 592.323273] binder: 11563:11577 ioctl 40046207 0 returned -16 [ 592.324053] binder: 11563:11577 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.324139] binder: 11563:11577 transaction failed 29201/-22, size 40-16 line 3197 [ 592.372280] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.376375] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.390411] binder: undelivered TRANSACTION_ERROR: 29189 [ 592.392820] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.399383] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.400546] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.404947] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.406589] binder: 11598:11599 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.406659] binder: 11598:11599 transaction failed 29201/-22, size 40-16 line 3197 [ 592.416504] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.438092] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.471367] binder: 11605:11612 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.471427] binder: 11605:11612 transaction failed 29201/-22, size 0-16 line 3197 [ 592.477824] binder: 11607:11613 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.478125] binder: 11607:11613 transaction failed 29201/-22, size 40-16 line 3197 [ 592.478208] binder: 11603:11608 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.478292] binder: 11603:11608 transaction failed 29201/-22, size 40-16 line 3197 [ 592.479916] binder: 11602:11606 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.479972] binder: 11602:11606 transaction failed 29201/-22, size 0-8 line 3197 [ 592.485711] binder: BINDER_SET_CONTEXT_MGR already set [ 592.485719] binder: 11611:11615 ioctl 40046207 0 returned -16 [ 592.486904] binder: 11611:11615 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.487277] binder: 11611:11615 transaction failed 29201/-22, size 40-16 line 3197 [ 592.489613] binder: 11609:11616 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.489697] binder: 11609:11616 transaction failed 29201/-22, size 40-16 line 3197 [ 592.491821] binder_alloc: 11610: binder_alloc_buf, no vma [ 592.491856] binder: 11610:11614 transaction failed 29189/-3, size 0-16 line 3134 [ 592.501046] binder: BINDER_SET_CONTEXT_MGR already set [ 592.501054] binder: 11604:11618 ioctl 40046207 0 returned -16 [ 592.501846] binder: 11604:11618 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.501936] binder: 11604:11618 transaction failed 29201/-22, size 40-16 line 3197 [ 592.546953] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.549177] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.568892] binder: undelivered TRANSACTION_ERROR: 29189 [ 592.574978] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.576081] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.578375] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.584641] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.586586] binder: 11641:11643 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.586631] binder: 11641:11643 transaction failed 29201/-22, size 0-8 line 3197 [ 592.592976] binder: 11642:11644 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.593028] binder: 11642:11644 transaction failed 29201/-22, size 0-16 line 3197 [ 592.607146] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.627528] binder: 11647:11652 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.627614] binder: 11647:11652 transaction failed 29201/-22, size 40-16 line 3197 [ 592.627773] binder: BINDER_SET_CONTEXT_MGR already set [ 592.627778] binder: 11648:11654 ioctl 40046207 0 returned -16 [ 592.628622] binder: 11648:11654 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.628707] binder: 11648:11654 transaction failed 29201/-22, size 40-16 line 3197 [ 592.634151] binder: BINDER_SET_CONTEXT_MGR already set [ 592.634159] binder: 11649:11651 ioctl 40046207 0 returned -16 [ 592.639306] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.647024] binder: 11650:11657 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.659163] binder: 11650:11657 transaction failed 29201/-22, size 40-16 line 3197 [ 592.673462] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.682055] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.704602] binder: 11665:11669 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.704657] binder: 11665:11669 transaction failed 29201/-22, size 0-8 line 3197 [ 592.706624] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.709413] binder: 11674:11677 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.709464] binder: 11674:11677 transaction failed 29201/-22, size 0-16 line 3197 [ 592.725215] binder_alloc: 11656: binder_alloc_buf, no vma [ 592.725252] binder: 11656:11663 transaction failed 29189/-3, size 0-16 line 3134 [ 592.745859] binder: BINDER_SET_CONTEXT_MGR already set [ 592.745867] binder: 11664:11682 ioctl 40046207 0 returned -16 [ 592.747390] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.747690] binder: 11664:11682 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.747778] binder: 11664:11682 transaction failed 29201/-22, size 40-16 line 3197 [ 592.761424] binder: BINDER_SET_CONTEXT_MGR already set [ 592.761432] binder: 11676:11686 ioctl 40046207 0 returned -16 [ 592.762326] binder: 11676:11686 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.762414] binder: 11676:11686 transaction failed 29201/-22, size 40-16 line 3197 [ 592.774788] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.774885] binder: undelivered TRANSACTION_ERROR: 29189 [ 592.779257] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.786306] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.809180] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.838489] binder: 11703:11710 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.839408] binder: 11703:11710 transaction failed 29201/-22, size 0-8 line 3197 [ 592.841810] binder: 11701:11711 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.841897] binder: 11701:11711 transaction failed 29201/-22, size 40-16 line 3197 [ 592.844645] binder: 11700:11705 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.844733] binder: 11700:11705 transaction failed 29201/-22, size 40-16 line 3197 [ 592.845838] binder: 11704:11708 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.845892] binder: 11704:11708 transaction failed 29201/-22, size 0-16 line 3197 [ 592.846290] binder: BINDER_SET_CONTEXT_MGR already set [ 592.846296] binder: 11707:11712 ioctl 40046207 0 returned -16 [ 592.850927] binder: BINDER_SET_CONTEXT_MGR already set [ 592.850940] binder: 11702:11714 ioctl 40046207 0 returned -16 [ 592.851886] binder: 11702:11714 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.851995] binder: 11702:11714 transaction failed 29201/-22, size 40-16 line 3197 [ 592.864225] binder_alloc: 11709: binder_alloc_buf, no vma [ 592.865686] binder: 11709:11713 transaction failed 29189/-3, size 0-16 line 3134 [ 592.867684] binder: BINDER_SET_CONTEXT_MGR already set [ 592.867692] binder: 11706:11715 ioctl 40046207 0 returned -16 [ 592.872757] binder: 11706:11715 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.872847] binder: 11706:11715 transaction failed 29201/-22, size 40-16 line 3197 [ 592.899439] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.934879] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.941339] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.945135] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.948716] binder: 11738:11739 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.948806] binder: 11738:11739 transaction failed 29201/-22, size 40-16 line 3197 [ 592.952696] binder: undelivered TRANSACTION_ERROR: 29189 [ 592.952832] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.959391] binder: 11741:11743 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.959443] binder: 11741:11743 transaction failed 29201/-22, size 0-16 line 3197 [ 592.977601] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.992688] binder: BINDER_SET_CONTEXT_MGR already set [ 592.992696] binder: 11748:11754 ioctl 40046207 0 returned -16 [ 592.994650] binder: 11746:11751 got transaction with invalid offset (0, min 24 max 40) or object. [ 592.994735] binder: 11746:11751 transaction failed 29201/-22, size 40-16 line 3197 [ 592.996620] binder: 11745:11752 got transaction with invalid offset (0, min 0 max 0) or object. [ 592.996675] binder: 11745:11752 transaction failed 29201/-22, size 0-16 line 3197 [ 593.001838] binder: BINDER_SET_CONTEXT_MGR already set [ 593.001846] binder: 11747:11753 ioctl 40046207 0 returned -16 [ 593.002702] binder: 11747:11753 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.002785] binder: 11747:11753 transaction failed 29201/-22, size 40-16 line 3197 [ 593.015708] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.020034] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.028302] binder_alloc: 11755: binder_alloc_buf, no vma [ 593.028340] binder: 11755:11759 transaction failed 29189/-3, size 0-16 line 3134 [ 593.046578] binder: 11768:11772 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.046636] binder: 11768:11772 transaction failed 29201/-22, size 0-16 line 3197 [ 593.063951] binder: 11769:11776 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.065243] binder: 11769:11776 transaction failed 29201/-22, size 40-16 line 3197 [ 593.067168] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.084881] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.085200] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.089510] binder: BINDER_SET_CONTEXT_MGR already set [ 593.089519] binder: 11761:11777 ioctl 40046207 0 returned -16 [ 593.090453] binder: 11761:11777 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.090544] binder: 11761:11777 transaction failed 29201/-22, size 40-16 line 3197 [ 593.097528] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.113998] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.126039] binder: 11782:11784 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.126128] binder: 11782:11784 transaction failed 29201/-22, size 40-16 line 3197 [ 593.144139] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.148064] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.153266] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.190109] binder: 11791:11799 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.190199] binder: 11791:11799 transaction failed 29201/-22, size 40-16 line 3197 [ 593.193654] binder: 11792:11804 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.193739] binder: 11792:11804 transaction failed 29201/-22, size 40-16 line 3197 [ 593.194462] binder: 11796:11801 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.194968] binder: 11796:11801 transaction failed 29201/-22, size 0-16 line 3197 [ 593.198771] binder: BINDER_SET_CONTEXT_MGR already set [ 593.198778] binder: 11795:11802 ioctl 40046207 0 returned -16 [ 593.199728] binder: 11795:11802 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.199812] binder: 11795:11802 transaction failed 29201/-22, size 40-16 line 3197 [ 593.202703] binder: BINDER_SET_CONTEXT_MGR already set [ 593.202709] binder: 11793:11803 ioctl 40046207 0 returned -16 [ 593.207989] binder: 11798:11805 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.208048] binder: 11798:11805 transaction failed 29201/-22, size 0-16 line 3197 [ 593.225964] binder_alloc: 11797: binder_alloc_buf, no vma [ 593.226001] binder: 11797:11806 transaction failed 29189/-3, size 0-16 line 3134 [ 593.242676] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.267294] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.267950] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.269804] binder: 11824:11830 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.269875] binder: 11824:11830 transaction failed 29201/-22, size 40-16 line 3197 [ 593.278386] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.302052] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.303561] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.307029] binder: BINDER_SET_CONTEXT_MGR already set [ 593.307036] binder: 11809:11825 ioctl 40046207 0 returned -16 [ 593.307836] binder: 11809:11825 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.307933] binder: 11809:11825 transaction failed 29201/-22, size 40-16 line 3197 [ 593.319758] binder: 11833:11839 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.319817] binder: 11833:11839 transaction failed 29201/-22, size 0-16 line 3197 [ 593.325430] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.337323] binder_alloc: 11835: binder_alloc_buf, no vma [ 593.337360] binder: 11835:11840 transaction failed 29189/-3, size 0-16 line 3134 [ 593.340809] binder: BINDER_SET_CONTEXT_MGR already set [ 593.340816] binder: 11834:11841 ioctl 40046207 0 returned -16 [ 593.341955] binder: 11834:11841 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.342165] binder: 11834:11841 transaction failed 29201/-22, size 40-16 line 3197 [ 593.343517] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.369509] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.386512] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.397564] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.428977] binder: 11858:11861 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.429032] binder: 11858:11861 transaction failed 29201/-22, size 0-16 line 3197 [ 593.430220] binder: 11855:11860 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.430273] binder: 11855:11860 transaction failed 29201/-22, size 0-16 line 3197 [ 593.434496] binder: 11854:11857 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.434585] binder: 11854:11857 transaction failed 29201/-22, size 40-16 line 3197 [ 593.438617] binder_alloc: 11859: binder_alloc_buf, no vma [ 593.438655] binder: 11859:11863 transaction failed 29189/-3, size 0-16 line 3134 [ 593.440226] binder: BINDER_SET_CONTEXT_MGR already set [ 593.440233] binder: 11853:11866 ioctl 40046207 0 returned -16 [ 593.441690] binder: BINDER_SET_CONTEXT_MGR already set [ 593.441697] binder: 11856:11865 ioctl 40046207 0 returned -16 [ 593.441787] binder: BINDER_SET_CONTEXT_MGR already set [ 593.441793] binder: 11862:11867 ioctl 40046207 0 returned -16 [ 593.442687] binder: 11862:11867 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.442775] binder: 11862:11867 transaction failed 29201/-22, size 40-16 line 3197 [ 593.442964] binder: 11856:11865 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.443044] binder: 11856:11865 transaction failed 29201/-22, size 40-16 line 3197 [ 593.443513] binder: 11853:11866 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.443599] binder: 11853:11866 transaction failed 29201/-22, size 40-16 line 3197 [ 593.452096] binder: BINDER_SET_CONTEXT_MGR already set [ 593.452103] binder: 11864:11870 ioctl 40046207 0 returned -16 [ 593.453026] binder: 11864:11870 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.453080] binder: 11864:11870 transaction failed 29201/-22, size 0-16 line 3197 [ 593.494807] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.508330] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.519311] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.519654] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.529858] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.531107] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.539907] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.544408] binder: 11892:11893 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.544455] binder: 11892:11893 transaction failed 29201/-22, size 0-16 line 3197 [ 593.561419] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.575601] binder: 11895:11900 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.575662] binder: 11895:11900 transaction failed 29201/-22, size 0-16 line 3197 [ 593.580300] binder: BINDER_SET_CONTEXT_MGR already set [ 593.580308] binder: 11896:11903 ioctl 40046207 0 returned -16 [ 593.582076] binder: 11896:11903 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.582817] binder: 11896:11903 transaction failed 29201/-22, size 40-16 line 3197 [ 593.584038] binder: BINDER_SET_CONTEXT_MGR already set [ 593.584045] binder: 11897:11904 ioctl 40046207 0 returned -16 [ 593.584877] binder: 11897:11904 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.584964] binder: 11897:11904 transaction failed 29201/-22, size 40-16 line 3197 [ 593.585907] binder: 11891:11902 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.585963] binder: 11891:11902 transaction failed 29201/-22, size 0-16 line 3197 [ 593.586113] binder: BINDER_SET_CONTEXT_MGR already set [ 593.586119] binder: 11898:11905 ioctl 40046207 0 returned -16 [ 593.588004] binder: 11898:11905 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.588093] binder: 11898:11905 transaction failed 29201/-22, size 40-16 line 3197 [ 593.606161] binder_alloc: 11901: binder_alloc_buf, no vma [ 593.606198] binder: 11901:11908 transaction failed 29189/-3, size 0-16 line 3134 [ 593.614895] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.643893] binder: BINDER_SET_CONTEXT_MGR already set [ 593.643902] binder: 11911:11924 ioctl 40046207 0 returned -16 [ 593.653984] binder: 11911:11924 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.654445] binder: 11911:11924 transaction failed 29201/-22, size 40-16 line 3197 [ 593.655774] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.662734] binder: 11923:11928 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.662789] binder: 11923:11928 transaction failed 29201/-22, size 0-16 line 3197 [ 593.678559] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.678632] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.678748] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.678825] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.679532] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.687347] binder: 11929:11931 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.687436] binder: 11929:11931 transaction failed 29201/-22, size 40-16 line 3197 [ 593.712974] binder: BINDER_SET_CONTEXT_MGR already set [ 593.712981] binder: 11930:11935 ioctl 40046207 0 returned -16 [ 593.713811] binder: 11930:11935 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.713898] binder: 11930:11935 transaction failed 29201/-22, size 40-16 line 3197 [ 593.729192] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.736928] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.760037] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.760142] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.787760] binder_alloc: 11949: binder_alloc_buf, no vma [ 593.787799] binder: 11949:11954 transaction failed 29189/-3, size 40-16 line 3134 [ 593.789116] binder: 11948:11952 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.789172] binder: 11948:11952 transaction failed 29201/-22, size 0-16 line 3197 [ 593.790123] binder: 11946:11953 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.792385] binder: 11946:11953 transaction failed 29201/-22, size 40-16 line 3197 [ 593.795143] binder: 11944:11955 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.795194] binder: 11944:11955 transaction failed 29201/-22, size 0-16 line 3197 [ 593.797643] binder: BINDER_SET_CONTEXT_MGR already set [ 593.797650] binder: 11945:11956 ioctl 40046207 0 returned -16 [ 593.797953] binder: 11945:11956 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.798004] binder: 11945:11956 transaction failed 29201/-22, size 0-16 line 3197 [ 593.799823] binder: BINDER_SET_CONTEXT_MGR already set [ 593.799830] binder: 11951:11957 ioctl 40046207 0 returned -16 [ 593.800779] binder: 11951:11957 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.801901] binder: 11951:11957 transaction failed 29201/-22, size 40-16 line 3197 [ 593.810642] binder_alloc: 11947: binder_alloc_buf, no vma [ 593.810685] binder: 11947:11958 transaction failed 29189/-3, size 0-16 line 3134 [ 593.826852] binder: BINDER_SET_CONTEXT_MGR already set [ 593.826860] binder: 11950:11962 ioctl 40046207 0 returned -16 [ 593.831046] binder: 11950:11962 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.831133] binder: 11950:11962 transaction failed 29201/-22, size 40-16 line 3197 [ 593.837817] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.862359] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.870759] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.874879] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.874971] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.892812] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.894507] binder_alloc: 11979: binder_alloc_buf, no vma [ 593.894547] binder: 11979:11981 transaction failed 29189/-3, size 40-16 line 3134 [ 593.904210] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.910422] binder: 11984:11989 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.910483] binder: 11984:11989 transaction failed 29201/-22, size 0-16 line 3197 [ 593.914632] binder: 11985:11991 got transaction with invalid offset (0, min 24 max 40) or object. [ 593.914719] binder: 11985:11991 transaction failed 29201/-22, size 40-16 line 3197 [ 593.916599] binder: BINDER_SET_CONTEXT_MGR already set [ 593.916607] binder: 11986:11990 ioctl 40046207 0 returned -16 [ 593.921045] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.947959] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.952847] binder: 11982:11995 got transaction with invalid offset (0, min 0 max 0) or object. [ 593.952901] binder: 11982:11995 transaction failed 29201/-22, size 0-16 line 3197 [ 593.967070] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.971812] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.971865] binder: send failed reply for transaction 47892 to 11986:11990 [ 593.984611] binder: undelivered TRANSACTION_COMPLETE [ 593.984626] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.005117] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.038790] binder: 12010:12017 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.038889] binder: 12010:12017 transaction failed 29201/-22, size 40-16 line 3197 [ 594.038908] binder_alloc: 12009: binder_alloc_buf, no vma [ 594.038944] binder: 12009:12013 transaction failed 29189/-3, size 40-16 line 3134 [ 594.039204] binder: BINDER_SET_CONTEXT_MGR already set [ 594.039210] binder: 12012:12016 ioctl 40046207 0 returned -16 [ 594.041747] binder: 12011:12018 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.041803] binder: 12011:12018 transaction failed 29201/-22, size 0-16 line 3197 [ 594.050601] binder: BINDER_SET_CONTEXT_MGR already set [ 594.050610] binder: 12006:12019 ioctl 40046207 0 returned -16 [ 594.051630] binder: 12006:12019 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.051633] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.051715] binder: 12006:12019 transaction failed 29201/-22, size 40-16 line 3197 [ 594.060673] binder: 12014:12021 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.060728] binder: 12014:12021 transaction failed 29201/-22, size 0-16 line 3197 [ 594.079251] binder: BINDER_SET_CONTEXT_MGR already set [ 594.079259] binder: 12007:12020 ioctl 40046207 0 returned -16 [ 594.080050] binder: 12007:12020 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.080139] binder: 12007:12020 transaction failed 29201/-22, size 40-16 line 3197 [ 594.089895] binder_alloc: 12027: binder_alloc_buf, no vma [ 594.089933] binder: 12027:12034 transaction failed 29189/-3, size 40-16 line 3134 [ 594.117312] binder: release 12012:12016 transaction 47903 out, still active [ 594.117317] binder: unexpected work type, 4, not freed [ 594.117319] binder: undelivered TRANSACTION_COMPLETE [ 594.126249] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.126301] binder: send failed reply for transaction 47903, target dead [ 594.137481] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.144344] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.145662] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.161673] binder: 12048:12051 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.161765] binder: 12048:12051 transaction failed 29201/-22, size 40-16 line 3197 [ 594.169196] binder: 12049:12053 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.169251] binder: 12049:12053 transaction failed 29201/-22, size 0-16 line 3197 [ 594.175532] binder: 12052:12057 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.175588] binder: 12052:12057 transaction failed 29201/-22, size 0-16 line 3197 [ 594.180069] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.185498] binder: BINDER_SET_CONTEXT_MGR already set [ 594.185504] binder: 12050:12054 ioctl 40046207 0 returned -16 [ 594.186349] binder: 12050:12054 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.186438] binder: 12050:12054 transaction failed 29201/-22, size 40-16 line 3197 [ 594.189507] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.189730] binder: BINDER_SET_CONTEXT_MGR already set [ 594.189737] binder: 12045:12055 ioctl 40046207 0 returned -16 [ 594.205454] binder_alloc: 12064: binder_alloc_buf, no vma [ 594.205492] binder: 12064:12065 transaction failed 29189/-3, size 40-16 line 3134 [ 594.234641] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.242737] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.242793] binder: send failed reply for transaction 47929 to 12045:12055 [ 594.248633] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.255909] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.257306] binder: 12083:12084 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.261969] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.277244] binder: 12083:12084 transaction failed 29201/-22, size 40-16 line 3197 [ 594.288975] binder: undelivered TRANSACTION_COMPLETE [ 594.288989] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.291415] binder: 12087:12093 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.291473] binder: 12087:12093 transaction failed 29201/-22, size 0-16 line 3197 [ 594.293860] binder: BINDER_SET_CONTEXT_MGR already set [ 594.293865] binder: 12089:12092 ioctl 40046207 0 returned -16 [ 594.294619] binder: 12089:12092 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.294701] binder: 12089:12092 transaction failed 29201/-22, size 40-16 line 3197 [ 594.300417] binder: 12080:12086 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.300471] binder: 12080:12086 transaction failed 29201/-22, size 0-16 line 3197 [ 594.307827] binder: BINDER_SET_CONTEXT_MGR already set [ 594.307835] binder: 12081:12088 ioctl 40046207 0 returned -16 [ 594.308610] binder: 12081:12088 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.308695] binder: 12081:12088 transaction failed 29201/-22, size 40-16 line 3197 [ 594.315606] binder_alloc: 12085: binder_alloc_buf, no vma [ 594.315645] binder: 12085:12091 transaction failed 29189/-3, size 40-16 line 3134 [ 594.339824] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.358913] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.368602] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.368696] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.368915] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.389046] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.417152] binder: 12113:12117 transaction failed 29189/-22, size 40-16 line 3011 [ 594.422137] binder: 12110:12116 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.422194] binder: 12110:12116 transaction failed 29201/-22, size 0-16 line 3197 [ 594.423750] binder: 12114:12119 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.423802] binder: 12114:12119 transaction failed 29201/-22, size 0-16 line 3197 [ 594.431680] binder: BINDER_SET_CONTEXT_MGR already set [ 594.431687] binder: 12112:12123 ioctl 40046207 0 returned -16 [ 594.433985] binder: 12120:12124 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.434074] binder: 12120:12124 transaction failed 29201/-22, size 40-16 line 3197 [ 594.438796] binder: BINDER_SET_CONTEXT_MGR already set [ 594.438810] binder: 12115:12125 ioctl 40046207 0 returned -16 [ 594.439577] binder: 12115:12125 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.439667] binder: 12115:12125 transaction failed 29201/-22, size 40-16 line 3197 [ 594.448620] binder: BINDER_SET_CONTEXT_MGR already set [ 594.448627] binder: 12118:12122 ioctl 40046207 0 returned -16 [ 594.450278] binder: 12118:12122 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.450399] binder: 12118:12122 transaction failed 29201/-22, size 40-16 line 3197 [ 594.459246] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.534983] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.687596] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.687766] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.687824] binder: send failed reply for transaction 47956 to 12112:12123 [ 594.687926] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.688053] binder: undelivered TRANSACTION_COMPLETE [ 594.688065] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.688227] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.761301] binder: 12148:12149 transaction failed 29189/-22, size 40-16 line 3011 [ 594.787914] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.797088] binder: 12151:12154 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.797253] binder: 12151:12154 transaction failed 29201/-22, size 40-16 line 3197 [ 594.800876] binder_alloc: 12153: binder_alloc_buf, no vma [ 594.800915] binder: 12153:12155 transaction failed 29189/-3, size 0-16 line 3134 [ 594.812787] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.817700] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.850098] binder: 12166:12168 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.850154] binder: 12166:12168 transaction failed 29201/-22, size 0-16 line 3197 [ 594.851545] binder: 12161:12169 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.851604] binder: 12161:12169 transaction failed 29201/-22, size 0-16 line 3197 [ 594.858986] binder: 12165:12172 transaction failed 29189/-22, size 40-16 line 3011 [ 594.861518] binder: BINDER_SET_CONTEXT_MGR already set [ 594.861526] binder: 12163:12171 ioctl 40046207 0 returned -16 [ 594.863366] binder: 12163:12171 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.863451] binder: 12163:12171 transaction failed 29201/-22, size 40-16 line 3197 [ 594.865429] binder: BINDER_SET_CONTEXT_MGR already set [ 594.865436] binder: 12162:12170 ioctl 40046207 0 returned -16 [ 594.866292] binder: 12162:12170 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.866376] binder: 12162:12170 transaction failed 29201/-22, size 40-16 line 3197 [ 594.880696] binder: BINDER_SET_CONTEXT_MGR already set [ 594.880705] binder: 12159:12174 ioctl 40046207 0 returned -16 [ 594.887001] binder: 12159:12174 got transaction with invalid offset (0, min 24 max 40) or object. [ 594.887086] binder: 12159:12174 transaction failed 29201/-22, size 40-16 line 3197 [ 594.888956] binder_alloc: 12164: binder_alloc_buf, no vma [ 594.888991] binder: 12164:12176 transaction failed 29189/-3, size 0-16 line 3134 [ 594.932327] binder: release 12160:12167 transaction 47976 out, still active [ 594.932332] binder: unexpected work type, 4, not freed [ 594.932334] binder: undelivered TRANSACTION_COMPLETE [ 594.932398] binder: send failed reply for transaction 47976, target dead [ 594.932985] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.953131] binder: 12198:12200 got transaction with invalid offset (0, min 0 max 0) or object. [ 594.953185] binder: 12198:12200 transaction failed 29201/-22, size 0-16 line 3197 [ 594.987599] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.987699] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.987794] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.987904] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.988034] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.002554] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.007802] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.018708] binder: 12204:12206 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.018761] binder: 12204:12206 transaction failed 29201/-22, size 0-16 line 3197 [ 595.019054] binder: BINDER_SET_CONTEXT_MGR already set [ 595.019061] binder: 12208:12212 ioctl 40046207 0 returned -16 [ 595.020273] binder: 12208:12212 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.023889] binder: 12208:12212 transaction failed 29201/-22, size 40-16 line 3197 [ 595.027436] binder: 12215:12217 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.027491] binder: 12215:12217 transaction failed 29201/-22, size 0-16 line 3197 [ 595.030672] binder_alloc: 12210: binder_alloc_buf, no vma [ 595.030709] binder: 12210:12213 transaction failed 29189/-3, size 0-16 line 3134 [ 595.031542] binder: BINDER_SET_CONTEXT_MGR already set [ 595.031549] binder: 12207:12216 ioctl 40046207 0 returned -16 [ 595.032459] binder: 12207:12216 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.032542] binder: 12207:12216 transaction failed 29201/-22, size 40-16 line 3197 [ 595.064116] binder: release 12197:12203 transaction 47998 out, still active [ 595.064120] binder: unexpected work type, 4, not freed [ 595.064123] binder: undelivered TRANSACTION_COMPLETE [ 595.064188] binder: send failed reply for transaction 47998, target dead [ 595.082572] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.102833] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.106633] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.112343] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.116568] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.123555] binder: 12230:12237 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.123642] binder: 12230:12237 transaction failed 29201/-22, size 40-16 line 3197 [ 595.139036] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.173113] binder: 12243:12250 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.173242] binder: 12243:12250 transaction failed 29201/-22, size 40-16 line 3197 [ 595.175347] binder: BINDER_SET_CONTEXT_MGR already set [ 595.175354] binder: 12241:12246 ioctl 40046207 0 returned -16 [ 595.176274] binder: 12241:12246 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.176500] binder: 12241:12246 transaction failed 29201/-22, size 40-16 line 3197 [ 595.179572] binder: 12245:12248 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.179626] binder: 12245:12248 transaction failed 29201/-22, size 0-16 line 3197 [ 595.180659] binder: 12242:12249 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.180713] binder: 12242:12249 transaction failed 29201/-22, size 0-16 line 3197 [ 595.185086] binder: BINDER_SET_CONTEXT_MGR already set [ 595.185094] binder: 12247:12251 ioctl 40046207 0 returned -16 [ 595.185863] binder: 12247:12251 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.185950] binder: 12247:12251 transaction failed 29201/-22, size 40-16 line 3197 [ 595.188606] binder_alloc: 12244: binder_alloc_buf, no vma [ 595.188645] binder: 12244:12253 transaction failed 29189/-3, size 0-16 line 3134 [ 595.228542] binder: BINDER_SET_CONTEXT_MGR already set [ 595.228550] binder: 12254:12265 ioctl 40046207 0 returned -16 [ 595.230431] binder: 12254:12265 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.230526] binder: 12254:12265 transaction failed 29201/-22, size 40-16 line 3197 [ 595.231152] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.254542] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.259004] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.277146] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.277351] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.291463] binder: 12276:12278 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.291553] binder: 12276:12278 transaction failed 29201/-22, size 40-16 line 3197 [ 595.293164] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.299994] binder: 12277:12280 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.300053] binder: 12277:12280 transaction failed 29201/-22, size 0-16 line 3197 [ 595.301754] binder: 12279:12281 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.301810] binder: 12279:12281 transaction failed 29201/-22, size 0-16 line 3197 [ 595.305734] binder: BINDER_SET_CONTEXT_MGR already set [ 595.305742] binder: 12282:12284 ioctl 40046207 0 returned -16 [ 595.306537] binder: 12282:12284 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.306627] binder: 12282:12284 transaction failed 29201/-22, size 40-16 line 3197 [ 595.338137] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.354133] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.361936] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.366396] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.381738] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.411654] binder: 12298:12303 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.411743] binder: 12298:12303 transaction failed 29201/-22, size 40-16 line 3197 [ 595.415603] binder: 12302:12305 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.415767] binder: 12302:12305 transaction failed 29201/-22, size 0-16 line 3197 [ 595.430532] binder_alloc: 12300: binder_alloc_buf, no vma [ 595.430572] binder: 12300:12313 transaction failed 29189/-3, size 0-16 line 3134 [ 595.431000] binder: 12304:12309 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.431055] binder: 12304:12309 transaction failed 29201/-22, size 0-16 line 3197 [ 595.435761] binder: BINDER_SET_CONTEXT_MGR already set [ 595.435768] binder: 12307:12310 ioctl 40046207 0 returned -16 [ 595.436461] binder: BINDER_SET_CONTEXT_MGR already set [ 595.436469] binder: 12297:12301 ioctl 40046207 0 returned -16 [ 595.436607] binder: 12307:12310 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.437650] binder: 12297:12301 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.437740] binder: 12297:12301 transaction failed 29201/-22, size 40-16 line 3197 [ 595.437765] binder: 12307:12310 transaction failed 29201/-22, size 40-16 line 3197 [ 595.477808] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.485740] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.493325] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.506254] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.514954] binder: 12308:12315 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.515044] binder: 12308:12315 transaction failed 29201/-22, size 40-16 line 3197 [ 595.524332] binder: 12334:12339 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.524391] binder: 12334:12339 transaction failed 29201/-22, size 0-16 line 3197 [ 595.529261] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.531018] binder: BINDER_SET_CONTEXT_MGR already set [ 595.531025] binder: 12335:12340 ioctl 40046207 0 returned -16 [ 595.531838] binder: 12335:12340 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.531925] binder: 12335:12340 transaction failed 29201/-22, size 40-16 line 3197 [ 595.553357] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.560861] binder: BINDER_SET_CONTEXT_MGR already set [ 595.560869] binder: 12342:12346 ioctl 40046207 0 returned -16 [ 595.561724] binder: 12342:12346 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.561814] binder: 12342:12346 transaction failed 29201/-22, size 40-16 line 3197 [ 595.565734] binder: BINDER_SET_CONTEXT_MGR already set [ 595.565741] binder: 12348:12351 ioctl 40046207 0 returned -16 [ 595.569464] binder: 12348:12351 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.569644] binder: 12348:12351 transaction failed 29201/-22, size 40-16 line 3197 [ 595.569812] binder_alloc: 12343: binder_alloc_buf, no vma [ 595.569845] binder: 12343:12350 transaction failed 29189/-3, size 0-16 line 3134 [ 595.591782] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.592676] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.610468] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.619364] binder: 12356:12360 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.619419] binder: 12356:12360 transaction failed 29201/-22, size 0-16 line 3197 [ 595.632503] binder: 12367:12371 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.632559] binder: 12367:12371 transaction failed 29201/-22, size 0-16 line 3197 [ 595.647119] binder: 12365:12372 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.647211] binder: 12365:12372 transaction failed 29201/-22, size 40-16 line 3197 [ 595.647216] binder: 12369:12373 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.647270] binder: 12369:12373 transaction failed 29201/-22, size 0-16 line 3197 [ 595.654921] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.656352] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.682620] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.690527] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.699384] binder: BINDER_SET_CONTEXT_MGR already set [ 595.699392] binder: 12379:12380 ioctl 40046207 0 returned -16 [ 595.700280] binder: 12379:12380 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.700714] binder: 12379:12380 transaction failed 29201/-22, size 40-16 line 3197 [ 595.713379] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.721647] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.726416] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.734909] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.764763] binder: 12389:12397 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.764853] binder: 12389:12397 transaction failed 29201/-22, size 40-16 line 3197 [ 595.772014] binder: BINDER_SET_CONTEXT_MGR already set [ 595.772023] binder: 12391:12396 ioctl 40046207 0 returned -16 [ 595.772844] binder: 12391:12396 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.772929] binder: 12391:12396 transaction failed 29201/-22, size 40-16 line 3197 [ 595.774871] binder: BINDER_SET_CONTEXT_MGR already set [ 595.774878] binder: 12390:12398 ioctl 40046207 0 returned -16 [ 595.775393] binder: 12394:12400 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.775443] binder: 12394:12400 transaction failed 29201/-22, size 0-16 line 3197 [ 595.775648] binder: 12390:12398 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.775727] binder: 12390:12398 transaction failed 29201/-22, size 40-16 line 3197 [ 595.778548] binder: 12395:12401 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.778604] binder: 12395:12401 transaction failed 29201/-22, size 0-16 line 3197 [ 595.779770] binder: 12392:12399 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.779825] binder: 12392:12399 transaction failed 29201/-22, size 0-16 line 3197 [ 595.782321] binder_alloc: 12393: binder_alloc_buf, no vma [ 595.782355] binder: 12393:12404 transaction failed 29189/-3, size 0-16 line 3134 [ 595.818347] binder: BINDER_SET_CONTEXT_MGR already set [ 595.818355] binder: 12402:12412 ioctl 40046207 0 returned -16 [ 595.819263] binder: 12402:12412 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.822389] binder: 12402:12412 transaction failed 29201/-22, size 40-16 line 3197 [ 595.836966] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.839070] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.842408] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.855590] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.859031] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.877129] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.886689] binder: 12426:12428 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.886780] binder: 12426:12428 transaction failed 29201/-22, size 40-16 line 3197 [ 595.892415] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.892764] binder: 12427:12429 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.892823] binder: 12427:12429 transaction failed 29201/-22, size 0-16 line 3197 [ 595.916046] binder: BINDER_SET_CONTEXT_MGR already set [ 595.916055] binder: 12430:12435 ioctl 40046207 0 returned -16 [ 595.917241] binder: 12430:12435 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.917325] binder: 12430:12435 transaction failed 29201/-22, size 40-16 line 3197 [ 595.919500] binder: 12432:12441 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.919555] binder: 12432:12441 transaction failed 29201/-22, size 0-16 line 3197 [ 595.921992] binder: 12431:12440 got transaction with invalid offset (0, min 0 max 0) or object. [ 595.922047] binder: 12431:12440 transaction failed 29201/-22, size 0-16 line 3197 [ 595.925762] binder: BINDER_SET_CONTEXT_MGR already set [ 595.925769] binder: 12437:12442 ioctl 40046207 0 returned -16 [ 595.926796] binder: 12437:12442 got transaction with invalid offset (0, min 24 max 40) or object. [ 595.926884] binder: 12437:12442 transaction failed 29201/-22, size 40-16 line 3197 [ 595.939908] binder_alloc: 12438: binder_alloc_buf, no vma [ 595.940118] binder: 12438:12445 transaction failed 29189/-3, size 0-16 line 3134 [ 595.963237] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.968775] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.972093] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.990213] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.002832] binder: 12462:12465 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.002889] binder: 12462:12465 transaction failed 29201/-22, size 0-16 line 3197 [ 596.006273] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.007261] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.023584] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.027474] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.046375] binder: 12463:12464 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.046461] binder: 12463:12464 transaction failed 29201/-22, size 40-16 line 3197 [ 596.049261] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.050409] binder: BINDER_SET_CONTEXT_MGR already set [ 596.050416] binder: 12468:12469 ioctl 40046207 0 returned -16 [ 596.051197] binder: 12468:12469 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.051289] binder: 12468:12469 transaction failed 29201/-22, size 40-16 line 3197 [ 596.068166] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.081021] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.104833] binder: 12479:12481 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.104923] binder: 12479:12481 transaction failed 29201/-22, size 40-16 line 3197 [ 596.113222] binder: 12476:12482 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.113280] binder: 12476:12482 transaction failed 29201/-22, size 0-16 line 3197 [ 596.114590] binder: BINDER_SET_CONTEXT_MGR already set [ 596.114597] binder: 12478:12485 ioctl 40046207 0 returned -16 [ 596.116571] binder: 12478:12485 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.116780] binder: 12478:12485 transaction failed 29201/-22, size 40-16 line 3197 [ 596.118301] binder: 12474:12484 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.118357] binder: 12474:12484 transaction failed 29201/-22, size 0-16 line 3197 [ 596.124474] binder: BINDER_SET_CONTEXT_MGR already set [ 596.124481] binder: 12480:12487 ioctl 40046207 0 returned -16 [ 596.125267] binder: 12480:12487 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.125352] binder: 12480:12487 transaction failed 29201/-22, size 40-16 line 3197 [ 596.127459] binder_alloc: 12477: binder_alloc_buf, no vma [ 596.127495] binder: 12477:12486 transaction failed 29189/-3, size 0-16 line 3134 [ 596.164057] binder: BINDER_SET_CONTEXT_MGR already set [ 596.164065] binder: 12489:12500 ioctl 40046207 0 returned -16 [ 596.164880] binder: 12489:12500 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.168415] binder: 12489:12500 transaction failed 29201/-22, size 40-16 line 3197 [ 596.178407] binder: release 12475:12483 transaction 48153 out, still active [ 596.178412] binder: unexpected work type, 4, not freed [ 596.178414] binder: undelivered TRANSACTION_COMPLETE [ 596.178478] binder: send failed reply for transaction 48153, target dead [ 596.185101] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.188952] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.197946] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.203924] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.207346] binder: 12510:12512 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.207403] binder: 12510:12512 transaction failed 29201/-22, size 0-16 line 3197 [ 596.217083] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.224003] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.235022] binder: 12514:12521 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.235112] binder: 12514:12521 transaction failed 29201/-22, size 40-16 line 3197 [ 596.248290] binder: BINDER_SET_CONTEXT_MGR already set [ 596.248299] binder: 12516:12526 ioctl 40046207 0 returned -16 [ 596.251601] binder_alloc: 12519: binder_alloc_buf, no vma [ 596.251643] binder: 12519:12522 transaction failed 29189/-3, size 0-16 line 3134 [ 596.251731] binder: 12516:12526 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.251826] binder: 12516:12526 transaction failed 29201/-22, size 40-16 line 3197 [ 596.259746] binder: BINDER_SET_CONTEXT_MGR already set [ 596.259754] binder: 12523:12529 ioctl 40046207 0 returned -16 [ 596.260692] binder: 12523:12529 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.260777] binder: 12523:12529 transaction failed 29201/-22, size 40-16 line 3197 [ 596.267198] binder: 12517:12528 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.267253] binder: 12517:12528 transaction failed 29201/-22, size 0-16 line 3197 [ 596.278504] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.285196] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.308485] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.317041] binder: release 12513:12520 transaction 48175 out, still active [ 596.317046] binder: unexpected work type, 4, not freed [ 596.317048] binder: undelivered TRANSACTION_COMPLETE [ 596.317113] binder: send failed reply for transaction 48175, target dead [ 596.317558] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.322988] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.338599] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.347949] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.386705] binder: 12547:12557 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.387087] binder: 12547:12557 transaction failed 29201/-22, size 40-16 line 3197 [ 596.389372] binder: 12550:12556 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.389429] binder: 12550:12556 transaction failed 29201/-22, size 0-16 line 3197 [ 596.394979] binder: BINDER_SET_CONTEXT_MGR already set [ 596.394986] binder: 12553:12558 ioctl 40046207 0 returned -16 [ 596.395928] binder: 12553:12558 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.396012] binder: 12553:12558 transaction failed 29201/-22, size 40-16 line 3197 [ 596.399754] binder_alloc: 12551: binder_alloc_buf, no vma [ 596.399792] binder: 12551:12554 transaction failed 29189/-3, size 0-16 line 3134 [ 596.401780] binder: BINDER_SET_CONTEXT_MGR already set [ 596.401791] binder: 12552:12561 ioctl 40046207 0 returned -16 [ 596.403534] binder: 12552:12561 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.403625] binder: 12552:12561 transaction failed 29201/-22, size 40-16 line 3197 [ 596.405523] binder: 12549:12560 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.405576] binder: 12549:12560 transaction failed 29201/-22, size 0-16 line 3197 [ 596.410497] binder: BINDER_SET_CONTEXT_MGR already set [ 596.410504] binder: 12548:12559 ioctl 40046207 0 returned -16 [ 596.424602] binder: 12548:12559 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.424692] binder: 12548:12559 transaction failed 29201/-22, size 40-16 line 3197 [ 596.451544] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.459561] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.468826] binder: release 12546:12555 transaction 48195 out, still active [ 596.468831] binder: unexpected work type, 4, not freed [ 596.468833] binder: undelivered TRANSACTION_COMPLETE [ 596.468897] binder: send failed reply for transaction 48195, target dead [ 596.468990] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.474400] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.487995] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.488200] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.502380] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.541625] binder: 12584:12590 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.541784] binder: BINDER_SET_CONTEXT_MGR already set [ 596.541792] binder: 12586:12591 ioctl 40046207 0 returned -16 [ 596.542570] binder: 12586:12591 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.542654] binder: 12586:12591 transaction failed 29201/-22, size 40-16 line 3197 [ 596.542907] binder: 12584:12590 transaction failed 29201/-22, size 40-16 line 3197 [ 596.543279] binder_alloc: 12587: binder_alloc_buf, no vma [ 596.543318] binder: 12587:12593 transaction failed 29189/-3, size 0-16 line 3134 [ 596.547128] binder: BINDER_SET_CONTEXT_MGR already set [ 596.547136] binder: 12592:12596 ioctl 40046207 0 returned -16 [ 596.548322] binder: 12592:12596 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.548405] binder: 12592:12596 transaction failed 29201/-22, size 40-16 line 3197 [ 596.548531] binder: 12589:12595 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.548584] binder: 12589:12595 transaction failed 29201/-22, size 0-16 line 3197 [ 596.559799] binder: 12585:12599 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.559857] binder: 12585:12599 transaction failed 29201/-22, size 0-16 line 3197 [ 596.592254] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.606976] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.621779] binder: release 12588:12594 transaction 48212 out, still active [ 596.621784] binder: unexpected work type, 4, not freed [ 596.621785] binder: undelivered TRANSACTION_COMPLETE [ 596.621876] binder: send failed reply for transaction 48212, target dead [ 596.632994] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.643405] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.651470] binder: BINDER_SET_CONTEXT_MGR already set [ 596.651478] binder: 12622:12624 ioctl 40046207 0 returned -16 [ 596.662814] binder: BINDER_SET_CONTEXT_MGR already set [ 596.662822] binder: 12620:12623 ioctl 40046207 0 returned -16 [ 596.663519] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.669563] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.671384] binder: 12597:12608 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.671472] binder: 12597:12608 transaction failed 29201/-22, size 40-16 line 3197 [ 596.671558] binder: 12622:12624 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.671642] binder: 12622:12624 transaction failed 29201/-22, size 40-16 line 3197 [ 596.673144] binder: 12620:12623 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.673233] binder: 12620:12623 transaction failed 29201/-22, size 40-16 line 3197 [ 596.684769] binder: BINDER_SET_CONTEXT_MGR already set [ 596.684776] binder: 12626:12633 ioctl 40046207 0 returned -16 [ 596.686007] binder: 12626:12633 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.686097] binder: 12626:12633 transaction failed 29201/-22, size 40-16 line 3197 [ 596.700012] binder: 12628:12635 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.700815] binder: 12628:12635 transaction failed 29201/-22, size 0-16 line 3197 [ 596.706017] binder_alloc: 12627: binder_alloc_buf, no vma [ 596.706055] binder: 12627:12636 transaction failed 29189/-3, size 0-16 line 3134 [ 596.707769] binder: 12629:12638 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.707823] binder: 12629:12638 transaction failed 29201/-22, size 0-16 line 3197 [ 596.729254] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.750642] binder: release 12621:12625 transaction 48242 out, still active [ 596.750646] binder: unexpected work type, 4, not freed [ 596.750649] binder: undelivered TRANSACTION_COMPLETE [ 596.750727] binder: send failed reply for transaction 48242, target dead [ 596.765652] binder: BINDER_SET_CONTEXT_MGR already set [ 596.765660] binder: 12652:12658 ioctl 40046207 0 returned -16 [ 596.766423] binder: 12652:12658 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.766512] binder: 12652:12658 transaction failed 29201/-22, size 40-16 line 3197 [ 596.766642] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.771659] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.774673] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.783517] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.798602] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.805628] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.808988] binder: 12659:12663 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.809045] binder: 12659:12663 transaction failed 29201/-22, size 0-16 line 3197 [ 596.817183] binder: 12660:12666 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.817945] binder: 12660:12666 transaction failed 29201/-22, size 40-16 line 3197 [ 596.819196] binder: BINDER_SET_CONTEXT_MGR already set [ 596.819203] binder: 12662:12667 ioctl 40046207 0 returned -16 [ 596.820039] binder: 12662:12667 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.820127] binder: 12662:12667 transaction failed 29201/-22, size 40-16 line 3197 [ 596.836577] binder_alloc: 12665: binder_alloc_buf, no vma [ 596.836623] binder: 12665:12668 transaction failed 29189/-3, size 0-16 line 3134 [ 596.837384] binder: 12671:12674 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.837440] binder: 12671:12674 transaction failed 29201/-22, size 0-16 line 3197 [ 596.851402] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.872084] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.884984] binder: release 12656:12664 transaction 48260 out, still active [ 596.884989] binder: unexpected work type, 4, not freed [ 596.884992] binder: undelivered TRANSACTION_COMPLETE [ 596.885056] binder: send failed reply for transaction 48260, target dead [ 596.885436] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.887386] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.897362] binder: 12681:12690 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.897449] binder: 12681:12690 transaction failed 29201/-22, size 40-16 line 3197 [ 596.911789] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.912025] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.918235] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.959248] binder: 12696:12701 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.959306] binder: 12696:12701 transaction failed 29201/-22, size 0-16 line 3197 [ 596.961327] binder: 12697:12704 got transaction with invalid offset (0, min 0 max 0) or object. [ 596.961383] binder: 12697:12704 transaction failed 29201/-22, size 0-16 line 3197 [ 596.963598] binder: 12694:12703 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.963689] binder: 12694:12703 transaction failed 29201/-22, size 40-16 line 3197 [ 596.963695] binder: 12695:12702 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.963782] binder: 12695:12702 transaction failed 29201/-22, size 40-16 line 3197 [ 596.968677] binder_alloc: 12698: binder_alloc_buf, no vma [ 596.968716] binder: 12698:12707 transaction failed 29189/-3, size 0-16 line 3134 [ 596.969409] binder: BINDER_SET_CONTEXT_MGR already set [ 596.969415] binder: 12700:12705 ioctl 40046207 0 returned -16 [ 596.971879] binder: 12700:12705 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.972049] binder: 12700:12705 transaction failed 29201/-22, size 40-16 line 3197 [ 596.982000] binder: BINDER_SET_CONTEXT_MGR already set [ 596.982009] binder: 12699:12706 ioctl 40046207 0 returned -16 [ 596.982902] binder: 12699:12706 got transaction with invalid offset (0, min 24 max 40) or object. [ 596.983118] binder: 12699:12706 transaction failed 29201/-22, size 40-16 line 3197 [ 597.006773] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.017843] binder: BINDER_SET_CONTEXT_MGR already set [ 597.017850] binder: 12708:12720 ioctl 40046207 0 returned -16 [ 597.024072] binder: 12708:12720 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.024455] binder: 12708:12720 transaction failed 29201/-22, size 40-16 line 3197 [ 597.049082] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.049176] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.049304] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.049399] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.049494] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.076289] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.080226] binder_alloc: 12730: binder_alloc_buf, no vma [ 597.080261] binder: 12730:12731 transaction failed 29189/-3, size 0-16 line 3134 [ 597.090596] binder: 12733:12740 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.090688] binder: 12733:12740 transaction failed 29201/-22, size 40-16 line 3197 [ 597.093336] binder: 12732:12739 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.093642] binder: 12732:12739 transaction failed 29201/-22, size 0-16 line 3197 [ 597.093814] binder: 12736:12741 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.093868] binder: 12736:12741 transaction failed 29201/-22, size 0-16 line 3197 [ 597.094171] binder: BINDER_SET_CONTEXT_MGR already set [ 597.094177] binder: 12737:12745 ioctl 40046207 0 returned -16 [ 597.095809] binder: 12737:12745 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.095896] binder: 12737:12745 transaction failed 29201/-22, size 40-16 line 3197 [ 597.098172] binder: 12735:12743 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.098259] binder: 12735:12743 transaction failed 29201/-22, size 40-16 line 3197 [ 597.110281] binder: BINDER_SET_CONTEXT_MGR already set [ 597.110289] binder: 12742:12750 ioctl 40046207 0 returned -16 [ 597.111850] binder: 12742:12750 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.111939] binder: 12742:12750 transaction failed 29201/-22, size 40-16 line 3197 [ 597.129914] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.135692] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.161722] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.174763] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.184587] binder: 12766:12767 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.184673] binder: 12766:12767 transaction failed 29201/-22, size 40-16 line 3197 [ 597.193241] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.193432] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.203949] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.209669] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.234429] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.266784] binder: 12772:12781 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.266875] binder: 12772:12781 transaction failed 29201/-22, size 40-16 line 3197 [ 597.270214] binder: BINDER_SET_CONTEXT_MGR already set [ 597.270221] binder: 12771:12780 ioctl 40046207 0 returned -16 [ 597.272190] binder: 12777:12779 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.272278] binder: 12777:12779 transaction failed 29201/-22, size 40-16 line 3197 [ 597.272656] binder: 12771:12780 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.272736] binder: 12771:12780 transaction failed 29201/-22, size 40-16 line 3197 [ 597.273419] binder: 12775:12778 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.276974] binder: 12775:12778 transaction failed 29201/-22, size 0-16 line 3197 [ 597.282525] binder_alloc: 12773: binder_alloc_buf, no vma [ 597.282563] binder: 12773:12782 transaction failed 29189/-3, size 0-16 line 3134 [ 597.283528] binder: BINDER_SET_CONTEXT_MGR already set [ 597.283535] binder: 12774:12784 ioctl 40046207 0 returned -16 [ 597.284499] binder: 12774:12784 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.284587] binder: 12774:12784 transaction failed 29201/-22, size 40-16 line 3197 [ 597.284788] binder: 12776:12783 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.284840] binder: 12776:12783 transaction failed 29201/-22, size 0-16 line 3197 [ 597.288064] binder: BINDER_SET_CONTEXT_MGR already set [ 597.288070] binder: 12786:12787 ioctl 40046207 0 returned -16 [ 597.291279] binder: 12786:12787 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.291365] binder: 12786:12787 transaction failed 29201/-22, size 40-16 line 3197 [ 597.336768] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.349969] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.353604] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.367460] binder: 12810:12811 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.370379] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.379592] binder: 12810:12811 transaction failed 29201/-22, size 40-16 line 3197 [ 597.380976] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.382513] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.382783] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.397061] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.404697] binder: BINDER_SET_CONTEXT_MGR already set [ 597.404705] binder: 12813:12816 ioctl 40046207 0 returned -16 [ 597.405543] binder: 12813:12816 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.405632] binder: 12813:12816 transaction failed 29201/-22, size 40-16 line 3197 [ 597.415926] binder: BINDER_SET_CONTEXT_MGR already set [ 597.415935] binder: 12814:12818 ioctl 40046207 0 returned -16 [ 597.417006] binder: 12814:12818 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.417086] binder: 12814:12818 transaction failed 29201/-22, size 40-16 line 3197 [ 597.421565] binder: 12817:12824 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.421654] binder: 12817:12824 transaction failed 29201/-22, size 40-16 line 3197 [ 597.421845] binder: 12819:12823 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.421897] binder: 12819:12823 transaction failed 29201/-22, size 0-16 line 3197 [ 597.439751] binder_alloc: 12812: binder_alloc_buf, no vma [ 597.442217] binder: 12812:12825 transaction failed 29189/-3, size 0-16 line 3134 [ 597.447408] binder: 12820:12829 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.447466] binder: 12820:12829 transaction failed 29201/-22, size 0-16 line 3197 [ 597.454916] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.457358] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.485774] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.485940] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.498714] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.512141] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.517362] binder: 12832:12841 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.517451] binder: 12832:12841 transaction failed 29201/-22, size 40-16 line 3197 [ 597.526947] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.547537] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.579786] binder: BINDER_SET_CONTEXT_MGR already set [ 597.579793] binder: 12851:12855 ioctl 40046207 0 returned -16 [ 597.579799] binder: 12849:12857 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.579885] binder: 12849:12857 transaction failed 29201/-22, size 40-16 line 3197 [ 597.580744] binder: 12851:12855 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.580829] binder: 12851:12855 transaction failed 29201/-22, size 40-16 line 3197 [ 597.583955] binder: 12848:12856 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.584011] binder: 12848:12856 transaction failed 29201/-22, size 0-16 line 3197 [ 597.586034] binder: 12850:12858 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.586121] binder: 12850:12858 transaction failed 29201/-22, size 40-16 line 3197 [ 597.593595] binder: BINDER_SET_CONTEXT_MGR already set [ 597.593602] binder: 12853:12860 ioctl 40046207 0 returned -16 [ 597.594927] binder: 12853:12860 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.595012] binder: 12853:12860 transaction failed 29201/-22, size 40-16 line 3197 [ 597.597699] binder: 12854:12861 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.597753] binder: 12854:12861 transaction failed 29201/-22, size 0-16 line 3197 [ 597.608911] binder_alloc: 12852: binder_alloc_buf, no vma [ 597.608949] binder: 12852:12859 transaction failed 29189/-3, size 0-16 line 3134 [ 597.631417] binder: BINDER_SET_CONTEXT_MGR already set [ 597.631424] binder: 12863:12873 ioctl 40046207 0 returned -16 [ 597.632210] binder: 12863:12873 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.632292] binder: 12863:12873 transaction failed 29201/-22, size 40-16 line 3197 [ 597.635266] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.647366] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.657964] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.665058] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.669295] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.673679] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.692399] binder: 12883:12886 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.692491] binder: 12883:12886 transaction failed 29201/-22, size 40-16 line 3197 [ 597.694588] binder: BINDER_SET_CONTEXT_MGR already set [ 597.694599] binder: 12891:12895 ioctl 40046207 0 returned -16 [ 597.696333] binder: 12891:12895 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.696420] binder: 12891:12895 transaction failed 29201/-22, size 40-16 line 3197 [ 597.696670] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.709707] binder: 12888:12896 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.709762] binder: 12888:12896 transaction failed 29201/-22, size 0-16 line 3197 [ 597.713792] binder: 12887:12894 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.713877] binder: 12887:12894 transaction failed 29201/-22, size 40-16 line 3197 [ 597.717852] binder: 12892:12897 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.717908] binder: 12892:12897 transaction failed 29201/-22, size 0-16 line 3197 [ 597.733445] binder_alloc: 12890: binder_alloc_buf, no vma [ 597.733723] binder: 12890:12902 transaction failed 29189/-3, size 0-16 line 3134 [ 597.738925] binder: BINDER_SET_CONTEXT_MGR already set [ 597.738933] binder: 12901:12907 ioctl 40046207 0 returned -16 [ 597.740095] binder: 12901:12907 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.740270] binder: 12901:12907 transaction failed 29201/-22, size 40-16 line 3197 [ 597.761124] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.767574] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.773910] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.795071] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.795184] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.802950] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.808756] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.813004] binder: 12921:12922 transaction failed 29189/-22, size 40-16 line 3011 [ 597.836533] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.836610] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.856341] binder: 12928:12933 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.856428] binder: 12928:12933 transaction failed 29201/-22, size 40-16 line 3197 [ 597.865168] binder: 12926:12932 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.865225] binder: 12926:12932 transaction failed 29201/-22, size 0-16 line 3197 [ 597.867174] binder: 12930:12934 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.867230] binder: 12930:12934 transaction failed 29201/-22, size 0-16 line 3197 [ 597.868923] binder: BINDER_SET_CONTEXT_MGR already set [ 597.868930] binder: 12927:12936 ioctl 40046207 0 returned -16 [ 597.870115] binder: 12927:12936 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.870204] binder: 12927:12936 transaction failed 29201/-22, size 40-16 line 3197 [ 597.871465] binder: 12925:12937 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.871647] binder: 12925:12937 transaction failed 29201/-22, size 40-16 line 3197 [ 597.876508] binder: 12931:12938 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.876570] binder: 12931:12938 transaction failed 29201/-22, size 0-16 line 3197 [ 597.883533] binder_alloc: 12929: binder_alloc_buf, no vma [ 597.883572] binder: 12929:12935 transaction failed 29189/-3, size 0-16 line 3134 [ 597.904950] binder: 12939:12951 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.905041] binder: 12939:12951 transaction failed 29201/-22, size 40-16 line 3197 [ 597.915473] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.928922] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.944811] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.955194] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.961212] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.967102] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.974591] binder: 12965:12969 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.974708] binder: 12965:12969 transaction failed 29201/-22, size 40-16 line 3197 [ 597.979661] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.994854] binder: 12967:12970 got transaction with invalid offset (0, min 24 max 40) or object. [ 597.994942] binder: 12967:12970 transaction failed 29201/-22, size 40-16 line 3197 [ 597.996839] binder: 12964:12975 got transaction with invalid offset (0, min 0 max 0) or object. [ 597.996897] binder: 12964:12975 transaction failed 29201/-22, size 0-16 line 3197 [ 597.999848] binder: 12968:12976 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.000229] binder: 12968:12976 transaction failed 29201/-22, size 0-16 line 3197 [ 598.004521] binder: BINDER_SET_CONTEXT_MGR already set [ 598.004529] binder: 12973:12978 ioctl 40046207 0 returned -16 [ 598.006162] binder: 12973:12978 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.006249] binder: 12973:12978 transaction failed 29201/-22, size 40-16 line 3197 [ 598.021886] binder_alloc: 12963: binder_alloc_buf, no vma [ 598.021966] binder: 12963:12977 transaction failed 29189/-3, size 0-16 line 3134 [ 598.025768] binder: 12974:12983 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.025821] binder: 12974:12983 transaction failed 29201/-22, size 0-16 line 3197 [ 598.041302] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.062613] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.067956] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.081229] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.089353] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.093378] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.108349] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.109967] binder: 13001:13003 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.110025] binder: 13001:13003 transaction failed 29201/-22, size 0-16 line 3197 [ 598.117346] binder: 13002:13004 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.117402] binder: 13002:13004 transaction failed 29201/-22, size 0-16 line 3197 [ 598.121717] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.134788] binder: 13005:13009 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.134871] binder: 13005:13009 transaction failed 29201/-22, size 40-16 line 3197 [ 598.135584] binder: 13008:13011 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.135674] binder: 13008:13011 transaction failed 29201/-22, size 40-16 line 3197 [ 598.135832] binder: BINDER_SET_CONTEXT_MGR already set [ 598.135839] binder: 12999:13012 ioctl 40046207 0 returned -16 [ 598.136692] binder: 12999:13012 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.136780] binder: 12999:13012 transaction failed 29201/-22, size 40-16 line 3197 [ 598.150288] binder: 13006:13013 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.150372] binder: 13006:13013 transaction failed 29201/-22, size 0-16 line 3197 [ 598.159958] binder: 12998:13014 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.160053] binder: 12998:13014 transaction failed 29201/-22, size 40-16 line 3197 [ 598.172227] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.190455] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.196538] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.213013] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.221091] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.226627] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.235750] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.265550] binder: 13035:13045 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.265641] binder: 13035:13045 transaction failed 29201/-22, size 40-16 line 3197 [ 598.268085] binder: 13040:13041 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.268137] binder: 13040:13041 transaction failed 29201/-22, size 0-16 line 3197 [ 598.269834] binder: 13034:13042 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.269883] binder: 13034:13042 transaction failed 29201/-22, size 0-16 line 3197 [ 598.272013] binder: 13038:13046 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.272105] binder: 13038:13046 transaction failed 29201/-22, size 40-16 line 3197 [ 598.274763] binder: 13039:13048 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.274819] binder: 13039:13048 transaction failed 29201/-22, size 0-16 line 3197 [ 598.277137] binder: BINDER_SET_CONTEXT_MGR already set [ 598.277143] binder: 13036:13044 ioctl 40046207 0 returned -16 [ 598.278052] binder: 13036:13044 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.278154] binder: 13036:13044 transaction failed 29201/-22, size 40-16 line 3197 [ 598.279951] binder_alloc: 13037: binder_alloc_buf, no vma [ 598.279992] binder: 13037:13043 transaction failed 29189/-3, size 0-16 line 3134 [ 598.321850] binder: BINDER_SET_CONTEXT_MGR already set [ 598.321859] binder: 13047:13061 ioctl 40046207 0 returned -16 [ 598.332793] binder_alloc: 13038: binder_alloc_buf, no vma [ 598.332831] binder: 13047:13061 transaction failed 29189/-3, size 40-16 line 3134 [ 598.333888] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.334203] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.344880] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.356222] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.364488] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.364583] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.369034] binder: 13070:13071 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.369121] binder: 13070:13071 transaction failed 29201/-22, size 40-16 line 3197 [ 598.372166] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.395017] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.406576] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.450219] binder: 13078:13083 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.450309] binder: 13078:13083 transaction failed 29201/-22, size 40-16 line 3197 [ 598.455190] binder: 13076:13084 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.455244] binder: 13076:13084 transaction failed 29201/-22, size 0-16 line 3197 [ 598.461336] binder: BINDER_SET_CONTEXT_MGR already set [ 598.461344] binder: 13077:13086 ioctl 40046207 0 returned -16 [ 598.462118] binder: 13077:13086 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.462209] binder: 13077:13086 transaction failed 29201/-22, size 40-16 line 3197 [ 598.463250] binder: 13081:13087 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.463311] binder: 13081:13087 transaction failed 29201/-22, size 0-16 line 3197 [ 598.464334] binder: 13082:13089 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.465068] binder: 13082:13089 transaction failed 29201/-22, size 40-16 line 3197 [ 598.465739] binder: 13079:13088 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.465794] binder: 13079:13088 transaction failed 29201/-22, size 0-16 line 3197 [ 598.469382] binder_alloc: 13080: binder_alloc_buf, no vma [ 598.469419] binder: 13080:13090 transaction failed 29189/-3, size 0-16 line 3134 [ 598.493272] binder: BINDER_SET_CONTEXT_MGR already set [ 598.493585] binder: 13085:13097 ioctl 40046207 0 returned -16 [ 598.494799] binder: 13085:13097 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.494886] binder: 13085:13097 transaction failed 29201/-22, size 40-16 line 3197 [ 598.528358] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.529847] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.539360] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.542327] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.542663] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.544491] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.571649] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.577086] binder: 13114:13115 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.577146] binder: 13114:13115 transaction failed 29201/-22, size 0-16 line 3197 [ 598.600279] binder: 13113:13124 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.600517] binder: 13113:13124 transaction failed 29201/-22, size 40-16 line 3197 [ 598.601890] binder: 13116:13123 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.601985] binder: 13116:13123 transaction failed 29201/-22, size 40-16 line 3197 [ 598.604262] binder: 13119:13127 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.604318] binder: 13119:13127 transaction failed 29201/-22, size 0-16 line 3197 [ 598.605710] binder: BINDER_SET_CONTEXT_MGR already set [ 598.605717] binder: 13120:13125 ioctl 40046207 0 returned -16 [ 598.607729] binder: 13120:13125 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.607814] binder: 13120:13125 transaction failed 29201/-22, size 40-16 line 3197 [ 598.620217] binder: 13117:13126 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.620275] binder: 13117:13126 transaction failed 29201/-22, size 0-16 line 3197 [ 598.637928] binder_alloc: 13121: binder_alloc_buf, no vma [ 598.637972] binder: 13121:13132 transaction failed 29189/-3, size 0-16 line 3134 [ 598.647941] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.655573] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.680888] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.684930] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.693583] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.700269] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.709268] binder: 13150:13151 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.709350] binder: 13150:13151 transaction failed 29201/-22, size 40-16 line 3197 [ 598.715877] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.716162] binder: 13147:13149 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.716384] binder: 13147:13149 transaction failed 29201/-22, size 0-16 line 3197 [ 598.722195] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.722562] binder: BINDER_SET_CONTEXT_MGR already set [ 598.722569] binder: 13155:13160 ioctl 40046207 0 returned -16 [ 598.727785] binder: 13155:13160 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.727874] binder: 13155:13160 transaction failed 29201/-22, size 40-16 line 3197 [ 598.731293] binder: 13152:13158 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.731348] binder: 13152:13158 transaction failed 29201/-22, size 0-16 line 3197 [ 598.734441] binder: 13153:13159 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.734524] binder: 13153:13159 transaction failed 29201/-22, size 40-16 line 3197 [ 598.751455] binder: BINDER_SET_CONTEXT_MGR already set [ 598.751463] binder: 13156:13162 ioctl 40046207 0 returned -16 [ 598.752267] binder: 13156:13162 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.752356] binder: 13156:13162 transaction failed 29201/-22, size 40-16 line 3197 [ 598.765458] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.765915] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.780533] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.798105] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.808064] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.815998] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.843677] binder: 13179:13184 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.843768] binder: 13179:13184 transaction failed 29201/-22, size 40-16 line 3197 [ 598.843802] binder: 13181:13186 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.844434] binder: 13181:13186 transaction failed 29201/-22, size 0-16 line 3197 [ 598.846188] binder: 13178:13185 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.846246] binder: 13178:13185 transaction failed 29201/-22, size 0-16 line 3197 [ 598.846311] binder: 13176:13183 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.846364] binder: 13176:13183 transaction failed 29201/-22, size 0-16 line 3197 [ 598.850287] binder: BINDER_SET_CONTEXT_MGR already set [ 598.850295] binder: 13182:13189 ioctl 40046207 0 returned -16 [ 598.851581] binder: 13182:13189 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.851656] binder: 13182:13189 transaction failed 29201/-22, size 40-16 line 3197 [ 598.852944] binder: 13180:13188 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.853031] binder: 13180:13188 transaction failed 29201/-22, size 40-16 line 3197 [ 598.856518] binder_alloc: 13177: binder_alloc_buf, no vma [ 598.856555] binder: 13177:13187 transaction failed 29189/-3, size 0-16 line 3134 [ 598.887353] binder: BINDER_SET_CONTEXT_MGR already set [ 598.887362] binder: 13190:13202 ioctl 40046207 0 returned -16 [ 598.888289] binder: 13190:13202 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.888378] binder: 13190:13202 transaction failed 29201/-22, size 40-16 line 3197 [ 598.908686] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.916252] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.925591] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.935184] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.935271] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.944012] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.944058] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.946303] binder: 13213:13216 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.946361] binder: 13213:13216 transaction failed 29201/-22, size 0-16 line 3197 [ 598.962937] binder: 13214:13217 got transaction with invalid offset (0, min 0 max 0) or object. [ 598.962996] binder: 13214:13217 transaction failed 29201/-22, size 0-16 line 3197 [ 598.973743] binder: 13219:13222 got transaction with invalid offset (0, min 24 max 40) or object. [ 598.973833] binder: 13219:13222 transaction failed 29201/-22, size 40-16 line 3197 [ 598.979748] binder_alloc: 13220: binder_alloc_buf, no vma [ 598.979785] binder: 13220:13224 transaction failed 29189/-3, size 0-16 line 3134 [ 598.982417] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.997636] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.997683] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.013606] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.023366] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.056109] binder: 13232:13237 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.056201] binder: 13232:13237 transaction failed 29201/-22, size 40-16 line 3197 [ 599.058071] binder: 13231:13241 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.058125] binder: 13231:13241 transaction failed 29201/-22, size 0-16 line 3197 [ 599.059664] binder: 13240:13242 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.059745] binder: 13240:13242 transaction failed 29201/-22, size 40-16 line 3197 [ 599.063777] binder: 13233:13238 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.063831] binder: 13233:13238 transaction failed 29201/-22, size 0-16 line 3197 [ 599.066677] binder: 13239:13246 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.066731] binder: 13239:13246 transaction failed 29201/-22, size 0-16 line 3197 [ 599.068394] binder_alloc: 13235: binder_alloc_buf, no vma [ 599.068438] binder: 13235:13244 transaction failed 29189/-3, size 0-16 line 3134 [ 599.069462] binder_alloc: 13234: binder_alloc_buf, no vma [ 599.069578] binder: 13234:13243 transaction failed 29189/-3, size 0-16 line 3134 [ 599.084907] binder: BINDER_SET_CONTEXT_MGR already set [ 599.084914] binder: 13236:13247 ioctl 40046207 0 returned -16 [ 599.086128] binder: 13236:13247 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.086219] binder: 13236:13247 transaction failed 29201/-22, size 40-16 line 3197 [ 599.095955] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.117684] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.123940] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.139494] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.147980] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.152827] binder: 13269:13272 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.152941] binder: 13269:13272 transaction failed 29201/-22, size 40-16 line 3197 [ 599.160843] binder_alloc: 13261: binder_alloc_buf, no vma [ 599.160879] binder: 13261:13266 transaction failed 29189/-3, size 0-16 line 3134 [ 599.164729] binder: 13270:13273 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.164818] binder: 13270:13273 transaction failed 29201/-22, size 40-16 line 3197 [ 599.165542] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.169817] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.189761] binder: 13274:13277 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.190111] binder: 13274:13277 transaction failed 29201/-22, size 0-16 line 3197 [ 599.195678] binder: 13276:13280 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.195730] binder: 13276:13280 transaction failed 29201/-22, size 0-16 line 3197 [ 599.199080] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.212753] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.214168] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.222581] binder: 13279:13287 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.222635] binder: 13279:13287 transaction failed 29201/-22, size 0-16 line 3197 [ 599.237545] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.245823] binder_alloc: 13281: binder_alloc_buf, no vma [ 599.245860] binder: 13281:13294 transaction failed 29189/-3, size 40-16 line 3134 [ 599.251737] binder_alloc: 13293: binder_alloc_buf, no vma [ 599.251773] binder: 13293:13296 transaction failed 29189/-3, size 0-16 line 3134 [ 599.257883] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.277160] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.278281] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.286895] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.296397] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.319193] binder_alloc: 13304: binder_alloc_buf, no vma [ 599.319231] binder: 13304:13306 transaction failed 29189/-3, size 0-16 line 3134 [ 599.330134] binder: 13303:13315 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.330216] binder: 13303:13315 transaction failed 29201/-22, size 40-16 line 3197 [ 599.333823] binder: 13305:13311 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.333917] binder: 13305:13311 transaction failed 29201/-22, size 40-16 line 3197 [ 599.336353] binder: 13307:13309 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.336409] binder: 13307:13309 transaction failed 29201/-22, size 0-16 line 3197 [ 599.341287] binder: 13312:13318 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.341340] binder: 13312:13318 transaction failed 29201/-22, size 0-16 line 3197 [ 599.344765] binder: 13310:13317 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.344821] binder: 13310:13317 transaction failed 29201/-22, size 0-16 line 3197 [ 599.344967] binder: BINDER_SET_CONTEXT_MGR already set [ 599.344974] binder: 13308:13313 ioctl 40046207 0 returned -16 [ 599.357580] binder_alloc: 13314: binder_alloc_buf, no vma [ 599.357617] binder: 13314:13319 transaction failed 29189/-3, size 0-16 line 3134 [ 599.361505] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.374664] binder: 13308:13313 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.374749] binder: 13308:13313 transaction failed 29201/-22, size 40-16 line 3197 [ 599.397984] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.398386] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.425218] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.439190] binder: 13342:13346 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.439237] binder: 13342:13346 transaction failed 29201/-22, size 0-16 line 3197 [ 599.440964] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.461905] binder_alloc: 13331: binder_alloc_buf, no vma [ 599.461944] binder: 13331:13338 transaction failed 29189/-3, size 0-16 line 3134 [ 599.474520] binder: 13343:13345 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.474609] binder: 13343:13345 transaction failed 29201/-22, size 40-16 line 3197 [ 599.483010] binder: 13348:13356 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.483066] binder: 13348:13356 transaction failed 29201/-22, size 0-16 line 3197 [ 599.490086] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.490211] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.493576] binder: 13349:13359 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.493664] binder: 13349:13359 transaction failed 29201/-22, size 40-16 line 3197 [ 599.497779] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.507186] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.509250] binder: 13350:13357 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.509308] binder: 13350:13357 transaction failed 29201/-22, size 0-16 line 3197 [ 599.513165] binder_alloc: 13354: binder_alloc_buf, no vma [ 599.513203] binder: 13354:13360 transaction failed 29189/-3, size 0-16 line 3134 [ 599.518541] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.538505] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.543601] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.550251] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.564983] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.570990] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.606716] binder: 13373:13377 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.606772] binder: 13373:13377 transaction failed 29201/-22, size 0-16 line 3197 [ 599.612293] binder: 13375:13382 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.612351] binder: 13375:13382 transaction failed 29201/-22, size 0-16 line 3197 [ 599.612390] binder: 13376:13383 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.612475] binder: 13376:13383 transaction failed 29201/-22, size 40-16 line 3197 [ 599.619114] binder: 13380:13384 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.619200] binder: 13380:13384 transaction failed 29201/-22, size 40-16 line 3197 [ 599.622796] binder_alloc: 13379: binder_alloc_buf, no vma [ 599.622834] binder: 13379:13385 transaction failed 29189/-3, size 0-16 line 3134 [ 599.623282] binder_alloc: 13372: binder_alloc_buf, no vma [ 599.623320] binder: 13372:13381 transaction failed 29189/-3, size 0-16 line 3134 [ 599.623579] binder: 13374:13386 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.623631] binder: 13374:13386 transaction failed 29201/-22, size 0-16 line 3197 [ 599.639579] binder: BINDER_SET_CONTEXT_MGR already set [ 599.639589] binder: 13378:13387 ioctl 40046207 0 returned -16 [ 599.641593] binder: 13378:13387 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.646250] binder: 13378:13387 transaction failed 29201/-22, size 40-16 line 3197 [ 599.648487] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.677704] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.689660] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.689802] binder_alloc: 13402: binder_alloc_buf, no vma [ 599.689840] binder: 13402:13406 transaction failed 29189/-3, size 0-16 line 3134 [ 599.702442] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.709529] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.745845] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.745949] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.746335] binder: 13411:13413 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.746395] binder: 13411:13413 transaction failed 29201/-22, size 0-16 line 3197 [ 599.757035] binder: 13414:13420 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.757126] binder: 13414:13420 transaction failed 29201/-22, size 40-16 line 3197 [ 599.757288] binder: 13409:13417 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.757347] binder: 13409:13417 transaction failed 29201/-22, size 0-16 line 3197 [ 599.764743] binder: 13412:13421 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.764834] binder: 13412:13421 transaction failed 29201/-22, size 40-16 line 3197 [ 599.765065] binder: 13418:13422 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.765120] binder: 13418:13422 transaction failed 29201/-22, size 0-16 line 3197 [ 599.781196] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.784189] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.799797] binder_alloc: 13431: binder_alloc_buf, no vma [ 599.799835] binder: 13431:13436 transaction failed 29189/-3, size 0-16 line 3134 [ 599.812653] binder_alloc: 13419: binder_alloc_buf, no vma [ 599.812691] binder: 13419:13428 transaction failed 29189/-3, size 0-16 line 3134 [ 599.813514] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.845757] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.849904] binder: 13444:13447 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.849978] binder: 13444:13447 transaction failed 29201/-22, size 0-16 line 3197 [ 599.854111] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.858686] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.858977] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.863634] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.863775] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.886793] binder: 13448:13451 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.886881] binder: 13448:13451 transaction failed 29201/-22, size 40-16 line 3197 [ 599.898975] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.917109] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.946499] binder: 13456:13463 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.946558] binder: 13456:13463 transaction failed 29201/-22, size 0-16 line 3197 [ 599.952478] binder: 13458:13465 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.952567] binder: 13458:13465 transaction failed 29201/-22, size 40-16 line 3197 [ 599.954515] binder: 13457:13462 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.954568] binder: 13457:13462 transaction failed 29201/-22, size 0-16 line 3197 [ 599.960309] binder: 13460:13466 got transaction with invalid offset (0, min 24 max 40) or object. [ 599.960955] binder_alloc: 13455: binder_alloc_buf, no vma [ 599.960991] binder: 13455:13468 transaction failed 29189/-3, size 0-16 line 3134 [ 599.963046] binder: 13461:13464 got transaction with invalid offset (0, min 0 max 0) or object. [ 599.963196] binder: 13461:13464 transaction failed 29201/-22, size 0-16 line 3197 [ 599.965001] binder: 13460:13466 transaction failed 29201/-22, size 40-16 line 3197 [ 599.967306] binder_alloc: 13459: binder_alloc_buf, no vma [ 599.967348] binder: 13459:13467 transaction failed 29189/-3, size 0-16 line 3134 [ 599.993663] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.039443] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.039551] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.039596] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.053252] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.058295] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.087059] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.093051] binder_alloc: 13486: binder_alloc_buf, no vma [ 600.093089] binder: 13486:13492 transaction failed 29189/-3, size 0-16 line 3134 [ 600.098885] binder: 13494:13500 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.098974] binder: 13494:13500 transaction failed 29201/-22, size 40-16 line 3197 [ 600.107863] binder: 13497:13503 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.107921] binder: 13497:13503 transaction failed 29201/-22, size 0-16 line 3197 [ 600.108686] binder: 13496:13499 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.108740] binder: 13496:13499 transaction failed 29201/-22, size 0-16 line 3197 [ 600.113687] binder: 13495:13502 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.113776] binder: 13495:13502 transaction failed 29201/-22, size 40-16 line 3197 [ 600.120826] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.122900] binder: BINDER_SET_CONTEXT_MGR already set [ 600.122907] binder: 13498:13504 ioctl 40046207 0 returned -16 [ 600.124080] binder: 13498:13504 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.124136] binder: 13498:13504 transaction failed 29201/-22, size 0-16 line 3197 [ 600.146109] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.156433] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.167912] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.177200] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.192304] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.227594] binder: 13521:13528 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.227683] binder: 13521:13528 transaction failed 29201/-22, size 40-16 line 3197 [ 600.228011] binder: 13519:13526 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.228065] binder: 13519:13526 transaction failed 29201/-22, size 0-16 line 3197 [ 600.232526] binder_alloc: 13522: binder_alloc_buf, no vma [ 600.232563] binder: 13522:13527 transaction failed 29189/-3, size 0-16 line 3134 [ 600.232688] binder: 13520:13525 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.232772] binder: 13520:13525 transaction failed 29201/-22, size 40-16 line 3197 [ 600.239405] binder: 13523:13530 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.239460] binder: 13523:13530 transaction failed 29201/-22, size 0-16 line 3197 [ 600.241207] binder: 13517:13531 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.241264] binder: 13517:13531 transaction failed 29201/-22, size 0-16 line 3197 [ 600.244167] binder: BINDER_SET_CONTEXT_MGR already set [ 600.244175] binder: 13518:13529 ioctl 40046207 0 returned -16 [ 600.244338] binder: 13518:13529 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.244394] binder: 13518:13529 transaction failed 29201/-22, size 0-16 line 3197 [ 600.278375] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.304493] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.307430] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.320863] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.324803] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.326996] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.341135] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.347884] binder: 13556:13558 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.347932] binder: 13556:13558 transaction failed 29201/-22, size 0-16 line 3197 [ 600.367027] binder_alloc: 13553: binder_alloc_buf, no vma [ 600.367067] binder: 13553:13560 transaction failed 29189/-3, size 0-16 line 3134 [ 600.367374] binder: 13557:13559 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.367430] binder: 13557:13559 transaction failed 29201/-22, size 0-16 line 3197 [ 600.367517] binder: 13555:13564 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.367608] binder: 13555:13564 transaction failed 29201/-22, size 40-16 line 3197 [ 600.370205] binder: 13554:13563 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.370260] binder: 13554:13563 transaction failed 29201/-22, size 0-16 line 3197 [ 600.382150] binder: 13562:13565 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.382241] binder: 13562:13565 transaction failed 29201/-22, size 40-16 line 3197 [ 600.386929] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.402385] binder: BINDER_SET_CONTEXT_MGR already set [ 600.402393] binder: 13566:13572 ioctl 40046207 0 returned -16 [ 600.403166] binder: 13566:13572 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.403219] binder: 13566:13572 transaction failed 29201/-22, size 0-16 line 3197 [ 600.422598] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.425487] binder_alloc: 13578: binder_alloc_buf, no vma [ 600.425525] binder: 13578:13586 transaction failed 29189/-3, size 0-16 line 3134 [ 600.446783] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.446899] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.447126] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.462304] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.465103] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.478069] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.491426] binder: 13591:13593 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.491482] binder: 13591:13593 transaction failed 29201/-22, size 0-16 line 3197 [ 600.508289] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.540267] binder: 13596:13606 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.541476] binder: 13598:13604 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.542256] binder: 13598:13604 transaction failed 29201/-22, size 40-16 line 3197 [ 600.543011] binder: 13600:13607 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.543098] binder: 13600:13607 transaction failed 29201/-22, size 40-16 line 3197 [ 600.543687] binder: 13597:13602 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.543744] binder: 13597:13602 transaction failed 29201/-22, size 0-16 line 3197 [ 600.546704] binder: 13596:13606 transaction failed 29201/-22, size 0-16 line 3197 [ 600.552070] binder: 13605:13608 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.552127] binder: 13605:13608 transaction failed 29201/-22, size 0-16 line 3197 [ 600.554164] binder_alloc: 13599: binder_alloc_buf, no vma [ 600.554199] binder: 13599:13609 transaction failed 29189/-3, size 0-16 line 3134 [ 600.559854] binder_alloc: 13601: binder_alloc_buf, no vma [ 600.559903] binder: 13601:13610 transaction failed 29189/-3, size 0-16 line 3134 [ 600.560564] binder: BINDER_SET_CONTEXT_MGR already set [ 600.560571] binder: 13603:13612 ioctl 40046207 0 returned -16 [ 600.571712] binder: 13603:13612 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.571810] binder: 13603:13612 transaction failed 29201/-22, size 40-16 line 3197 [ 600.579434] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.593427] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.608422] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.620074] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.636711] binder_alloc: 13628: binder_alloc_buf, no vma [ 600.636747] binder: 13628:13631 transaction failed 29189/-3, size 0-16 line 3134 [ 600.638146] binder: 13632:13636 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.638205] binder: 13632:13636 transaction failed 29201/-22, size 0-16 line 3197 [ 600.641572] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.641677] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.656964] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.665596] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.674371] binder: 13638:13643 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.674457] binder: 13638:13643 transaction failed 29201/-22, size 40-16 line 3197 [ 600.684166] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.685144] binder: 13641:13646 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.685233] binder: 13641:13646 transaction failed 29201/-22, size 40-16 line 3197 [ 600.687355] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.688548] binder: 13637:13645 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.688695] binder: 13637:13645 transaction failed 29201/-22, size 0-16 line 3197 [ 600.697629] binder: 13642:13647 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.697719] binder: 13642:13647 transaction failed 29201/-22, size 40-16 line 3197 [ 600.713422] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.738191] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.743150] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.762790] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.805456] binder_alloc: 13663: binder_alloc_buf, no vma [ 600.805494] binder: 13663:13666 transaction failed 29189/-3, size 0-16 line 3134 [ 600.807958] binder: 13664:13668 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.808015] binder: 13664:13668 transaction failed 29201/-22, size 0-16 line 3197 [ 600.808783] binder: 13665:13667 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.808875] binder: 13665:13667 transaction failed 29201/-22, size 40-16 line 3197 [ 600.811248] binder: 13661:13671 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.811343] binder: 13661:13671 transaction failed 29201/-22, size 40-16 line 3197 [ 600.811594] binder: 13658:13669 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.811648] binder: 13658:13669 transaction failed 29201/-22, size 0-16 line 3197 [ 600.814930] binder: 13659:13670 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.815389] binder: 13659:13670 transaction failed 29201/-22, size 40-16 line 3197 [ 600.824545] binder_alloc: 13662: binder_alloc_buf, no vma [ 600.824582] binder: 13662:13672 transaction failed 29189/-3, size 0-16 line 3134 [ 600.832633] binder: BINDER_SET_CONTEXT_MGR already set [ 600.832643] binder: 13660:13673 ioctl 40046207 0 returned -16 [ 600.833911] binder: 13660:13673 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.834003] binder: 13660:13673 transaction failed 29201/-22, size 40-16 line 3197 [ 600.854852] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.855220] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.867799] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.898007] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.899840] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.901851] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.905695] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.914986] binder_alloc: 13694: binder_alloc_buf, no vma [ 600.915024] binder: 13694:13699 transaction failed 29189/-3, size 0-16 line 3134 [ 600.915873] binder: 13695:13697 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.915933] binder: 13695:13697 transaction failed 29201/-22, size 0-16 line 3197 [ 600.925042] binder: 13693:13698 got transaction with invalid offset (0, min 0 max 0) or object. [ 600.925096] binder: 13693:13698 transaction failed 29201/-22, size 0-16 line 3197 [ 600.935361] binder: 13702:13708 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.935452] binder: 13702:13708 transaction failed 29201/-22, size 40-16 line 3197 [ 600.946319] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.957064] binder: 13704:13709 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.957151] binder: 13704:13709 transaction failed 29201/-22, size 40-16 line 3197 [ 600.960968] binder: 13700:13710 got transaction with invalid offset (0, min 24 max 40) or object. [ 600.961059] binder: 13700:13710 transaction failed 29201/-22, size 40-16 line 3197 [ 600.966972] binder_alloc: 13707: binder_alloc_buf, no vma [ 600.967010] binder: 13707:13714 transaction failed 29189/-3, size 0-16 line 3134 [ 600.972329] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.998726] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.001513] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.024401] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.029909] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.044588] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.045050] binder: BINDER_SET_CONTEXT_MGR already set [ 601.045057] binder: 13725:13731 ioctl 40046207 0 returned -16 [ 601.045829] binder: 13725:13731 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.045950] binder: 13725:13731 transaction failed 29201/-22, size 40-16 line 3197 [ 601.046245] binder_alloc: 13722: binder_alloc_buf, no vma [ 601.046283] binder: 13722:13726 transaction failed 29189/-3, size 0-16 line 3134 [ 601.052238] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.078291] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.083635] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.109253] binder: 13737:13744 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.109311] binder: 13737:13744 transaction failed 29201/-22, size 0-16 line 3197 [ 601.116112] binder: 13741:13745 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.116192] binder: 13741:13745 transaction failed 29201/-22, size 40-16 line 3197 [ 601.116361] binder_alloc: 13742: binder_alloc_buf, no vma [ 601.116393] binder: 13742:13743 transaction failed 29189/-3, size 0-16 line 3134 [ 601.120468] binder: 13736:13747 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.120519] binder: 13740:13749 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.120525] binder: 13736:13747 transaction failed 29201/-22, size 0-16 line 3197 [ 601.120612] binder: 13740:13749 transaction failed 29201/-22, size 40-16 line 3197 [ 601.123926] binder: 13738:13748 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.124013] binder: 13738:13748 transaction failed 29201/-22, size 40-16 line 3197 [ 601.126419] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.138356] binder_alloc: 13739: binder_alloc_buf, no vma [ 601.138399] binder: 13739:13746 transaction failed 29189/-3, size 0-16 line 3134 [ 601.159322] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.171377] binder_alloc: 13757: binder_alloc_buf, no vma [ 601.171415] binder: 13757:13763 transaction failed 29189/-3, size 0-16 line 3134 [ 601.179257] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.183445] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.189371] binder: BINDER_SET_CONTEXT_MGR already set [ 601.189377] binder: 13750:13769 ioctl 40046207 0 returned -16 [ 601.191993] binder: 13750:13769 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.192078] binder: 13750:13769 transaction failed 29201/-22, size 40-16 line 3197 [ 601.202990] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.210184] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.211569] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.231333] binder_alloc: 13768: binder_alloc_buf, no vma [ 601.231369] binder: 13768:13771 transaction failed 29189/-3, size 0-16 line 3134 [ 601.244559] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.245163] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.253159] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.281790] binder_alloc: 13776: binder_alloc_buf, no vma [ 601.281829] binder: 13776:13784 transaction failed 29189/-3, size 0-16 line 3134 [ 601.283071] binder: 13778:13783 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.283129] binder: 13778:13783 transaction failed 29201/-22, size 0-16 line 3197 [ 601.284333] binder: 13781:13787 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.284421] binder: 13781:13787 transaction failed 29201/-22, size 40-16 line 3197 [ 601.285455] binder: 13777:13786 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.285542] binder: 13777:13786 transaction failed 29201/-22, size 40-16 line 3197 [ 601.287264] binder: 13779:13785 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.287348] binder: 13779:13785 transaction failed 29201/-22, size 40-16 line 3197 [ 601.290210] binder: 13780:13788 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.291862] binder: 13780:13788 transaction failed 29201/-22, size 0-16 line 3197 [ 601.296815] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.323688] binder_alloc: 13782: binder_alloc_buf, no vma [ 601.323726] binder: 13782:13792 transaction failed 29189/-3, size 0-16 line 3134 [ 601.336767] binder: BINDER_SET_CONTEXT_MGR already set [ 601.336776] binder: 13794:13806 ioctl 40046207 0 returned -16 [ 601.337977] binder: 13794:13806 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.340294] binder: 13794:13806 transaction failed 29201/-22, size 40-16 line 3197 [ 601.340298] binder_alloc: 13798: binder_alloc_buf, no vma [ 601.346154] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.351197] binder: 13798:13802 transaction failed 29189/-3, size 0-16 line 3134 [ 601.355874] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.364754] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.374577] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.375930] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.386893] binder: 13812:13818 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.386951] binder: 13812:13818 transaction failed 29201/-22, size 0-16 line 3197 [ 601.395438] binder: 13816:13819 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.395495] binder: 13816:13819 transaction failed 29201/-22, size 0-16 line 3197 [ 601.396690] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.399711] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.417159] binder: 13815:13821 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.417243] binder: 13815:13821 transaction failed 29201/-22, size 40-16 line 3197 [ 601.424284] binder: 13811:13820 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.424373] binder: 13811:13820 transaction failed 29201/-22, size 40-16 line 3197 [ 601.431983] binder: 13822:13825 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.432073] binder: 13822:13825 transaction failed 29201/-22, size 40-16 line 3197 [ 601.434842] binder_alloc: 13827: binder_alloc_buf, no vma [ 601.434880] binder: 13827:13833 transaction failed 29189/-3, size 0-16 line 3134 [ 601.453757] binder_alloc: 13826: binder_alloc_buf, no vma [ 601.453797] binder: 13826:13835 transaction failed 29189/-3, size 0-16 line 3134 [ 601.467923] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.468121] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.494643] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.498945] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.509467] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.509574] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.518410] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.525971] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.526065] binder: 13849:13852 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.526119] binder: 13849:13852 transaction failed 29201/-22, size 0-16 line 3197 [ 601.529024] binder: 13851:13856 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.529078] binder: 13851:13856 transaction failed 29201/-22, size 0-16 line 3197 [ 601.534310] binder: 13855:13859 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.534532] binder: 13855:13859 transaction failed 29201/-22, size 40-16 line 3197 [ 601.541294] binder: 13853:13860 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.541380] binder: 13853:13860 transaction failed 29201/-22, size 40-16 line 3197 [ 601.556269] binder: 13854:13862 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.556361] binder: 13854:13862 transaction failed 29201/-22, size 40-16 line 3197 [ 601.561604] binder_alloc: 13858: binder_alloc_buf, no vma [ 601.561644] binder: 13858:13863 transaction failed 29189/-3, size 0-16 line 3134 [ 601.589719] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.589817] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.589917] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.602561] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.625299] binder: 13874:13876 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.625391] binder: 13874:13876 transaction failed 29201/-22, size 40-16 line 3197 [ 601.625476] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.632780] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.661328] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.698571] binder: 13883:13888 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.698880] binder: 13883:13888 transaction failed 29201/-22, size 40-16 line 3197 [ 601.699547] binder_alloc: 13884: binder_alloc_buf, no vma [ 601.699579] binder: 13884:13889 transaction failed 29189/-3, size 0-16 line 3134 [ 601.702364] binder: 13881:13893 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.702450] binder: 13881:13893 transaction failed 29201/-22, size 40-16 line 3197 [ 601.703838] binder: 13886:13890 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.703892] binder: 13886:13890 transaction failed 29201/-22, size 0-16 line 3197 [ 601.706713] binder: 13887:13892 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.706735] binder_alloc: 13882: binder_alloc_buf, no vma [ 601.706770] binder: 13882:13891 transaction failed 29189/-3, size 0-16 line 3134 [ 601.706801] binder: 13887:13892 transaction failed 29201/-22, size 40-16 line 3197 [ 601.709141] binder: 13885:13894 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.709195] binder: 13885:13894 transaction failed 29201/-22, size 0-16 line 3197 [ 601.740864] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.775079] binder_alloc: 13913: binder_alloc_buf, no vma [ 601.775116] binder: 13913:13917 transaction failed 29189/-3, size 0-16 line 3134 [ 601.783794] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.784142] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.789905] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.797944] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.809961] binder: BINDER_SET_CONTEXT_MGR already set [ 601.809969] binder: 13921:13925 ioctl 40046207 0 returned -16 [ 601.813197] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.813570] binder: 13920:13924 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.813658] binder: 13920:13924 transaction failed 29201/-22, size 40-16 line 3197 [ 601.819373] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.826325] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.826461] binder: 13921:13925 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.826556] binder: 13921:13925 transaction failed 29201/-22, size 40-16 line 3197 [ 601.826703] binder: 13902:13903 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.826789] binder: 13902:13903 transaction failed 29201/-22, size 40-16 line 3197 [ 601.837750] binder: 13922:13926 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.837807] binder: 13922:13926 transaction failed 29201/-22, size 0-16 line 3197 [ 601.861277] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.875810] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.891165] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.904171] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.937832] binder_alloc: 13938: binder_alloc_buf, no vma [ 601.937870] binder: 13938:13942 transaction failed 29189/-3, size 0-16 line 3134 [ 601.947713] binder: 13937:13950 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.947800] binder: 13937:13950 transaction failed 29201/-22, size 40-16 line 3197 [ 601.952911] binder: 13941:13945 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.952999] binder: 13941:13945 transaction failed 29201/-22, size 40-16 line 3197 [ 601.953158] binder: BINDER_SET_CONTEXT_MGR already set [ 601.953164] binder: 13943:13947 ioctl 40046207 0 returned -16 [ 601.955955] binder_alloc: 13939: binder_alloc_buf, no vma [ 601.955992] binder: 13939:13951 transaction failed 29189/-3, size 0-16 line 3134 [ 601.958193] binder: 13943:13947 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.958283] binder: 13943:13947 transaction failed 29201/-22, size 40-16 line 3197 [ 601.959386] binder: 13946:13949 got transaction with invalid offset (0, min 24 max 40) or object. [ 601.959506] binder: 13946:13949 transaction failed 29201/-22, size 40-16 line 3197 [ 601.967773] binder: 13940:13944 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.967828] binder: 13940:13944 transaction failed 29201/-22, size 0-16 line 3197 [ 601.968636] binder: 13948:13953 got transaction with invalid offset (0, min 0 max 0) or object. [ 601.968695] binder: 13948:13953 transaction failed 29201/-22, size 0-16 line 3197 [ 601.994861] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.994908] binder: undelivered TRANSACTION_ERROR: 29189 [ 602.008626] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.027466] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.041498] binder_alloc: 13971: binder_alloc_buf, no vma [ 602.041536] binder: 13971:13975 transaction failed 29189/-3, size 0-16 line 3134 [ 602.050967] binder: 13973:13977 got transaction with invalid offset (0, min 24 max 40) or object. [ 602.051055] binder: 13973:13977 transaction failed 29201/-22, size 40-16 line 3197 [ 602.057869] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.073037] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.085899] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.086022] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.088274] binder_alloc: 13976: binder_alloc_buf, no vma [ 602.088313] binder: 13976:13983 transaction failed 29189/-3, size 0-16 line 3134 [ 602.099517] binder: undelivered TRANSACTION_ERROR: 29189 [ 602.108002] binder: BINDER_SET_CONTEXT_MGR already set [ 602.108011] binder: 13990:13992 ioctl 40046207 0 returned -16 [ 602.108964] binder: 13990:13992 got transaction with invalid offset (0, min 24 max 40) or object. [ 602.109052] binder: 13990:13992 transaction failed 29201/-22, size 40-16 line 3197 [ 602.110270] binder: 13978:13982 got transaction with invalid offset (0, min 24 max 40) or object. [ 602.111086] binder: 13978:13982 transaction failed 29201/-22, size 40-16 line 3197 [ 602.116362] binder: 13988:13991 got transaction with invalid offset (0, min 0 max 0) or object. [ 602.116413] binder: 13988:13991 transaction failed 29201/-22, size 0-16 line 3197 [ 602.123103] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.131427] binder: 13996:14002 got transaction with invalid offset (0, min 24 max 40) or object. [ 602.131514] binder: 13996:14002 transaction failed 29201/-22, size 40-16 line 3197 [ 602.136162] binder: 13995:14004 got transaction with invalid offset (0, min 0 max 0) or object. [ 602.136222] binder: 13995:14004 transaction failed 29201/-22, size 0-16 line 3197 [ 602.141124] binder: undelivered TRANSACTION_ERROR: 29189 [ 602.142325] binder_alloc: 13998: binder_alloc_buf, no vma [ 602.142363] binder: 13998:14006 transaction failed 29189/-3, size 0-16 line 3134 [ 602.183815] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.184351] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.189093] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.199407] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.200284] binder: 14016:14020 got transaction with invalid offset (0, min 24 max 40) or object. [ 602.200406] binder: 14016:14020 transaction failed 29201/-22, size 40-16 line 3197 [ 602.208767] binder: undelivered TRANSACTION_ERROR: 29189 [ 602.209339] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.228907] binder_alloc: 14014: binder_alloc_buf, no vma [ 602.228946] binder: 14014:14022 transaction failed 29189/-3, size 0-16 line 3134 [ 602.230594] INFO: task init:2628 blocked for more than 120 seconds. [ 602.230599] Not tainted 4.4.125-g38f41ec #63 [ 602.230601] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 602.230621] init D ffff8800b6c37718 29272 2628 1 0x00000000 [ 602.230630] ffff8800b6c37718 ffff8801d2396000 0000000000000000 0000000000000007 [ 602.230638] ffff8801d2396000 ffff8801db31fdb8 ffff8801db31fde0 ffff8801db31f4d8 [ 602.230645] ffff8801db31f4c0 ffff8800bb9e6000 ffff8801d2396000 0000000000000000 [ 602.230647] Call Trace: [ 602.230665] [] schedule+0x7a/0x1b0 [ 602.230672] [] schedule_preempt_disabled+0x13/0x20 [ 602.230678] [] mutex_lock_nested+0x306/0x850 [ 602.230687] [] ? tty_open+0x4ca/0xee0 [ 602.230693] [] ? __ww_mutex_lock+0x14f0/0x14f0 [ 602.230699] [] ? tty_open+0x158/0xee0 [ 602.230708] [] ? kmem_cache_alloc_trace+0x100/0x2b0 [ 602.230714] [] tty_open+0x4ca/0xee0 [ 602.230721] [] ? tty_init_dev+0x430/0x430 [ 602.230727] [] ? chrdev_open+0xc7/0x4c0 [ 602.230734] [] ? tty_init_dev+0x430/0x430 [ 602.230739] [] chrdev_open+0x22b/0x4c0 [ 602.230745] [] ? cdev_put.part.0+0x50/0x50 [ 602.230752] [] do_dentry_open+0x59b/0xba0 [ 602.230758] [] ? __inode_permission2+0x9b/0x240 [ 602.230764] [] ? cdev_put.part.0+0x50/0x50 [ 602.230770] [] vfs_open+0x110/0x210 [ 602.230775] [] ? may_open+0x1ae/0x280 [ 602.230781] [] path_openat+0x923/0x3940 [ 602.230787] [] ? depot_save_stack+0x1c3/0x640 [ 602.230793] [] ? path_mountpoint+0x830/0x830 [ 602.230798] [] ? getname_flags+0xcb/0x580 [ 602.230803] [] ? getname+0x19/0x20 [ 602.230809] [] ? do_sys_open+0x21f/0x660 [ 602.230818] [] ? SyS_open+0x2d/0x40 [ 602.231365] [] ? entry_SYSCALL_64_fastpath+0x22/0x9e [ 602.231373] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 602.231379] [] ? __lock_is_held+0xa1/0xf0 [ 602.231385] [] do_filp_open+0x197/0x290 [ 602.231391] [] ? user_path_mountpoint_at+0x40/0x40 [ 602.231397] [] ? _raw_spin_unlock+0x2c/0x50 [ 602.231404] [] ? __alloc_fd+0x1e3/0x500 [ 602.231411] [] do_sys_open+0x369/0x660 [ 602.231417] [] ? filp_open+0x70/0x70 [ 602.231423] [] ? proc_clear_tty+0xd9/0x140 [ 602.231429] [] ? _raw_write_unlock_irq+0x27/0x50 [ 602.231436] [] SyS_open+0x2d/0x40 [ 602.231442] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 602.231447] 1 lock held by init/2628: [ 602.231460] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x4ca/0xee0 [ 602.231463] Sending NMI to all CPUs: [ 602.232696] NMI backtrace for cpu 0 [ 602.232699] CPU: 0 PID: 2627 Comm: init Not tainted 4.4.125-g38f41ec #63 [ 602.232702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.232704] task: ffff8801d2393000 task.stack: ffff8800b67f0000 [ 602.232707] RIP: 0010:[] [] io_serial_in+0x6b/0x90 [ 602.232709] RSP: 0018:ffff8800b67f7518 EFLAGS: 00000002 [ 602.232712] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 602.232715] RDX: 00000000000003fd RSI: 0000000000000005 RDI: ffffffff8607e878 [ 602.232718] RBP: ffff8800b67f7528 R08: 0000000000000001 R09: ffffffff850e4aa0 [ 602.232720] R10: 0000000000000001 R11: 1ffff10016cfee84 R12: ffffffff8607e840 [ 602.232723] R13: 0000000000000020 R14: fffffbfff0c0fd4f R15: fffffbfff0c0fd11 [ 602.232726] FS: 00007f1f1b21a7a0(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 602.232728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.232731] CR2: 0000001b9bc24000 CR3: 00000000b47e6000 CR4: 0000000000160670 [ 602.232734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.232736] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 602.232738] Stack: [ 602.232741] ffffffff8607e840 0000000000002706 ffff8800b67f7578 ffffffff81f89289 [ 602.232743] 0000000000000000 ffffffff8607e888 ffffffff8607ea7a ffffffff8607e840 [ 602.232746] 000000000000006e ffffffff81f893d0 dffffc0000000000 000000000000006e [ 602.232748] Call Trace: [ 602.232750] [] wait_for_xmitr+0x89/0x1d0 [ 602.232753] [] ? wait_for_xmitr+0x1d0/0x1d0 [ 602.232755] [] serial8250_console_putchar+0x1f/0x60 [ 602.232758] [] uart_console_write+0xac/0xe0 [ 602.232760] [] serial8250_console_write+0x2e0/0x860 [ 602.232763] [] ? exar_handle_irq+0x1b0/0x1b0 [ 602.232765] [] ? sprintf+0xb0/0xe0 [ 602.232767] [] ? scnprintf+0x110/0x110 [ 602.232770] [] ? univ8250_console_setup+0x100/0x100 [ 602.232772] [] univ8250_console_write+0x64/0x80 [ 602.232775] [] call_console_drivers.constprop.26+0x1ec/0x3e0 [ 602.232777] [] console_unlock+0x534/0xa00 [ 602.232780] [] ? uart_set_termios+0x6b0/0x6b0 [ 602.232782] [] console_device+0x95/0xc0 [ 602.232785] [] tty_open+0x4e8/0xee0 [ 602.232787] [] ? tty_init_dev+0x430/0x430 [ 602.232789] [] ? chrdev_open+0xc7/0x4c0 [ 602.232792] [] ? tty_init_dev+0x430/0x430 [ 602.232794] [] chrdev_open+0x22b/0x4c0 [ 602.232796] [] ? cdev_put.part.0+0x50/0x50 [ 602.232799] [] do_dentry_open+0x59b/0xba0 [ 602.232801] [] ? __inode_permission2+0x9b/0x240 [ 602.232803] [] ? cdev_put.part.0+0x50/0x50 [ 602.232806] [] vfs_open+0x110/0x210 [ 602.232808] [] ? may_open+0x1ae/0x280 [ 602.232810] [] path_openat+0x923/0x3940 [ 602.232813] [] ? depot_save_stack+0x1c3/0x640 [ 602.232815] [] ? path_mountpoint+0x830/0x830 [ 602.232818] [] ? getname_flags+0xcb/0x580 [ 602.232820] [] ? getname+0x19/0x20 [ 602.232822] [] ? do_sys_open+0x21f/0x660 [ 602.232824] [] ? SyS_open+0x2d/0x40 [ 602.232827] [] ? entry_SYSCALL_64_fastpath+0x22/0x9e [ 602.232830] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 602.232832] [] ? __lock_is_held+0xa1/0xf0 [ 602.232834] [] do_filp_open+0x197/0x290 [ 602.232837] [] ? user_path_mountpoint_at+0x40/0x40 [ 602.232839] [] ? _raw_spin_unlock+0x2c/0x50 [ 602.232842] [] ? __alloc_fd+0x1e3/0x500 [ 602.232844] [] do_sys_open+0x369/0x660 [ 602.232846] [] ? filp_open+0x70/0x70 [ 602.232849] [] ? proc_clear_tty+0xd9/0x140 [ 602.232851] [] ? _raw_write_unlock_irq+0x27/0x50 [ 602.232853] [] SyS_open+0x2d/0x40 [ 602.232856] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 602.232862] Code: 24 c1 00 00 00 49 8d 7c 24 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 d3 e3 80 3c 02 00 75 17 41 03 5c 24 38 89 da ec <5b> 0f b6 c0 41 5c 5d c3 e8 e8 79 57 ff eb c2 e8 41 7a 57 ff eb [ 602.232864] NMI backtrace for cpu 1 [ 602.232866] CPU: 1 PID: 487 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #63 [ 602.232870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.232872] task: ffff8800bac4c800 task.stack: ffff8800bac90000 [ 602.232875] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 [ 602.232878] RSP: 0000:ffff8800bac97cb8 EFLAGS: 00000046 [ 602.232880] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 602.232883] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 [ 602.232886] RBP: ffff8800bac97ce0 R08: 0000000000000001 R09: 0000000000000000 [ 602.232888] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 602.232891] R13: 0000000000000003 R14: ffffffff8426f5a0 R15: 0000000000000002 [ 602.232894] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 602.232897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.232900] CR2: 00007efd73d10b40 CR3: 00000000b45c6000 CR4: 0000000000160670 [ 602.232902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.232905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 602.232907] Stack: [ 602.232910] ffffffff8426f5a0 ffffffff847f0b40 fffffbfff08fdc1c dffffc0000000000 [ 602.232912] ffff8801db31bca0 ffff8800bac97d00 ffffffff810b9abb ffffffff839f6dc0 [ 602.232915] 0000000000000003 ffff8800bac97d60 ffffffff81d11764 ffffffff8141b993 [ 602.232917] Call Trace: [ 602.232919] [] nmi_raise_cpu_backtrace+0x5b/0x70 [ 602.232922] [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 [ 602.232924] [] ? print_lock+0xab/0xae [ 602.232927] [] ? irq_force_complete_move+0x3b0/0x3b0 [ 602.232929] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 602.232932] [] watchdog+0x6fa/0xae0 [ 602.232934] [] ? watchdog+0xc3/0xae0 [ 602.232936] [] kthread+0x268/0x300 [ 602.232939] [] ? reset_hung_task_detector+0x20/0x20 [ 602.232941] [] ? kthread_create_on_node+0x400/0x400 [ 602.232944] [] ? kthread_create_on_node+0x400/0x400 [ 602.232946] [] ret_from_fork+0x55/0x80 [ 602.232949] [] ? kthread_create_on_node+0x400/0x400 [ 602.232954] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 2b 33 17 00 4c 89 e7 57 9d 0f 1f [ 602.233103] Kernel panic - not syncing: hung_task: blocked tasks [ 602.233108] CPU: 1 PID: 487 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #63 [ 602.233112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.233119] 0000000000000000 e1fc6d561b5bf8db ffff8800bac97ca8 ffffffff81d067bd [ 602.233126] ffffffff838831a0 ffff8800bac97d80 dffffc0000000000 7fffffffffffffff [ 602.233133] ffff8801d2396448 ffff8800bac97d70 ffffffff8141b46a 0000000041b58ab3 [ 602.233135] Call Trace: [ 602.233142] [] dump_stack+0xc1/0x124 [ 602.233149] [] panic+0x1aa/0x388 [ 602.233155] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 602.233161] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 602.233167] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 602.233173] [] watchdog+0x70b/0xae0 [ 602.233178] [] ? watchdog+0xc3/0xae0 [ 602.233185] [] kthread+0x268/0x300 [ 602.233190] [] ? reset_hung_task_detector+0x20/0x20 [ 602.233197] [] ? kthread_create_on_node+0x400/0x400 [ 602.233204] [] ? kthread_create_on_node+0x400/0x400 [ 602.233210] [] ret_from_fork+0x55/0x80 [ 602.233216] [] ? kthread_create_on_node+0x400/0x400 [ 602.238222] Dumping ftrace buffer: [ 602.238264] (ftrace buffer empty) [ 602.238267] Kernel Offset: disabled [ 625.246047] Rebooting in 86400 seconds..