}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  690.145775] binder: undelivered TRANSACTION_COMPLETE
** 1 printk messages dropped ** [  690.176354] binder: release 4679:4686 transaction 39300 out, still active
[  690.176359] binder: unexpected work type, 4, not freed
** 1 printk messages dropped ** [  690.176470] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/30 11:44:16 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 16 printk messages dropped ** [  690.243169] binder_alloc: 4715: binder_alloc_buf, no vma
[  690.243205] binder: 4713:4720 transaction failed 29189/-3, size 40-8 line 3134
[  690.244286] binder_alloc: 4715: binder_alloc_buf, no vma
2018/03/30 11:44:16 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x3c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e", 0x85}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  690.244323] binder: 4712:4723 transaction failed 29189/-3, size 40-8 line 3134
** 2 printk messages dropped ** [  690.253781] binder_alloc: 4715: binder_alloc_buf, no vma
** 1 printk messages dropped ** [  690.264320] binder_alloc: 4715: binder_alloc_buf, no vma
** 3 printk messages dropped ** [  690.334769] binder: 4747:4755 transaction failed 29189/-3, size 40-16 line 3134
** 13 printk messages dropped ** [  690.400526] binder: 4763:4770 transaction failed 29189/-3, size 40-16 line 3134
** 1 printk messages dropped ** [  690.407193] binder: 4764:4771 transaction failed 29189/-3, size 40-8 line 3134
** 1 printk messages dropped ** [  690.412706] binder_alloc: 4747: binder_alloc_buf, no vma
2018/03/30 11:44:16 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e", 0x85}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x3c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 2 printk messages dropped ** [  690.438844] binder: 4777:4782 transaction failed 29189/-22, size 40-8 line 3011
** 1 printk messages dropped ** [  690.481454] binder: undelivered TRANSACTION_ERROR: 29189
** 1 printk messages dropped ** [  690.502347] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:16 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 15 printk messages dropped ** [  690.570355] binder: 4801:4812 transaction failed 29189/-3, size 40-16 line 3134
[  690.571125] binder_alloc: 4800: binder_alloc_buf, no vma
** 2 printk messages dropped ** [  690.573536] binder: 4805:4813 transaction failed 29189/-3, size 40-8 line 3134
2018/03/30 11:44:16 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e", 0x85}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440))
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 4 printk messages dropped ** [  690.672928] binder: undelivered TRANSACTION_ERROR: 29189
** 12 printk messages dropped ** [  690.752195] binder: 4854:4864 transaction failed 29201/-22, size 40-16 line 3197
[  690.760666] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/30 11:44:16 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x3c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec", 0xc8}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440))
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  690.760674] binder: 4869:4873 ioctl 40046207 0 returned -16
[  690.762635] binder: 4869:4873 got transaction with invalid offset (0, min 24 max 40) or object.
[  690.762724] binder: 4869:4873 transaction failed 29201/-22, size 40-16 line 3197
2018/03/30 11:44:16 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 1 printk messages dropped ** [  690.777675] binder: 4866:4877 got transaction with invalid offset (0, min 24 max 40) or object.
2018/03/30 11:44:16 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 20 printk messages dropped ** [  690.914702] binder_alloc: 4900: binder_alloc_buf, no vma
2018/03/30 11:44:16 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440))
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 7 printk messages dropped ** [  690.937159] binder_alloc: 4900: binder_alloc_buf, no vma
** 8 printk messages dropped ** [  691.043886] binder: 4943:4944 transaction failed 29189/-22, size 40-8 line 3011
** 2 printk messages dropped ** [  691.063851] binder_alloc: 4937: binder_alloc_buf, no vma
2018/03/30 11:44:16 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec", 0xc8}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:16 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  691.063890] binder: 4948:4956 transaction failed 29189/-3, size 40-8 line 3134
** 1 printk messages dropped ** [  691.071958] binder: 4949:4957 transaction failed 29189/-3, size 40-8 line 3134
[  691.072902] binder_alloc: 4937: binder_alloc_buf, no vma
[  691.072939] binder: 4950:4954 transaction failed 29189/-3, size 40-16 line 3134
[  691.073068] binder: BINDER_SET_CONTEXT_MGR already set
[  691.073074] binder: 4946:4953 ioctl 40046207 0 returned -16
[  691.073997] binder_alloc: 4937: binder_alloc_buf, no vma
[  691.074034] binder: 4946:4953 transaction failed 29189/-3, size 40-16 line 3134
2018/03/30 11:44:17 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 17 printk messages dropped ** [  691.245309] binder_alloc: 4988: binder_alloc_buf, no vma
2018/03/30 11:44:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 4 printk messages dropped ** [  691.249887] binder: 4993:4999 transaction failed 29189/-3, size 40-16 line 3134
2018/03/30 11:44:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec", 0xc8}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 3 printk messages dropped ** [  691.255354] binder: 4994:5000 transaction failed 29189/-3, size 40-8 line 3134
** 3 printk messages dropped ** [  691.335602] binder_alloc: 5020: binder_alloc_buf, no vma
2018/03/30 11:44:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 21 printk messages dropped ** [  691.453861] binder: 5054:5060 transaction failed 29189/-22, size 40-8 line 3011
2018/03/30 11:44:17 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 3 printk messages dropped ** [  691.516678] binder: undelivered TRANSACTION_ERROR: 29189
** 9 printk messages dropped ** [  691.583557] binder: 5076:5088 got transaction with invalid offset (0, min 24 max 40) or object.
** 5 printk messages dropped ** [  691.667766] binder: BINDER_SET_CONTEXT_MGR already set
[  691.667773] binder: 5110:5117 ioctl 40046207 0 returned -16
[  691.670626] binder: 5110:5117 got transaction with invalid offset (0, min 24 max 40) or object.
** 2 printk messages dropped ** [  691.689197] binder: unexpected work type, 4, not freed
[  691.689200] binder: undelivered TRANSACTION_COMPLETE
2018/03/30 11:44:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143", 0xe9}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  691.689302] binder: undelivered TRANSACTION_ERROR: 29201
[  691.689390] binder: send failed reply for transaction 39398, target dead
[  691.689406] binder: send failed reply for transaction 39407 to 5078:5089
** 9 printk messages dropped ** [  691.742491] binder: 5127:5131 transaction failed 29201/-22, size 40-16 line 3197
2018/03/30 11:44:17 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 4 printk messages dropped ** [  691.811558] binder: release 5128:5134 transaction 39421 out, still active
2018/03/30 11:44:17 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143", 0xe9}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r3, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r1, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 3 printk messages dropped ** [  691.844881] binder: unexpected work type, 4, not freed
** 9 printk messages dropped ** [  691.864215] binder: undelivered TRANSACTION_ERROR: 29201
** 5 printk messages dropped ** [  691.902998] binder: 5165:5168 transaction failed 29189/-3, size 40-8 line 3134
[  691.905954] binder_alloc: 5164: binder_alloc_buf, no vma
[  691.905997] binder: 5170:5175 transaction failed 29189/-3, size 40-8 line 3134
[  691.911171] binder_alloc: 5164: binder_alloc_buf, no vma
2018/03/30 11:44:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r3, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r1, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143", 0xe9}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r3, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r1, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  691.911210] binder: 5171:5176 transaction failed 29189/-3, size 40-8 line 3134
** 3 printk messages dropped ** [  691.919698] binder: 5169:5179 transaction failed 29189/-3, size 40-16 line 3134
2018/03/30 11:44:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:17 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 6 printk messages dropped ** [  691.956723] binder: 5184:5195 transaction failed 29201/-22, size 40-16 line 3197
2018/03/30 11:44:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 7 printk messages dropped ** [  692.046763] binder: send failed reply for transaction 39450 to 5177:5186
** 4 printk messages dropped ** [  692.076297] binder: undelivered TRANSACTION_COMPLETE
[  692.076311] binder: undelivered TRANSACTION_ERROR: 29189
[  692.097331] binder: undelivered TRANSACTION_COMPLETE
[  692.097345] binder: undelivered TRANSACTION_ERROR: 29189
[  692.112271] binder: undelivered TRANSACTION_ERROR: 29189
[  692.122434] binder: undelivered TRANSACTION_COMPLETE
[  692.122448] binder: undelivered TRANSACTION_ERROR: 29189
[  692.136281] binder: undelivered TRANSACTION_ERROR: 29189
[  692.165107] binder: 5236:5243 got transaction with invalid offset (0, min 24 max 40) or object.
[  692.165199] binder: 5236:5243 transaction failed 29201/-22, size 40-16 line 3197
[  692.170938] binder: 5235:5242 got transaction with invalid offset (0, min 24 max 40) or object.
2018/03/30 11:44:18 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfa}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa74c44", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  692.171022] binder: 5235:5242 transaction failed 29201/-22, size 40-16 line 3197
[  692.178597] binder: BINDER_SET_CONTEXT_MGR already set
[  692.178604] binder: 5238:5245 ioctl 40046207 0 returned -16
[  692.179652] binder: 5238:5245 got transaction with invalid offset (0, min 24 max 40) or object.
** 7 printk messages dropped ** [  692.269841] binder: send failed reply for transaction 39474 to 5241:5248
** 1 printk messages dropped ** [  692.269870] binder: send failed reply for transaction 39480 to 5234:5244
2018/03/30 11:44:18 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  692.269886] binder: send failed reply for transaction 39483 to 5237:5246
2018/03/30 11:44:18 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfa}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 4:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 4 printk messages dropped ** [  692.284301] binder: undelivered TRANSACTION_ERROR: 29189
[  692.305932] binder: undelivered TRANSACTION_COMPLETE
2018/03/30 11:44:18 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 1 printk messages dropped ** [  692.321060] binder: undelivered TRANSACTION_COMPLETE
** 11 printk messages dropped ** [  692.360856] binder: 5298:5302 transaction failed 29201/-22, size 40-16 line 3197
** 7 printk messages dropped ** [  692.417549] binder: send failed reply for transaction 39499 to 5294:5300
** 4 printk messages dropped ** [  692.448287] binder: undelivered TRANSACTION_ERROR: 29189
[  692.463487] binder_alloc: 5330: binder_alloc_buf, no vma
[  692.463523] binder: 5330:5335 transaction failed 29189/-3, size 40-16 line 3134
[  692.465489] binder: BINDER_SET_CONTEXT_MGR already set
[  692.465496] binder: 5331:5336 ioctl 40046207 0 returned -16
2018/03/30 11:44:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91", 0xfa}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 4:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  692.466435] binder_alloc: 5330: binder_alloc_buf, no vma
[  692.466472] binder: 5331:5336 transaction failed 29189/-3, size 40-16 line 3134
2018/03/30 11:44:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 12 printk messages dropped ** [  692.581440] binder_alloc: 5352: binder_alloc_buf, no vma
[  692.581476] binder: 5352:5357 transaction failed 29189/-3, size 40-16 line 3134
2018/03/30 11:44:18 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r0, r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r3, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r1, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 4:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x102}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 13 printk messages dropped ** [  692.666011] binder: undelivered TRANSACTION_ERROR: 29189
** 13 printk messages dropped ** [  692.776063] binder: 5399:5404 got transaction with invalid offset (0, min 24 max 40) or object.
[  692.776223] binder: 5399:5404 transaction failed 29201/-22, size 40-16 line 3197
[  692.779798] binder: BINDER_SET_CONTEXT_MGR already set
[  692.779810] binder: 5406:5411 ioctl 40046207 0 returned -16
2018/03/30 11:44:18 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x102}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r0, r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r3, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r1, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 1 printk messages dropped ** [  692.781901] binder: 5406:5411 transaction failed 29201/-22, size 40-16 line 3197
2018/03/30 11:44:18 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 20 printk messages dropped ** [  692.932949] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/30 11:44:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  692.932960] binder: 5444:5450 ioctl 40046207 0 returned -16
2018/03/30 11:44:18 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x102}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 5 printk messages dropped ** [  692.970702] binder: 5461:5465 transaction failed 29189/-22, size 40-8 line 3011
2018/03/30 11:44:18 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r0, r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r3, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r1, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:18 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 6 printk messages dropped ** [  693.034170] binder: undelivered TRANSACTION_ERROR: 29189
** 15 printk messages dropped ** [  693.110786] binder_alloc: 5497: binder_alloc_buf, no vma
[  693.110825] binder: 5503:5509 transaction failed 29189/-3, size 40-8 line 3134
** 5 printk messages dropped ** [  693.194552] binder: undelivered TRANSACTION_ERROR: 29189
** 4 printk messages dropped ** [  693.247484] binder: BINDER_SET_CONTEXT_MGR already set
[  693.247492] binder: 5536:5543 ioctl 40046207 0 returned -16
[  693.248299] binder_alloc: 5535: binder_alloc_buf, no vma
2018/03/30 11:44:19 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x106}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  693.248338] binder: 5538:5542 transaction failed 29189/-3, size 40-8 line 3134
[  693.248709] binder_alloc: 5535: binder_alloc_buf, no vma
[  693.248745] binder: 5536:5543 transaction failed 29189/-3, size 40-16 line 3134
[  693.254244] binder_alloc: 5535: binder_alloc_buf, no vma
** 9 printk messages dropped ** [  693.303101] binder: undelivered TRANSACTION_ERROR: 29189
[  693.327760] binder: undelivered TRANSACTION_ERROR: 29189
[  693.344278] binder: undelivered TRANSACTION_ERROR: 29189
[  693.366991] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:19 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x106}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  693.367080] binder: undelivered TRANSACTION_ERROR: 29189
** 4 printk messages dropped ** [  693.389939] binder: 5577:5582 transaction failed 29189/-22, size 40-8 line 3011
2018/03/30 11:44:19 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x106}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 12 printk messages dropped ** [  693.454492] binder: undelivered TRANSACTION_ERROR: 29189
[  693.475049] binder: undelivered TRANSACTION_ERROR: 29189
[  693.495412] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:19 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  693.508845] binder: undelivered TRANSACTION_ERROR: 29189
** 5 printk messages dropped ** [  693.561662] binder_alloc: 5619: binder_alloc_buf, no vma
** 4 printk messages dropped ** [  693.566296] binder: 5620:5628 transaction failed 29189/-3, size 40-16 line 3134
[  693.572868] binder_alloc: 5619: binder_alloc_buf, no vma
[  693.572902] binder: 5615:5629 transaction failed 29189/-3, size 40-8 line 3134
2018/03/30 11:44:19 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 3:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b170")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  693.573326] binder_alloc: 5619: binder_alloc_buf, no vma
[  693.573364] binder: 5618:5627 transaction failed 29189/-3, size 40-8 line 3134
[  693.585180] binder_alloc: 5619: binder_alloc_buf, no vma
[  693.585219] binder: 5624:5632 transaction failed 29189/-3, size 40-8 line 3134
[  693.607224] binder: undelivered TRANSACTION_ERROR: 29189
[  693.628882] binder: undelivered TRANSACTION_ERROR: 29189
[  693.631472] binder: undelivered TRANSACTION_ERROR: 29189
[  693.652866] binder: undelivered TRANSACTION_ERROR: 29189
** 6 printk messages dropped ** [  693.678063] binder: 5657:5662 transaction failed 29189/-3, size 40-8 line 3134
2018/03/30 11:44:19 executing program 3:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b170")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  693.703032] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:19 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 9 printk messages dropped ** [  693.771975] binder: undelivered TRANSACTION_ERROR: 29189
** 7 printk messages dropped ** [  693.853629] binder: undelivered TRANSACTION_ERROR: 29189
** 2 printk messages dropped ** [  693.906215] binder: 5720:5727 transaction failed 29201/-22, size 40-16 line 3197
2018/03/30 11:44:19 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b170")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 3:
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa74c44", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:19 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 2 printk messages dropped ** [  693.939414] binder: release 5692:5701 transaction 39609 out, still active
** 3 printk messages dropped ** [  693.961865] binder: undelivered TRANSACTION_ERROR: 29201
** 3 printk messages dropped ** [  693.973079] binder: 5732:5738 transaction failed 29189/-22, size 40-8 line 3011
2018/03/30 11:44:19 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 7 printk messages dropped ** [  694.018465] binder: 5747:5758 got transaction with invalid offset (0, min 24 max 40) or object.
[  694.018554] binder: 5747:5758 transaction failed 29201/-22, size 40-16 line 3197
[  694.033833] binder: undelivered TRANSACTION_COMPLETE
[  694.033847] binder: undelivered TRANSACTION_ERROR: 29189
[  694.048815] binder: undelivered TRANSACTION_ERROR: 29189
** 2 printk messages dropped ** [  694.108167] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:20 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x109}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 1 printk messages dropped ** [  694.117669] binder: unexpected work type, 4, not freed
** 3 printk messages dropped ** [  694.135892] binder: send failed reply for transaction 39630 to 5775:5780
[  694.135910] binder: send failed reply for transaction 39633 to 5772:5781
[  694.139671] binder: undelivered TRANSACTION_ERROR: 29189
[  694.156164] binder: undelivered TRANSACTION_COMPLETE
[  694.156179] binder: undelivered TRANSACTION_ERROR: 29189
[  694.168898] binder: undelivered TRANSACTION_COMPLETE
[  694.168912] binder: undelivered TRANSACTION_ERROR: 29189
** 3 printk messages dropped ** [  694.210353] binder: 5799:5806 transaction failed 29201/-22, size 40-16 line 3197
** 2 printk messages dropped ** [  694.212965] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/30 11:44:20 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71ca", 0x109}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  694.212972] binder: 5794:5809 ioctl 40046207 0 returned -16
2018/03/30 11:44:20 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440))
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 12 printk messages dropped ** [  694.327985] binder: undelivered TRANSACTION_COMPLETE
** 14 printk messages dropped ** [  694.463414] binder: send failed reply for transaction 39669 to 5848:5859
2018/03/30 11:44:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  694.471914] binder: undelivered TRANSACTION_COMPLETE
2018/03/30 11:44:20 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630b1d0ac3463"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 10 printk messages dropped ** [  694.536688] binder: BINDER_SET_CONTEXT_MGR already set
** 2 printk messages dropped ** [  694.537707] binder: 5887:5895 transaction failed 29189/-3, size 40-16 line 3134
[  694.540766] binder_alloc: 5884: binder_alloc_buf, no vma
[  694.540803] binder: 5891:5897 transaction failed 29189/-3, size 40-8 line 3134
** 3 printk messages dropped ** [  694.601079] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:20 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa7", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71ca", 0x109}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440))
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  694.639561] binder: undelivered TRANSACTION_ERROR: 29189
[  694.639647] binder: undelivered TRANSACTION_ERROR: 29189
[  694.639718] binder: undelivered TRANSACTION_ERROR: 29189
[  694.640932] binder_alloc: 5921: binder_alloc_buf, no vma
[  694.640971] binder: 5913:5920 transaction failed 29189/-3, size 40-16 line 3134
[  694.657114] binder: undelivered TRANSACTION_ERROR: 29189
[  694.682369] binder: 5933:5937 transaction failed 29189/-22, size 40-8 line 3011
[  694.684552] binder: undelivered TRANSACTION_ERROR: 29189
** 6 printk messages dropped ** [  694.711264] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/30 11:44:20 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 7 printk messages dropped ** [  694.826378] binder: 5964:5972 transaction failed 29189/-3, size 40-8 line 3134
2018/03/30 11:44:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440))
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 8 printk messages dropped ** [  694.840011] binder_alloc: 5970: binder_alloc_buf, no vma
** 14 printk messages dropped ** [  694.981802] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:20 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  694.987332] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:20 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 10 printk messages dropped ** [  695.092984] binder: undelivered TRANSACTION_ERROR: 29189
** 11 printk messages dropped ** [  695.170900] binder: 6054:6064 transaction failed 29189/-3, size 40-16 line 3134
[  695.171060] binder_alloc: 6052: binder_alloc_buf, no vma
[  695.171094] binder: 6052:6066 transaction failed 29189/-3, size 0-16 line 3134
** 2 printk messages dropped ** [  695.213925] binder: undelivered TRANSACTION_ERROR: 29189
** 1 printk messages dropped ** [  695.251939] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, 0xffffffffffffffff, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:20 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 1 printk messages dropped ** [  695.269914] binder: 6090:6093 transaction failed 29189/-22, size 40-16 line 3011
[  695.277732] binder: undelivered TRANSACTION_ERROR: 29189
** 7 printk messages dropped ** [  695.313065] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:21 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 4 printk messages dropped ** [  695.339513] binder: undelivered TRANSACTION_ERROR: 29189
[  695.354324] binder: 6108:6115 transaction failed 29189/-22, size 40-8 line 3011
** 15 printk messages dropped ** [  695.476899] binder: 6136:6144 transaction failed 29189/-3, size 40-8 line 3134
** 2 printk messages dropped ** [  695.509652] binder_alloc: 6135: binder_alloc_buf, no vma
[  695.509691] binder: 6137:6151 transaction failed 29189/-3, size 40-8 line 3134
** 4 printk messages dropped ** [  695.585252] binder: undelivered TRANSACTION_ERROR: 29189
[  695.585564] binder: undelivered TRANSACTION_ERROR: 29189
[  695.596651] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:21 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  695.596998] binder: undelivered TRANSACTION_ERROR: 29189
[  695.625065] binder: undelivered TRANSACTION_ERROR: 29189
[  695.627444] binder: 6174:6187 transaction failed 29189/-22, size 40-8 line 3011
[  695.638001] binder: 6184:6190 got transaction with invalid offset (0, min 24 max 40) or object.
** 11 printk messages dropped ** [  695.744149] binder: release 6183:6191 transaction 39745 out, still active
2018/03/30 11:44:21 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  695.744153] binder: unexpected work type, 4, not freed
2018/03/30 11:44:21 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="cfb93447d6feaef9f73c0561e075a8295d43017ab1a157786dcda36c5eec92a4306f284fa7e3ed364cc2da5c08cf7e4030d394520e123eee6d9ab275c91c174b1364fc943b49faefe12f605b5ce6c1400a91210c00477f900aff390901bf594c18557cb38a7d57ac8ded098b96b9dfc125e3bdc9305193f4cd256068baca5208160d820b9e7a043666ba4801cf6d557fc0f97f35c13ec6c0d1fe97ce1af1c17078ef47ab955200836671e402717481d14936b09828fd6f55fda2f11eb4c61b480e941133c0a4c5ec54033d0d174742191754ffe28b093596286a78ea01078337ada8585aa98dcc1143689002e31ccc5b9f5cfd2bbce5683a0f91b395391a60ba8e8f4d3c10c82c71caa74c44", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 11 printk messages dropped ** [  695.777655] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/30 11:44:21 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 13 printk messages dropped ** [  695.949393] binder: BINDER_SET_CONTEXT_MGR already set
** 2 printk messages dropped ** [  695.967632] binder: unexpected work type, 4, not freed
2018/03/30 11:44:21 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

** 2 printk messages dropped ** [  695.980467] binder: unexpected work type, 4, not freed
** 8 printk messages dropped ** [  695.980956] binder: undelivered TRANSACTION_COMPLETE
[  695.980968] binder: undelivered TRANSACTION_ERROR: 29189
** 1 printk messages dropped ** [  696.003254] binder: 6279:6284 transaction failed 29189/-22, size 40-8 line 3011
[  696.028802] binder: undelivered TRANSACTION_COMPLETE
[  696.028817] binder: undelivered TRANSACTION_ERROR: 29189
** 2 printk messages dropped ** [  696.043028] binder: undelivered TRANSACTION_ERROR: 29189
[  696.043151] binder: 6286:6293 transaction failed 29189/-22, size 0-16 line 3011
2018/03/30 11:44:21 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x2c}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0xfc}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x104}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x0, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00811e2630"], 0x1)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x0, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x48}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b1701681e065934f7515c3f3e0715c37a402b336c206f507381bdf5328235d74277ece68211f57e58763")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10c}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r2, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setns(0xffffffffffffffff, 0x8000000)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r5, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1}, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80588e02c6ff01225727c50e1de51134eabe3b16a8cac891540f85f1b17016")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r3, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x108}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140), 0x8)

2018/03/30 11:44:21 executing program 6:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./file1\x00', 0x20)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
tee(r1, r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0x4, 0x5, 0x20, "0f93acc45b9094fef867e39a275cc5bfbb40be50f0fc0a2a53819a506388ee0caddc8afe157fdedf7987fc3edbe484ef2e5362adea36a7cb9331fcfc4409bd53d8288de784331ab977817eef34cba4b4"}, 0xd8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x5, 0x6})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r4, 0xa08, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x50}, 0x1}, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)="e67fe38c91b63ce3284f035407e1becaa3178c02439b4b8b61c5d3b3d6cdd874f7766d389f27c788b3eaf9a30eb5613da61f7b9dd98aadae6d559897090201b367b2335f6b05e6f0290e5cf0441062aacfbf8982003d7bc1ba80")
socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$setstatus(r2, 0x4, 0x6000)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x10a}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140), 0x8)

[  696.045969] binder: 6288:6295 got transaction with invalid offset (0, min 24 max 40) or object.
[  696.046058] binder: 6288:6295 transaction failed 29201/-22, size 40-16 line 3197
[  696.059387] binder: BINDER_SET_CONTEXT_MGR already set
[  696.059394] binder: 6301:6304 ioctl 40046207 0 returned -16
[  696.060430] binder: 6301:6304 got transaction with invalid offset (0, min 24 max 40) or object.
** 197 printk messages dropped ** [  697.705896] binder: 6668:6674 transaction failed 29189/-3, size 40-8 line 3134
[  697.721338] binder_alloc: 6666: binder_alloc_buf, no vma
[  697.721374] binder: 6669:6677 transaction failed 29189/-3, size 40-8 line 3134
[  697.721727] binder: BINDER_SET_CONTEXT_MGR already set
[  697.721735] binder: 6670:6676 ioctl 40046207 0 returned -16
[  697.723253] binder_alloc: 6666: binder_alloc_buf, no vma
[  697.723294] binder: 6670:6676 transaction failed 29189/-3, size 40-16 line 3134
[  697.728721] binder_alloc: 6666: binder_alloc_buf, no vma
[  697.728757] binder: 6667:6679 transaction failed 29189/-3, size 40-8 line 3134
[  697.730565] binder_alloc: 6666: binder_alloc_buf, no vma
[  697.730603] binder: 6672:6682 transaction failed 29189/-3, size 40-8 line 3134
[  697.739816] binder_alloc: 6666: binder_alloc_buf, no vma
[  697.739856] binder: 6675:6683 transaction failed 29189/-3, size 40-8 line 3134
[  697.761224] binder: undelivered TRANSACTION_ERROR: 29189
[  697.796801] binder: undelivered TRANSACTION_ERROR: 29189
[  697.813954] binder: undelivered TRANSACTION_ERROR: 29189
[  697.833752] binder_alloc: 6705: binder_alloc_buf, no vma
[  697.833793] binder: 6705:6709 transaction failed 29189/-3, size 40-16 line 3134
[  697.845741] binder: undelivered TRANSACTION_ERROR: 29189
[  697.846921] binder: undelivered TRANSACTION_ERROR: 29189
[  697.850433] binder_alloc: 6705: binder_alloc_buf, no vma
[  697.850471] binder: 6714:6715 transaction failed 29189/-3, size 40-8 line 3134
[  697.855617] binder: undelivered TRANSACTION_ERROR: 29189
[  697.877309] binder: undelivered TRANSACTION_ERROR: 29189
[  697.882271] binder_alloc: 6705: binder_alloc_buf, no vma
[  697.882308] binder: 6717:6720 transaction failed 29189/-3, size 40-8 line 3134
[  697.890781] binder: undelivered TRANSACTION_ERROR: 29189
[  697.903019] binder: 6719:6722 got transaction with invalid offset (0, min 24 max 40) or object.
[  697.903110] binder: 6719:6722 transaction failed 29201/-22, size 40-16 line 3197
[  697.909907] binder: undelivered TRANSACTION_ERROR: 29189
[  697.937726] binder: 6730:6737 got transaction with invalid offset (0, min 24 max 40) or object.
[  697.937807] binder: 6730:6737 transaction failed 29201/-22, size 40-16 line 3197
[  697.991487] binder: undelivered TRANSACTION_ERROR: 29201
[  697.991608] binder: send failed reply for transaction 39918 to 6723:6727
[  697.991627] binder: send failed reply for transaction 39921 to 6731:6736
[  697.991643] binder: send failed reply for transaction 39927 to 6726:6728
[  698.018291] binder: undelivered TRANSACTION_ERROR: 29189
[  698.018659] binder: undelivered TRANSACTION_COMPLETE
[  698.018678] binder: undelivered TRANSACTION_ERROR: 29189
[  698.031627] binder: undelivered TRANSACTION_COMPLETE
[  698.031643] binder: undelivered TRANSACTION_ERROR: 29189
[  698.031732] binder: undelivered TRANSACTION_COMPLETE
[  698.031745] binder: undelivered TRANSACTION_ERROR: 29189
[  698.058409] binder: undelivered TRANSACTION_ERROR: 29201
[  698.090052] binder: 6759:6763 got transaction with invalid offset (0, min 24 max 40) or object.
[  698.090139] binder: 6759:6763 transaction failed 29201/-22, size 40-16 line 3197
[  698.092723] binder: BINDER_SET_CONTEXT_MGR already set
[  698.092730] binder: 6757:6765 ioctl 40046207 0 returned -16
[  698.093981] binder: 6757:6765 got transaction with invalid offset (0, min 24 max 40) or object.
[  698.094066] binder: 6757:6765 transaction failed 29201/-22, size 40-16 line 3197
[  698.127220] binder: 6768:6773 got transaction with invalid offset (0, min 24 max 40) or object.
[  698.127305] binder: 6768:6773 transaction failed 29201/-22, size 40-16 line 3197
[  698.155096] binder: undelivered TRANSACTION_ERROR: 29201
[  698.185877] binder: release 6758:6767 transaction 39940 out, still active
[  698.185882] binder: unexpected work type, 4, not freed
[  698.185885] binder: undelivered TRANSACTION_COMPLETE
[  698.210363] binder: release 6764:6766 transaction 39943 out, still active
[  698.210367] binder: unexpected work type, 4, not freed
[  698.210370] binder: undelivered TRANSACTION_COMPLETE
[  698.215365] binder: undelivered TRANSACTION_ERROR: 29201
[  698.215497] binder: send failed reply for transaction 39934 to 6760:6762
[  698.215513] binder: send failed reply for transaction 39940, target dead
[  698.215526] binder: send failed reply for transaction 39943, target dead
[  698.215540] binder: send failed reply for transaction 39949 to 6769:6775
[  698.215557] binder: send failed reply for transaction 39952 to 6761:6777
[  698.226548] binder: undelivered TRANSACTION_COMPLETE
[  698.226563] binder: undelivered TRANSACTION_ERROR: 29189
[  698.232149] binder: 6802:6805 transaction failed 29189/-22, size 40-8 line 3011
[  698.247510] binder: undelivered TRANSACTION_COMPLETE
[  698.247525] binder: undelivered TRANSACTION_ERROR: 29189
[  698.249080] binder: undelivered TRANSACTION_ERROR: 29201
[  698.271430] binder: 6808:6810 transaction failed 29189/-22, size 40-8 line 3011
[  698.276426] binder_alloc: 6799: binder_alloc_buf, no vma
[  698.276466] binder: 6799:6812 transaction failed 29189/-3, size 40-16 line 3134
[  698.296416] binder: undelivered TRANSACTION_COMPLETE
[  698.296431] binder: undelivered TRANSACTION_ERROR: 29189
[  698.306463] binder_alloc: 6799: binder_alloc_buf, no vma
[  698.306500] binder: 6813:6819 transaction failed 29189/-3, size 40-8 line 3134
[  698.310598] binder: undelivered TRANSACTION_ERROR: 29189
[  698.313587] binder: BINDER_SET_CONTEXT_MGR already set
[  698.313596] binder: 6815:6817 ioctl 40046207 0 returned -16
[  698.314341] binder_alloc: 6799: binder_alloc_buf, no vma
[  698.314380] binder: 6815:6817 transaction failed 29189/-3, size 40-16 line 3134
[  698.328986] binder_alloc: 6799: binder_alloc_buf, no vma
[  698.329028] binder: 6820:6825 transaction failed 29189/-3, size 40-16 line 3134
[  698.335579] binder: undelivered TRANSACTION_ERROR: 29189
[  698.345255] binder: 6821:6827 transaction failed 29189/-22, size 40-8 line 3011
[  698.365727] binder: 6828:6830 transaction failed 29189/-22, size 40-8 line 3011
[  698.376054] binder: undelivered TRANSACTION_ERROR: 29189
[  698.380448] binder: 6833:6840 transaction failed 29189/-22, size 40-8 line 3011
[  698.413447] binder: undelivered TRANSACTION_ERROR: 29189
[  698.427705] binder: undelivered TRANSACTION_ERROR: 29189
[  698.433934] binder: undelivered TRANSACTION_ERROR: 29189
[  698.447771] binder: undelivered TRANSACTION_ERROR: 29189
[  698.453325] binder: undelivered TRANSACTION_ERROR: 29189
[  698.478107] binder: undelivered TRANSACTION_ERROR: 29189
[  698.525740] binder: 6858:6862 transaction failed 29189/-22, size 40-16 line 3011
[  698.527571] binder_alloc: 6856: binder_alloc_buf, no vma
[  698.527611] binder: 6856:6860 transaction failed 29189/-3, size 40-16 line 3134
[  698.530987] binder_alloc: 6856: binder_alloc_buf, no vma
[  698.531023] binder: 6859:6863 transaction failed 29189/-3, size 40-8 line 3134
[  698.534238] binder: BINDER_SET_CONTEXT_MGR already set
[  698.534246] binder: 6861:6864 ioctl 40046207 0 returned -16
[  698.535003] binder_alloc: 6856: binder_alloc_buf, no vma
[  698.535040] binder: 6861:6864 transaction failed 29189/-3, size 40-16 line 3134
[  698.544334] binder_alloc: 6856: binder_alloc_buf, no vma
[  698.544369] binder: 6857:6865 transaction failed 29189/-3, size 40-8 line 3134
[  698.569805] binder_alloc: 6856: binder_alloc_buf, no vma
[  698.569845] binder: 6870:6874 transaction failed 29189/-3, size 40-8 line 3134
[  698.572273] binder_alloc: 6856: binder_alloc_buf, no vma
[  698.572310] binder: 6868:6873 transaction failed 29189/-3, size 40-8 line 3134
[  698.572319] binder: undelivered TRANSACTION_ERROR: 29189
[  698.596768] binder: 6872:6883 transaction failed 29189/-22, size 40-8 line 3011
[  698.621145] binder: undelivered TRANSACTION_ERROR: 29189
[  698.629880] binder: undelivered TRANSACTION_ERROR: 29189
[  698.634721] binder_alloc: 6889: binder_alloc_buf, no vma
[  698.634759] binder: 6889:6892 transaction failed 29189/-3, size 40-16 line 3134
[  698.653134] binder: undelivered TRANSACTION_ERROR: 29189
[  698.662758] binder: undelivered TRANSACTION_ERROR: 29189
[  698.663070] binder: undelivered TRANSACTION_ERROR: 29189
[  698.679420] binder: undelivered TRANSACTION_ERROR: 29189
[  698.682499] binder: undelivered TRANSACTION_ERROR: 29189
[  698.686907] binder: 6903:6905 got transaction with invalid offset (0, min 24 max 40) or object.
[  698.686993] binder: 6903:6905 transaction failed 29201/-22, size 40-16 line 3197
[  698.747720] binder: BINDER_SET_CONTEXT_MGR already set
[  698.747726] binder: 6915:6922 ioctl 40046207 0 returned -16
[  698.749370] binder: 6915:6922 got transaction with invalid offset (0, min 24 max 40) or object.
[  698.749459] binder: 6915:6922 transaction failed 29201/-22, size 40-16 line 3197
[  698.758234] binder: 6916:6917 got transaction with invalid offset (0, min 24 max 40) or object.
[  698.758315] binder: 6916:6917 transaction failed 29201/-22, size 40-16 line 3197
[  698.773732] binder: undelivered TRANSACTION_ERROR: 29201
[  698.778682] binder: undelivered TRANSACTION_ERROR: 29201
[  698.778768] binder: send failed reply for transaction 39980 to 6909:6910
[  698.778784] binder: send failed reply for transaction 39986 to 6912:6918
[  698.778799] binder: send failed reply for transaction 39992 to 6913:6921
[  698.792514] binder: undelivered TRANSACTION_ERROR: 29189
[  698.823074] binder: undelivered TRANSACTION_COMPLETE
[  698.823088] binder: undelivered TRANSACTION_ERROR: 29189
[  698.847755] binder: undelivered TRANSACTION_COMPLETE
[  698.847769] binder: undelivered TRANSACTION_ERROR: 29189
[  698.847939] binder: undelivered TRANSACTION_ERROR: 29201
[  698.865874] binder: undelivered TRANSACTION_COMPLETE
[  698.865887] binder: undelivered TRANSACTION_ERROR: 29189
[  698.899918] binder: 6939:6941 transaction failed 29189/-22, size 40-8 line 3011
[  698.906723] binder: 6942:6946 transaction failed 29189/-22, size 40-16 line 3011
[  698.913352] binder_alloc: 6940: binder_alloc_buf, no vma
[  698.913393] binder: 6940:6951 transaction failed 29189/-3, size 40-16 line 3134
[  698.917328] binder: BINDER_SET_CONTEXT_MGR already set
[  698.917336] binder: 6948:6953 ioctl 40046207 0 returned -16
[  698.918132] binder_alloc: 6940: binder_alloc_buf, no vma
[  698.918166] binder: 6948:6953 transaction failed 29189/-3, size 40-16 line 3134
[  698.923568] binder_alloc: 6940: binder_alloc_buf, no vma
[  698.923606] binder: 6943:6952 transaction failed 29189/-3, size 40-8 line 3134
[  698.931061] binder: undelivered TRANSACTION_ERROR: 29189
[  698.935644] binder: 6949:6956 transaction failed 29189/-22, size 40-8 line 3011
[  698.946462] binder: 6944:6954 transaction failed 29189/-22, size 40-8 line 3011
[  698.988199] binder: undelivered TRANSACTION_ERROR: 29189
[  698.999739] binder: 6945:6947 transaction failed 29189/-22, size 40-8 line 3011
[  699.017327] binder: undelivered TRANSACTION_ERROR: 29189
[  699.026654] binder_alloc: 6970: binder_alloc_buf, no vma
[  699.026694] binder: 6970:6975 transaction failed 29189/-3, size 40-16 line 3134
[  699.033006] binder: undelivered TRANSACTION_ERROR: 29189
[  699.040781] binder: undelivered TRANSACTION_ERROR: 29189
[  699.069606] binder: undelivered TRANSACTION_ERROR: 29189
[  699.076568] binder: undelivered TRANSACTION_ERROR: 29189
[  699.076647] binder: undelivered TRANSACTION_ERROR: 29189
[  699.079592] binder: 6990:6992 transaction failed 29189/-22, size 40-8 line 3011
[  699.083566] binder: 6991:6993 got transaction with invalid offset (0, min 24 max 40) or object.
[  699.083664] binder: 6991:6993 transaction failed 29201/-22, size 40-16 line 3197
[  699.098974] binder: undelivered TRANSACTION_ERROR: 29189
[  699.135471] binder: release 6981:6988 transaction 40011 out, still active
[  699.135476] binder: unexpected work type, 4, not freed
[  699.135478] binder: undelivered TRANSACTION_COMPLETE
[  699.184471] binder: undelivered TRANSACTION_ERROR: 29189
[  699.185278] binder: undelivered TRANSACTION_ERROR: 29201
[  699.185352] binder: send failed reply for transaction 40011, target dead
[  699.185367] binder: send failed reply for transaction 40014 to 7003:7005
[  699.197521] binder: 7004:7007 transaction failed 29189/-22, size 40-16 line 3011
[  699.245484] binder: undelivered TRANSACTION_COMPLETE
[  699.245499] binder: undelivered TRANSACTION_ERROR: 29189
[  699.273345] binder: undelivered TRANSACTION_ERROR: 29189
[  699.301070] binder_alloc: 7016: binder_alloc_buf, no vma
[  699.301112] binder: 7016:7017 transaction failed 29189/-3, size 40-16 line 3134
[  699.307163] binder_alloc: 7016: binder_alloc_buf, no vma
[  699.307203] binder: 7019:7021 transaction failed 29189/-3, size 40-8 line 3134
[  699.317397] binder: undelivered TRANSACTION_ERROR: 29189
[  699.326145] binder: 7023:7026 transaction failed 29189/-22, size 40-16 line 3011
[  699.340489] binder: 7025:7029 got transaction with invalid offset (0, min 24 max 40) or object.
[  699.340583] binder: 7025:7029 transaction failed 29201/-22, size 40-16 line 3197
[  699.375286] binder: BINDER_SET_CONTEXT_MGR already set
[  699.375293] binder: 7035:7041 ioctl 40046207 0 returned -16
[  699.379992] binder: 7035:7041 got transaction with invalid offset (0, min 24 max 40) or object.
[  699.380084] binder: 7035:7041 transaction failed 29201/-22, size 40-16 line 3197
[  699.401779] binder: undelivered TRANSACTION_ERROR: 29189
[  699.434278] binder: undelivered TRANSACTION_ERROR: 29201
[  699.445562] binder: undelivered TRANSACTION_ERROR: 29201
[  699.445674] binder: send failed reply for transaction 40026 to 7018:7033
[  699.445693] binder: send failed reply for transaction 40029 to 7027:7034
[  699.445709] binder: send failed reply for transaction 40032 to 7022:7031
[  699.445725] binder: send failed reply for transaction 40035 to 7020:7030
[  699.448263] binder: 7060:7062 transaction failed 29189/-22, size 40-8 line 3011
[  699.476534] binder: undelivered TRANSACTION_ERROR: 29189
[  699.653497] binder_alloc: 7074: binder_alloc_buf, no vma
[  699.653540] binder: 7074:7075 transaction failed 29189/-3, size 40-16 line 3134
[  699.745890] binder: undelivered TRANSACTION_ERROR: 29189
[  699.745968] binder: undelivered TRANSACTION_COMPLETE
[  699.745979] binder: undelivered TRANSACTION_ERROR: 29189
[  699.746084] binder: undelivered TRANSACTION_ERROR: 29189
[  699.746237] binder: undelivered TRANSACTION_COMPLETE
[  699.746247] binder: undelivered TRANSACTION_ERROR: 29189
[  699.746399] binder: undelivered TRANSACTION_COMPLETE
[  699.746410] binder: undelivered TRANSACTION_ERROR: 29189
[  699.746513] binder: undelivered TRANSACTION_COMPLETE
[  699.746528] binder: undelivered TRANSACTION_ERROR: 29189
[  699.935682] binder: 7080:7083 got transaction with invalid offset (0, min 24 max 40) or object.
[  699.935770] binder: 7080:7083 transaction failed 29201/-22, size 40-16 line 3197
[  699.944438] binder: 7079:7081 got transaction with invalid offset (0, min 24 max 40) or object.
[  699.944528] binder: 7079:7081 transaction failed 29201/-22, size 40-16 line 3197
[  699.953885] binder: BINDER_SET_CONTEXT_MGR already set
[  699.953893] binder: 7089:7090 ioctl 40046207 0 returned -16
[  699.955056] binder: 7089:7090 got transaction with invalid offset (0, min 24 max 40) or object.
[  699.955139] binder: 7089:7090 transaction failed 29201/-22, size 40-16 line 3197
[  700.026584] binder: undelivered TRANSACTION_ERROR: 29201
[  700.048153] binder: release 7084:7086 transaction 40051 out, still active
[  700.048158] binder: unexpected work type, 4, not freed
[  700.048161] binder: undelivered TRANSACTION_COMPLETE
[  700.059280] binder: release 7077:7078 transaction 40054 out, still active
[  700.059285] binder: unexpected work type, 4, not freed
[  700.059287] binder: undelivered TRANSACTION_COMPLETE
[  700.059390] binder: release 7085:7092 transaction 40066 out, still active
[  700.059394] binder: unexpected work type, 4, not freed
[  700.059396] binder: undelivered TRANSACTION_COMPLETE
[  700.059488] binder: undelivered TRANSACTION_ERROR: 29201
[  700.059619] binder: send failed reply for transaction 40051, target dead
[  700.059633] binder: send failed reply for transaction 40054, target dead
[  700.059647] binder: send failed reply for transaction 40057 to 7082:7087
[  700.059663] binder: send failed reply for transaction 40063 to 7088:7094
[  700.059677] binder: send failed reply for transaction 40066, target dead
[  700.066963] binder: undelivered TRANSACTION_COMPLETE
[  700.066978] binder: undelivered TRANSACTION_ERROR: 29189
[  700.067055] binder: undelivered TRANSACTION_ERROR: 29201
[  700.096626] binder: 7123:7124 transaction failed 29189/-22, size 40-8 line 3011
[  700.106959] binder_alloc: 7126: binder_alloc_buf, no vma
[  700.106997] binder: 7126:7127 transaction failed 29189/-3, size 40-16 line 3134
[  700.108399] binder: undelivered TRANSACTION_COMPLETE
[  700.108413] binder: undelivered TRANSACTION_ERROR: 29189
[  700.115487] binder_alloc: 7126: binder_alloc_buf, no vma
[  700.115522] binder: 7125:7129 transaction failed 29189/-3, size 40-8 line 3134
[  700.152057] binder: undelivered TRANSACTION_ERROR: 29189
[  700.181911] binder: undelivered TRANSACTION_ERROR: 29189
[  700.182196] binder: undelivered TRANSACTION_ERROR: 29189
[  700.217143] binder: 7142:7144 transaction failed 29189/-22, size 40-16 line 3011
[  700.224696] binder: 7139:7147 got transaction with invalid offset (0, min 24 max 40) or object.
[  700.224784] binder: 7139:7147 transaction failed 29201/-22, size 40-16 line 3197
[  700.240680] binder: BINDER_SET_CONTEXT_MGR already set
[  700.240688] binder: 7145:7153 ioctl 40046207 0 returned -16
[  700.241690] binder: 7145:7153 got transaction with invalid offset (0, min 24 max 40) or object.
[  700.241774] binder: 7145:7153 transaction failed 29201/-22, size 40-16 line 3197
[  700.313191] binder: release 7140:7148 transaction 40075 out, still active
[  700.313196] binder: unexpected work type, 4, not freed
[  700.313198] binder: undelivered TRANSACTION_COMPLETE
[  700.316923] binder: undelivered TRANSACTION_ERROR: 29201
[  700.327856] binder: undelivered TRANSACTION_ERROR: 29189
[  700.333359] binder: undelivered TRANSACTION_ERROR: 29201
[  700.333496] binder: send failed reply for transaction 40075, target dead
[  700.333513] binder: send failed reply for transaction 40081 to 7143:7151
[  700.333530] binder: send failed reply for transaction 40084 to 7141:7150
[  700.333547] binder: send failed reply for transaction 40090 to 7146:7152
[  700.333563] binder: send failed reply for transaction 40093 to 7149:7157
[  700.366162] binder: undelivered TRANSACTION_COMPLETE
[  700.366176] binder: undelivered TRANSACTION_ERROR: 29189
[  700.375886] binder: undelivered TRANSACTION_COMPLETE
[  700.375900] binder: undelivered TRANSACTION_ERROR: 29189
[  700.376143] binder: undelivered TRANSACTION_COMPLETE
[  700.376156] binder: undelivered TRANSACTION_ERROR: 29189
[  700.385820] binder: undelivered TRANSACTION_COMPLETE
[  700.385834] binder: undelivered TRANSACTION_ERROR: 29189
[  700.388833] binder_alloc: 7187: binder_alloc_buf, no vma
[  700.388921] binder: 7187:7189 transaction failed 29189/-3, size 40-16 line 3134
[  700.395940] binder_alloc: 7187: binder_alloc_buf, no vma
[  700.395975] binder: 7185:7190 transaction failed 29189/-3, size 40-8 line 3134
[  700.400171] binder_alloc: 7187: binder_alloc_buf, no vma
[  700.400208] binder: 7188:7192 transaction failed 29189/-3, size 40-16 line 3134
[  700.409399] binder: BINDER_SET_CONTEXT_MGR already set
[  700.409407] binder: 7191:7194 ioctl 40046207 0 returned -16
[  700.410195] binder_alloc: 7187: binder_alloc_buf, no vma
[  700.410233] binder: 7191:7194 transaction failed 29189/-3, size 40-16 line 3134
[  700.429850] binder_alloc: 7187: binder_alloc_buf, no vma
[  700.429889] binder: 7195:7199 transaction failed 29189/-3, size 40-8 line 3134
[  700.440880] binder_alloc: 7187: binder_alloc_buf, no vma
[  700.440919] binder: 7193:7201 transaction failed 29189/-3, size 40-8 line 3134
[  700.444262] binder: undelivered TRANSACTION_ERROR: 29189
[  700.470686] binder: undelivered TRANSACTION_ERROR: 29189
[  700.486838] binder: undelivered TRANSACTION_ERROR: 29189
[  700.502505] binder: undelivered TRANSACTION_ERROR: 29189
[  700.526470] binder: undelivered TRANSACTION_ERROR: 29189
[  700.539842] binder: undelivered TRANSACTION_ERROR: 29189
[  700.563431] binder: 7219:7220 transaction failed 29189/-22, size 40-8 line 3011
[  700.576901] binder_alloc: 7222: binder_alloc_buf, no vma
[  700.576939] binder: 7222:7224 transaction failed 29189/-3, size 40-16 line 3134
[  700.583973] binder_alloc: 7222: binder_alloc_buf, no vma
[  700.584010] binder: 7226:7232 transaction failed 29189/-3, size 40-16 line 3134
[  700.593125] binder_alloc: 7222: binder_alloc_buf, no vma
[  700.593162] binder: 7221:7230 transaction failed 29189/-3, size 40-8 line 3134
[  700.593706] binder: BINDER_SET_CONTEXT_MGR already set
[  700.593712] binder: 7225:7231 ioctl 40046207 0 returned -16
[  700.595151] binder_alloc: 7222: binder_alloc_buf, no vma
[  700.597149] binder_alloc: 7222: binder_alloc_buf, no vma
[  700.597183] binder: 7229:7235 transaction failed 29189/-3, size 40-8 line 3134
[  700.597538] binder: 7225:7231 transaction failed 29189/-3, size 40-16 line 3134
[  700.602339] binder_alloc: 7222: binder_alloc_buf, no vma
[  700.602377] binder: 7223:7233 transaction failed 29189/-3, size 40-8 line 3134
[  700.612927] binder_alloc: 7222: binder_alloc_buf, no vma
[  700.612971] binder: 7227:7234 transaction failed 29189/-3, size 40-8 line 3134
[  700.644614] binder: undelivered TRANSACTION_ERROR: 29189
[  700.665809] binder: undelivered TRANSACTION_ERROR: 29189
[  700.690463] binder: undelivered TRANSACTION_ERROR: 29189
[  700.703461] binder_alloc: 7259: binder_alloc_buf, no vma
[  700.703501] binder: 7259:7265 transaction failed 29189/-3, size 40-16 line 3134
[  700.706909] binder: undelivered TRANSACTION_ERROR: 29189
[  700.716400] binder: undelivered TRANSACTION_ERROR: 29189
[  700.725733] binder: undelivered TRANSACTION_ERROR: 29189
[  700.739028] binder_alloc: 7259: binder_alloc_buf, no vma
[  700.739066] binder: 7264:7269 transaction failed 29189/-3, size 40-8 line 3134
[  700.759078] binder: undelivered TRANSACTION_ERROR: 29189
[  700.759991] binder: undelivered TRANSACTION_ERROR: 29189
[  700.760601] binder_alloc: 7259: binder_alloc_buf, no vma
[  700.760643] binder: 7272:7276 transaction failed 29189/-3, size 40-8 line 3134
[  700.773545] binder: undelivered TRANSACTION_ERROR: 29189
[  700.778568] binder: 7275:7279 transaction failed 29189/-22, size 40-16 line 3011
[  700.781611] binder: 7278:7280 transaction failed 29189/-22, size 40-8 line 3011
[  700.811177] binder: 7284:7288 got transaction with invalid offset (0, min 24 max 40) or object.
[  700.811267] binder: 7284:7288 transaction failed 29201/-22, size 40-16 line 3197
[  700.824622] binder: undelivered TRANSACTION_ERROR: 29189
[  700.835818] binder: undelivered TRANSACTION_ERROR: 29189
[  700.864785] binder: undelivered TRANSACTION_ERROR: 29189
[  700.873744] binder: undelivered TRANSACTION_ERROR: 29189
[  700.895226] binder: undelivered TRANSACTION_ERROR: 29201
[  700.930534] binder: 7302:7307 transaction failed 29189/-22, size 40-8 line 3011
[  700.935729] binder: 7304:7311 transaction failed 29189/-22, size 40-8 line 3011
[  700.948449] binder_alloc: 7303: binder_alloc_buf, no vma
[  700.948488] binder: 7309:7313 transaction failed 29189/-3, size 40-8 line 3134
[  700.948569] binder_alloc: 7303: binder_alloc_buf, no vma
[  700.948606] binder: 7303:7312 transaction failed 29189/-3, size 40-16 line 3134
[  700.949205] binder: BINDER_SET_CONTEXT_MGR already set
[  700.949213] binder: 7306:7314 ioctl 40046207 0 returned -16
[  700.950216] binder_alloc: 7303: binder_alloc_buf, no vma
[  700.950252] binder: 7306:7314 transaction failed 29189/-3, size 40-16 line 3134
[  700.956634] binder_alloc: 7303: binder_alloc_buf, no vma
[  700.956671] binder: 7310:7315 transaction failed 29189/-3, size 40-16 line 3134
[  700.957199] binder_alloc: 7303: binder_alloc_buf, no vma
[  700.957234] binder: 7301:7308 transaction failed 29189/-3, size 40-8 line 3134
[  700.957333] binder_alloc: 7303: binder_alloc_buf, no vma
[  700.957367] binder: 7305:7316 transaction failed 29189/-3, size 40-8 line 3134
[  701.004493] binder: undelivered TRANSACTION_ERROR: 29189
[  701.037001] binder: undelivered TRANSACTION_ERROR: 29189
[  701.044904] binder: undelivered TRANSACTION_ERROR: 29189
[  701.055502] binder: undelivered TRANSACTION_ERROR: 29189
[  701.081603] binder_alloc: 7347: binder_alloc_buf, no vma
[  701.081639] binder: 7347:7353 transaction failed 29189/-3, size 40-16 line 3134
[  701.081779] binder: undelivered TRANSACTION_ERROR: 29189
[  701.098229] binder: undelivered TRANSACTION_ERROR: 29189
[  701.103712] binder: undelivered TRANSACTION_ERROR: 29189
[  701.114343] binder: undelivered TRANSACTION_ERROR: 29189
[  701.116769] binder_alloc: 7347: binder_alloc_buf, no vma
[  701.116809] binder: 7356:7358 transaction failed 29189/-3, size 40-8 line 3134
[  701.123854] binder: BINDER_SET_CONTEXT_MGR already set
[  701.123861] binder: 7354:7361 ioctl 40046207 0 returned -16
[  701.124463] binder_alloc: 7347: binder_alloc_buf, no vma
[  701.124500] binder: 7355:7360 transaction failed 29189/-3, size 40-8 line 3134
[  701.127043] binder_alloc: 7347: binder_alloc_buf, no vma
[  701.127083] binder: 7354:7361 transaction failed 29189/-3, size 40-16 line 3134
[  701.139826] binder_alloc: 7347: binder_alloc_buf, no vma
[  701.139861] binder: 7359:7365 transaction failed 29189/-3, size 40-8 line 3134
[  701.154186] binder: undelivered TRANSACTION_ERROR: 29189
[  701.165921] binder: 7367:7369 transaction failed 29189/-22, size 40-8 line 3011
[  701.167251] binder: 7370:7373 transaction failed 29189/-22, size 40-8 line 3011
[  701.188499] binder: undelivered TRANSACTION_ERROR: 29189
[  701.195244] binder: 7363:7372 transaction failed 29189/-22, size 40-16 line 3011
[  701.223395] binder: undelivered TRANSACTION_ERROR: 29189
[  701.234310] binder: undelivered TRANSACTION_ERROR: 29189
[  701.241649] binder: undelivered TRANSACTION_ERROR: 29189
[  701.274127] binder: undelivered TRANSACTION_ERROR: 29189
[  701.277925] binder: undelivered TRANSACTION_ERROR: 29189
[  701.289098] binder: undelivered TRANSACTION_ERROR: 29189
[  701.316296] binder_alloc: 7397: binder_alloc_buf, no vma
[  701.316335] binder: 7397:7402 transaction failed 29189/-3, size 40-16 line 3134
[  701.329327] binder_alloc: 7397: binder_alloc_buf, no vma
[  701.329364] binder: 7400:7404 transaction failed 29189/-3, size 40-8 line 3134
[  701.335128] binder: BINDER_SET_CONTEXT_MGR already set
[  701.335136] binder: 7399:7407 ioctl 40046207 0 returned -16
[  701.336585] binder_alloc: 7397: binder_alloc_buf, no vma
[  701.336622] binder: 7399:7407 transaction failed 29189/-3, size 40-16 line 3134
[  701.338611] binder_alloc: 7397: binder_alloc_buf, no vma
[  701.338645] binder: 7401:7408 transaction failed 29189/-3, size 40-8 line 3134
[  701.341358] binder_alloc: 7397: binder_alloc_buf, no vma
[  701.341393] binder: 7403:7409 transaction failed 29189/-3, size 40-8 line 3134
[  701.350364] binder_alloc: 7397: binder_alloc_buf, no vma
[  701.350416] binder: 7406:7412 transaction failed 29189/-3, size 40-16 line 3134
[  701.350482] binder_alloc: 7397: binder_alloc_buf, no vma
[  701.350518] binder: 7398:7410 transaction failed 29189/-3, size 40-8 line 3134
[  701.356673] binder_alloc: 7397: binder_alloc_buf, no vma
[  701.356709] binder: 7405:7414 transaction failed 29189/-3, size 40-8 line 3134
[  701.364764] binder: undelivered TRANSACTION_ERROR: 29189
[  701.433141] binder_alloc: 7428: binder_alloc_buf, no vma
[  701.433181] binder: 7428:7432 transaction failed 29189/-3, size 40-16 line 3134
[  701.445248] binder: undelivered TRANSACTION_ERROR: 29189
[  701.453060] binder: undelivered TRANSACTION_ERROR: 29189
[  701.453148] binder: undelivered TRANSACTION_ERROR: 29189
[  701.471506] binder: undelivered TRANSACTION_ERROR: 29189
[  701.474253] binder: undelivered TRANSACTION_ERROR: 29189
[  701.478400] binder: undelivered TRANSACTION_ERROR: 29189
[  701.478841] binder: undelivered TRANSACTION_ERROR: 29189
[  701.490594] binder: undelivered TRANSACTION_ERROR: 29189
[  701.514560] binder: 7449:7452 transaction failed 29189/-22, size 40-8 line 3011
[  701.522308] binder: 7448:7453 got transaction with invalid offset (0, min 24 max 40) or object.
[  701.522407] binder: 7448:7453 transaction failed 29201/-22, size 40-16 line 3197
[  701.525760] binder: 7447:7450 got transaction with invalid offset (0, min 24 max 40) or object.
[  701.525847] binder: 7447:7450 transaction failed 29201/-22, size 40-16 line 3197
[  701.595972] binder: undelivered TRANSACTION_ERROR: 29189
[  701.617016] binder: undelivered TRANSACTION_ERROR: 29201
[  701.617130] binder: send failed reply for transaction 40159 to 7457:7460
[  701.617148] binder: send failed reply for transaction 40162 to 7456:7463
[  701.617164] binder: send failed reply for transaction 40165 to 7454:7459
[  701.617180] binder: send failed reply for transaction 40168 to 7451:7462
[  701.625436] binder: undelivered TRANSACTION_ERROR: 29201
[  701.637575] binder: undelivered TRANSACTION_COMPLETE
[  701.637591] binder: undelivered TRANSACTION_ERROR: 29189
[  701.655376] binder: undelivered TRANSACTION_COMPLETE
[  701.655390] binder: undelivered TRANSACTION_ERROR: 29189
[  701.666489] binder: undelivered TRANSACTION_COMPLETE
[  701.666503] binder: undelivered TRANSACTION_ERROR: 29189
[  701.693880] binder: undelivered TRANSACTION_COMPLETE
[  701.693895] binder: undelivered TRANSACTION_ERROR: 29189
[  701.722323] binder: 7491:7497 transaction failed 29189/-22, size 40-16 line 3011
[  701.725707] binder: 7494:7498 transaction failed 29189/-22, size 40-8 line 3011
[  701.727454] binder: 7496:7501 transaction failed 29189/-22, size 40-8 line 3011
[  701.729942] binder: 7489:7499 got transaction with invalid offset (0, min 24 max 40) or object.
[  701.730334] binder: BINDER_SET_CONTEXT_MGR already set
[  701.730341] binder: 7490:7500 ioctl 40046207 0 returned -16
[  701.730451] binder: 7489:7499 transaction failed 29201/-22, size 40-16 line 3197
[  701.732382] binder: 7490:7500 got transaction with invalid offset (0, min 24 max 40) or object.
[  701.732466] binder: 7490:7500 transaction failed 29201/-22, size 40-16 line 3197
[  701.790298] binder: undelivered TRANSACTION_ERROR: 29201
[  701.815838] binder: release 7492:7502 transaction 40182 out, still active
[  701.815844] binder: unexpected work type, 4, not freed
[  701.815846] binder: undelivered TRANSACTION_COMPLETE
[  701.818488] binder: BINDER_SET_CONTEXT_MGR already set
[  701.818496] binder: 7533:7534 ioctl 40046207 0 returned -16
[  701.820996] binder: 7533:7534 got transaction with invalid offset (0, min 24 max 40) or object.
[  701.821085] binder: 7533:7534 transaction failed 29201/-22, size 40-16 line 3197
[  701.834625] binder: undelivered TRANSACTION_ERROR: 29201
[  701.834722] binder: send failed reply for transaction 40181 to 7493:7503
[  701.834738] binder: send failed reply for transaction 40182, target dead
[  701.834753] binder: send failed reply for transaction 40187 to 7495:7504
[  701.838572] binder: undelivered TRANSACTION_COMPLETE
[  701.838586] binder: undelivered TRANSACTION_ERROR: 29189
[  701.843078] binder: undelivered TRANSACTION_ERROR: 29189
[  701.843159] binder: undelivered TRANSACTION_ERROR: 29189
[  701.848509] binder: undelivered TRANSACTION_ERROR: 29189
[  701.868504] binder: 7538:7541 transaction failed 29189/-22, size 40-8 line 3011
[  701.868707] binder: 7540:7542 transaction failed 29189/-22, size 40-8 line 3011
[  701.884612] binder: undelivered TRANSACTION_COMPLETE
[  701.884627] binder: undelivered TRANSACTION_ERROR: 29189
[  701.892165] binder: 7537:7548 got transaction with invalid offset (0, min 24 max 40) or object.
[  701.892255] binder: 7537:7548 transaction failed 29201/-22, size 40-16 line 3197
[  701.908243] binder: 7543:7549 got transaction with invalid offset (0, min 24 max 40) or object.
[  701.908330] binder: 7543:7549 transaction failed 29201/-22, size 40-16 line 3197
[  701.908735] binder: undelivered TRANSACTION_ERROR: 29201
[  701.966273] binder: undelivered TRANSACTION_ERROR: 29189
[  701.978064] binder: undelivered TRANSACTION_ERROR: 29189
[  701.981184] binder: release 7535:7547 transaction 40199 out, still active
[  701.981189] binder: unexpected work type, 4, not freed
[  701.981191] binder: undelivered TRANSACTION_COMPLETE
[  701.984847] binder: release 7544:7550 transaction 40202 out, still active
[  701.984851] binder: unexpected work type, 4, not freed
[  701.984854] binder: undelivered TRANSACTION_COMPLETE
[  702.005382] binder: undelivered TRANSACTION_ERROR: 29201
[  702.010103] binder: undelivered TRANSACTION_ERROR: 29201
[  702.010197] binder: send failed reply for transaction 40199, target dead
[  702.010211] binder: send failed reply for transaction 40202, target dead
[  702.010225] binder: send failed reply for transaction 40208 to 7562:7569
[  702.026608] binder: undelivered TRANSACTION_COMPLETE
[  702.026622] binder: undelivered TRANSACTION_ERROR: 29189
[  702.053955] binder: 7583:7586 transaction failed 29189/-22, size 40-8 line 3011
[  702.057755] binder_alloc: 7580: binder_alloc_buf, no vma
[  702.057791] binder: 7580:7587 transaction failed 29189/-3, size 40-16 line 3134
[  702.062309] binder: BINDER_SET_CONTEXT_MGR already set
[  702.062317] binder: 7584:7589 ioctl 40046207 0 returned -16
[  702.063973] binder_alloc: 7580: binder_alloc_buf, no vma
[  702.064008] binder: 7581:7591 transaction failed 29189/-3, size 40-8 line 3134
[  702.064171] binder_alloc: 7580: binder_alloc_buf, no vma
[  702.064208] binder: 7584:7589 transaction failed 29189/-3, size 40-16 line 3134
[  702.064560] binder_alloc: 7580: binder_alloc_buf, no vma
[  702.064597] binder: 7582:7588 transaction failed 29189/-3, size 40-8 line 3134
[  702.065232] binder_alloc: 7580: binder_alloc_buf, no vma
[  702.066017] binder: 7579:7590 transaction failed 29189/-3, size 40-8 line 3134
[  702.073173] binder_alloc: 7580: binder_alloc_buf, no vma
[  702.073213] binder: 7585:7593 transaction failed 29189/-3, size 40-16 line 3134
[  702.093819] binder_alloc: 7580: binder_alloc_buf, no vma
[  702.093856] binder: 7592:7600 transaction failed 29189/-3, size 40-8 line 3134
[  702.110612] binder: undelivered TRANSACTION_ERROR: 29189
[  702.139067] binder: undelivered TRANSACTION_ERROR: 29189
[  702.162641] binder_alloc: 7617: binder_alloc_buf, no vma
[  702.162675] binder: 7617:7624 transaction failed 29189/-3, size 40-16 line 3134
[  702.165050] binder: undelivered TRANSACTION_ERROR: 29189
[  702.180068] binder: undelivered TRANSACTION_ERROR: 29189
[  702.180173] binder: undelivered TRANSACTION_ERROR: 29189
[  702.181795] binder: undelivered TRANSACTION_ERROR: 29189
[  702.198978] binder_alloc: 7617: binder_alloc_buf, no vma
[  702.199017] binder: 7625:7628 transaction failed 29189/-3, size 40-8 line 3134
[  702.205590] binder: undelivered TRANSACTION_ERROR: 29189
[  702.210571] binder_alloc: 7617: binder_alloc_buf, no vma
[  702.210609] binder: 7630:7636 transaction failed 29189/-3, size 40-8 line 3134
[  702.223652] binder_alloc: 7617: binder_alloc_buf, no vma
[  702.223687] binder: 7633:7638 transaction failed 29189/-3, size 40-8 line 3134
[  702.228485] binder_alloc: 7617: binder_alloc_buf, no vma
[  702.228525] binder: 7635:7639 transaction failed 29189/-3, size 40-8 line 3134
[  702.233099] binder_alloc: 7617: binder_alloc_buf, no vma
[  702.233140] binder: 7634:7644 transaction failed 29189/-3, size 40-16 line 3134
[  702.236283] binder: undelivered TRANSACTION_ERROR: 29189
[  702.243763] binder: undelivered TRANSACTION_ERROR: 29189
[  702.263443] binder: 7642:7648 got transaction with invalid offset (0, min 24 max 40) or object.
[  702.263529] binder: 7642:7648 transaction failed 29201/-22, size 40-16 line 3197
[  702.265396] binder: undelivered TRANSACTION_ERROR: 29189
[  702.294650] binder: undelivered TRANSACTION_ERROR: 29189
[  702.305596] binder: undelivered TRANSACTION_ERROR: 29189
[  702.335823] binder: undelivered TRANSACTION_ERROR: 29189
[  702.341792] binder: undelivered TRANSACTION_ERROR: 29189
[  702.351471] binder: undelivered TRANSACTION_ERROR: 29201
[  702.351524] binder: send failed reply for transaction 40231 to 7658:7663
[  702.364196] binder: undelivered TRANSACTION_COMPLETE
[  702.364210] binder: undelivered TRANSACTION_ERROR: 29189
[  702.393850] binder_alloc: 7672: binder_alloc_buf, no vma
[  702.393889] binder: 7675:7680 transaction failed 29189/-3, size 40-16 line 3134
[  702.397862] binder_alloc: 7672: binder_alloc_buf, no vma
[  702.397888] binder_alloc: 7672: binder_alloc_buf, no vma
[  702.397900] binder: 7672:7676 transaction failed 29189/-3, size 40-16 line 3134
[  702.397926] binder: 7673:7678 transaction failed 29189/-3, size 40-8 line 3134
[  702.399480] binder_alloc: 7672: binder_alloc_buf, no vma
[  702.399518] binder: 7670:7677 transaction failed 29189/-3, size 40-8 line 3134
[  702.406080] binder: BINDER_SET_CONTEXT_MGR already set
[  702.406089] binder: 7679:7681 ioctl 40046207 0 returned -16
[  702.406960] binder_alloc: 7672: binder_alloc_buf, no vma
[  702.406998] binder: 7679:7681 transaction failed 29189/-3, size 40-16 line 3134
[  702.407998] binder_alloc: 7672: binder_alloc_buf, no vma
[  702.408035] binder: 7674:7683 transaction failed 29189/-3, size 40-8 line 3134
[  702.410419] binder_alloc: 7672: binder_alloc_buf, no vma
[  702.410456] binder: 7671:7684 transaction failed 29189/-3, size 40-8 line 3134
[  702.437535] binder_alloc: 7672: binder_alloc_buf, no vma
[  702.437573] binder: 7682:7692 transaction failed 29189/-3, size 40-8 line 3134
[  702.447703] binder: undelivered TRANSACTION_ERROR: 29189
[  702.483223] binder: undelivered TRANSACTION_ERROR: 29189
[  702.505575] binder: undelivered TRANSACTION_ERROR: 29189
[  702.505660] binder: undelivered TRANSACTION_ERROR: 29189
[  702.509705] binder: undelivered TRANSACTION_ERROR: 29189
[  702.514688] binder: undelivered TRANSACTION_ERROR: 29189
[  702.521792] binder_alloc: 7708: binder_alloc_buf, no vma
[  702.521831] binder: 7708:7716 transaction failed 29189/-3, size 40-16 line 3134
[  702.524482] binder: undelivered TRANSACTION_ERROR: 29189
[  702.538034] binder_alloc: 7708: binder_alloc_buf, no vma
[  702.538074] binder: 7717:7720 transaction failed 29189/-3, size 40-8 line 3134
[  702.548846] binder_alloc: 7708: binder_alloc_buf, no vma
[  702.548885] binder: 7718:7726 transaction failed 29189/-3, size 40-8 line 3134
[  702.552237] binder_alloc: 7708: binder_alloc_buf, no vma
[  702.552275] binder: 7719:7727 transaction failed 29189/-3, size 40-16 line 3134
[  702.556223] binder_alloc: 7708: binder_alloc_buf, no vma
[  702.556260] binder: 7723:7728 transaction failed 29189/-3, size 40-8 line 3134
[  702.557576] binder_alloc: 7708: binder_alloc_buf, no vma
[  702.557611] binder: 7721:7729 transaction failed 29189/-3, size 40-8 line 3134
[  702.564070] binder: BINDER_SET_CONTEXT_MGR already set
[  702.564078] binder: 7725:7734 ioctl 40046207 0 returned -16
[  702.564916] binder_alloc: 7708: binder_alloc_buf, no vma
[  702.564951] binder: 7725:7734 transaction failed 29189/-3, size 40-16 line 3134
[  702.570794] binder: undelivered TRANSACTION_ERROR: 29189
[  702.588236] binder: undelivered TRANSACTION_ERROR: 29189
[  702.617581] binder: undelivered TRANSACTION_ERROR: 29189
[  702.641943] binder: undelivered TRANSACTION_ERROR: 29189
[  702.642026] binder: undelivered TRANSACTION_ERROR: 29189
[  702.658770] binder: undelivered TRANSACTION_ERROR: 29189
[  702.664530] binder: undelivered TRANSACTION_ERROR: 29189
[  702.671158] binder: undelivered TRANSACTION_ERROR: 29189
[  702.703803] binder: 7760:7763 transaction failed 29189/-22, size 40-8 line 3011
[  702.708227] binder_alloc: 7756: binder_alloc_buf, no vma
[  702.708261] binder: 7758:7765 transaction failed 29189/-3, size 40-8 line 3134
[  702.708892] binder_alloc: 7756: binder_alloc_buf, no vma
[  702.708927] binder: 7756:7770 transaction failed 29189/-3, size 40-16 line 3134
[  702.709593] binder: BINDER_SET_CONTEXT_MGR already set
[  702.709600] binder: 7764:7766 ioctl 40046207 0 returned -16
[  702.710379] binder_alloc: 7756: binder_alloc_buf, no vma
[  702.710417] binder: 7764:7766 transaction failed 29189/-3, size 40-16 line 3134
[  702.715087] binder_alloc: 7756: binder_alloc_buf, no vma
[  702.715123] binder: 7762:7767 transaction failed 29189/-3, size 40-8 line 3134
[  702.716675] binder_alloc: 7756: binder_alloc_buf, no vma
[  702.716710] binder: 7759:7768 transaction failed 29189/-3, size 40-8 line 3134
[  702.721399] binder_alloc: 7756: binder_alloc_buf, no vma
[  702.721435] binder: 7757:7769 transaction failed 29189/-3, size 40-8 line 3134
[  702.725504] binder_alloc: 7756: binder_alloc_buf, no vma
[  702.725540] binder: 7761:7771 transaction failed 29189/-3, size 40-16 line 3134
[  702.764597] binder: undelivered TRANSACTION_ERROR: 29189
[  702.773952] binder: undelivered TRANSACTION_ERROR: 29189
[  702.821592] binder: undelivered TRANSACTION_ERROR: 29189
[  702.824903] binder: undelivered TRANSACTION_ERROR: 29189
[  702.835200] binder_alloc: 7801: binder_alloc_buf, no vma
[  702.835237] binder: 7801:7808 transaction failed 29189/-3, size 40-16 line 3134
[  702.838056] binder: undelivered TRANSACTION_ERROR: 29189
[  702.844573] binder: undelivered TRANSACTION_ERROR: 29189
[  702.852750] binder_alloc: 7801: binder_alloc_buf, no vma
[  702.852795] binder: 7800:7804 transaction failed 29189/-3, size 40-8 line 3134
[  702.858634] binder: undelivered TRANSACTION_ERROR: 29189
[  702.860463] binder: undelivered TRANSACTION_ERROR: 29189
[  702.873937] binder_alloc: 7801: binder_alloc_buf, no vma
[  702.873978] binder: 7813:7816 transaction failed 29189/-3, size 40-8 line 3134
[  702.876052] binder_alloc: 7801: binder_alloc_buf, no vma
[  702.876089] binder: 7814:7817 transaction failed 29189/-3, size 40-8 line 3134
[  702.877304] binder_alloc: 7801: binder_alloc_buf, no vma
[  702.877341] binder: 7815:7818 transaction failed 29189/-3, size 40-8 line 3134
[  702.896172] binder: BINDER_SET_CONTEXT_MGR already set
[  702.896179] binder: 7809:7812 ioctl 40046207 0 returned -16
[  702.896934] binder_alloc: 7801: binder_alloc_buf, no vma
[  702.896971] binder: 7809:7812 transaction failed 29189/-3, size 40-16 line 3134
[  702.901271] binder: undelivered TRANSACTION_ERROR: 29189
[  702.914011] binder: 7819:7825 transaction failed 29189/-22, size 40-16 line 3011
[  702.938384] binder: 7827:7839 transaction failed 29189/-22, size 40-8 line 3011
[  702.939883] binder: undelivered TRANSACTION_ERROR: 29189
[  702.945530] binder_alloc: 7835: binder_alloc_buf, no vma
[  702.945564] binder: 7835:7841 transaction failed 29189/-3, size 40-16 line 3134
[  702.965467] binder: undelivered TRANSACTION_ERROR: 29189
[  702.982625] binder: undelivered TRANSACTION_ERROR: 29189
[  702.998171] binder: undelivered TRANSACTION_ERROR: 29189
[  702.998259] binder: undelivered TRANSACTION_ERROR: 29189
[  702.998298] binder: undelivered TRANSACTION_ERROR: 29189
[  703.021722] binder: undelivered TRANSACTION_ERROR: 29189
[  703.027369] binder: undelivered TRANSACTION_ERROR: 29189
[  703.055105] binder: 7854:7861 transaction failed 29189/-22, size 40-8 line 3011
[  703.061523] binder: 7858:7862 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.061607] binder: 7858:7862 transaction failed 29201/-22, size 40-16 line 3197
[  703.067312] binder: 7859:7866 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.067684] binder: BINDER_SET_CONTEXT_MGR already set
[  703.067691] binder: 7855:7867 ioctl 40046207 0 returned -16
[  703.068983] binder: 7859:7866 transaction failed 29201/-22, size 40-16 line 3197
[  703.071016] binder: 7855:7867 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.071086] binder: 7855:7867 transaction failed 29201/-22, size 40-16 line 3197
[  703.106672] binder: release 7856:7864 transaction 40273 out, still active
[  703.106677] binder: unexpected work type, 4, not freed
[  703.106679] binder: undelivered TRANSACTION_COMPLETE
[  703.139523] binder: undelivered TRANSACTION_ERROR: 29201
[  703.139558] binder: undelivered TRANSACTION_ERROR: 29189
[  703.163254] binder: undelivered TRANSACTION_ERROR: 29201
[  703.168927] binder: release 7857:7863 transaction 40279 out, still active
[  703.168931] binder: unexpected work type, 4, not freed
[  703.168933] binder: undelivered TRANSACTION_COMPLETE
[  703.182063] binder: release 7853:7865 transaction 40287 out, still active
[  703.182067] binder: unexpected work type, 4, not freed
[  703.182069] binder: undelivered TRANSACTION_COMPLETE
[  703.187422] binder: undelivered TRANSACTION_ERROR: 29201
[  703.187717] binder: send failed reply for transaction 40273, target dead
[  703.187731] binder: send failed reply for transaction 40279, target dead
[  703.187743] binder: send failed reply for transaction 40287, target dead
[  703.187757] binder: send failed reply for transaction 40291 to 7860:7868
[  703.187774] binder: send failed reply for transaction 40294 to 7889:7901
[  703.187790] binder: send failed reply for transaction 40297 to 7894:7898
[  703.206310] binder_alloc: 7897: binder_alloc_buf, no vma
[  703.206346] binder: 7897:7902 transaction failed 29189/-3, size 40-16 line 3134
[  703.207049] binder_alloc: 7897: binder_alloc_buf, no vma
[  703.207088] binder: 7905:7908 transaction failed 29189/-3, size 40-16 line 3134
[  703.213425] binder: undelivered TRANSACTION_COMPLETE
[  703.213439] binder: undelivered TRANSACTION_ERROR: 29189
[  703.215263] binder: BINDER_SET_CONTEXT_MGR already set
[  703.215271] binder: 7909:7912 ioctl 40046207 0 returned -16
[  703.216379] binder_alloc: 7897: binder_alloc_buf, no vma
[  703.216418] binder: 7909:7912 transaction failed 29189/-3, size 40-16 line 3134
[  703.221526] binder: undelivered TRANSACTION_COMPLETE
[  703.221541] binder: undelivered TRANSACTION_ERROR: 29189
[  703.222459] binder_alloc: 7897: binder_alloc_buf, no vma
[  703.222491] binder: 7903:7915 transaction failed 29189/-3, size 40-8 line 3134
[  703.234792] binder_alloc: 7897: binder_alloc_buf, no vma
[  703.234832] binder: 7910:7913 transaction failed 29189/-3, size 40-8 line 3134
[  703.260399] binder: undelivered TRANSACTION_COMPLETE
[  703.260413] binder: undelivered TRANSACTION_ERROR: 29189
[  703.266462] binder: undelivered TRANSACTION_ERROR: 29189
[  703.279338] binder: undelivered TRANSACTION_ERROR: 29189
[  703.298482] binder: undelivered TRANSACTION_ERROR: 29189
[  703.307963] binder: undelivered TRANSACTION_ERROR: 29189
[  703.308472] binder: undelivered TRANSACTION_ERROR: 29189
[  703.342984] binder_alloc: 7937: binder_alloc_buf, no vma
[  703.343024] binder: 7937:7941 transaction failed 29189/-3, size 40-16 line 3134
[  703.343331] binder_alloc: 7937: binder_alloc_buf, no vma
[  703.343368] binder: 7942:7945 transaction failed 29189/-3, size 40-8 line 3134
[  703.345689] binder_alloc: 7937: binder_alloc_buf, no vma
[  703.345726] binder: 7936:7939 transaction failed 29189/-3, size 40-16 line 3134
[  703.356286] binder_alloc: 7937: binder_alloc_buf, no vma
[  703.356322] binder: 7935:7950 transaction failed 29189/-3, size 40-8 line 3134
[  703.356515] binder: BINDER_SET_CONTEXT_MGR already set
[  703.356521] binder: 7944:7949 ioctl 40046207 0 returned -16
[  703.357375] binder_alloc: 7937: binder_alloc_buf, no vma
[  703.357410] binder: 7944:7949 transaction failed 29189/-3, size 40-16 line 3134
[  703.362331] binder_alloc: 7937: binder_alloc_buf, no vma
[  703.362368] binder: 7940:7946 transaction failed 29189/-3, size 40-8 line 3134
[  703.363615] binder_alloc: 7937: binder_alloc_buf, no vma
[  703.363654] binder: 7943:7948 transaction failed 29189/-3, size 40-8 line 3134
[  703.369441] binder_alloc: 7937: binder_alloc_buf, no vma
[  703.369478] binder: 7938:7947 transaction failed 29189/-3, size 40-8 line 3134
[  703.391264] binder: undelivered TRANSACTION_ERROR: 29189
[  703.418731] binder: undelivered TRANSACTION_ERROR: 29189
[  703.434184] binder_alloc: 7969: binder_alloc_buf, no vma
[  703.434229] binder: 7969:7974 transaction failed 29189/-3, size 40-16 line 3134
[  703.450565] binder: undelivered TRANSACTION_ERROR: 29189
[  703.450649] binder: undelivered TRANSACTION_ERROR: 29189
[  703.450734] binder: undelivered TRANSACTION_ERROR: 29189
[  703.476100] binder: undelivered TRANSACTION_ERROR: 29189
[  703.483245] binder_alloc: 7969: binder_alloc_buf, no vma
[  703.483276] binder: 7985:7990 transaction failed 29189/-3, size 40-8 line 3134
[  703.493402] binder: undelivered TRANSACTION_ERROR: 29189
[  703.496135] binder: 7983:7989 transaction failed 29189/-22, size 40-16 line 3011
[  703.500029] binder: undelivered TRANSACTION_ERROR: 29189
[  703.500697] binder: 7978:7988 transaction failed 29189/-22, size 40-8 line 3011
[  703.510379] binder: undelivered TRANSACTION_ERROR: 29189
[  703.514318] binder: 7986:7993 transaction failed 29189/-22, size 40-8 line 3011
[  703.529724] binder: 7991:7994 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.529812] binder: 7991:7994 transaction failed 29201/-22, size 40-16 line 3197
[  703.546696] binder: BINDER_SET_CONTEXT_MGR already set
[  703.546703] binder: 7997:8003 ioctl 40046207 0 returned -16
[  703.547579] binder: 7997:8003 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.547668] binder: 7997:8003 transaction failed 29201/-22, size 40-16 line 3197
[  703.551959] binder: undelivered TRANSACTION_ERROR: 29189
[  703.556169] binder: undelivered TRANSACTION_ERROR: 29189
[  703.558021] binder: BINDER_SET_CONTEXT_MGR already set
[  703.558028] binder: 8000:8009 ioctl 40046207 0 returned -16
[  703.558883] binder: 8000:8009 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.558970] binder: 8000:8009 transaction failed 29201/-22, size 40-16 line 3197
[  703.579671] binder: undelivered TRANSACTION_ERROR: 29201
[  703.598953] binder: undelivered TRANSACTION_ERROR: 29189
[  703.618344] binder: undelivered TRANSACTION_ERROR: 29189
[  703.635005] binder: undelivered TRANSACTION_ERROR: 29201
[  703.635062] binder: send failed reply for transaction 40331 to 8004:8012
[  703.647886] binder: undelivered TRANSACTION_ERROR: 29201
[  703.651555] binder: undelivered TRANSACTION_COMPLETE
[  703.651568] binder: undelivered TRANSACTION_ERROR: 29189
[  703.686022] binder: 8029:8037 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.686101] binder: 8029:8037 transaction failed 29201/-22, size 40-16 line 3197
[  703.686516] binder: BINDER_SET_CONTEXT_MGR already set
[  703.686524] binder: 8026:8039 ioctl 40046207 0 returned -16
[  703.687448] binder: 8026:8039 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.691584] binder: 8026:8039 transaction failed 29201/-22, size 40-16 line 3197
[  703.692009] binder: 8030:8034 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.692099] binder: 8030:8034 transaction failed 29201/-22, size 40-16 line 3197
[  703.696952] binder: BINDER_SET_CONTEXT_MGR already set
[  703.696959] binder: 8031:8036 ioctl 40046207 0 returned -16
[  703.698413] binder: 8031:8036 got transaction with invalid offset (0, min 24 max 40) or object.
[  703.698576] binder: 8031:8036 transaction failed 29201/-22, size 40-16 line 3197
[  703.742341] binder: release 8027:8035 transaction 40350 out, still active
[  703.742347] binder: unexpected work type, 4, not freed
[  703.742349] binder: undelivered TRANSACTION_COMPLETE
[  703.751414] binder: undelivered TRANSACTION_ERROR: 29201
[  703.774348] binder: release 8028:8038 transaction 40342 out, still active
[  703.774353] binder: unexpected work type, 4, not freed
[  703.774355] binder: undelivered TRANSACTION_COMPLETE
[  703.800139] binder: release 8032:8033 transaction 40336 out, still active
[  703.800144] binder: unexpected work type, 4, not freed
[  703.800146] binder: undelivered TRANSACTION_COMPLETE
[  703.809086] binder: undelivered TRANSACTION_ERROR: 29201
[  703.817531] binder: undelivered TRANSACTION_ERROR: 29201
[  703.817617] binder: undelivered TRANSACTION_ERROR: 29201
[  703.817745] binder: send failed reply for transaction 40336, target dead
[  703.817759] binder: send failed reply for transaction 40342, target dead
[  703.817772] binder: send failed reply for transaction 40350, target dead
[  703.817787] binder: send failed reply for transaction 40356 to 8040:8044
[  703.817804] binder: send failed reply for transaction 40359 to 8062:8065
[  703.828165] binder: 8072:8077 transaction failed 29189/-22, size 40-8 line 3011
[  703.833392] binder_alloc: 8064: binder_alloc_buf, no vma
[  703.833431] binder: 8064:8070 transaction failed 29189/-3, size 40-16 line 3134
[  703.836210] binder: undelivered TRANSACTION_COMPLETE
[  703.836224] binder: undelivered TRANSACTION_ERROR: 29189
[  703.845117] binder: undelivered TRANSACTION_COMPLETE
[  703.845131] binder: undelivered TRANSACTION_ERROR: 29189
[  703.862619] binder: BINDER_SET_CONTEXT_MGR already set
[  703.862626] binder: 8084:8087 ioctl 40046207 0 returned -16
[  703.862732] binder: BINDER_SET_CONTEXT_MGR already set
[  703.862738] binder: 8078:8085 ioctl 40046207 0 returned -16
[  703.863663] binder_alloc: 8064: binder_alloc_buf, no vma
[  703.863669] binder_alloc: 8064: binder_alloc_buf, no vma
[  703.863702] binder: 8084:8087 transaction failed 29189/-3, size 40-16 line 3134
[  703.863709] binder: 8078:8085 transaction failed 29189/-3, size 40-16 line 3134
[  703.867981] binder_alloc: 8064: binder_alloc_buf, no vma
[  703.868019] binder: 8081:8088 transaction failed 29189/-3, size 40-16 line 3134
[  703.873651] binder: undelivered TRANSACTION_ERROR: 29189
[  703.873849] binder: 8082:8086 transaction failed 29189/-22, size 40-8 line 3011
[  703.896558] binder: undelivered TRANSACTION_ERROR: 29189
[  703.914975] binder: undelivered TRANSACTION_ERROR: 29189
[  703.938976] binder: undelivered TRANSACTION_ERROR: 29189
[  703.942243] binder: undelivered TRANSACTION_ERROR: 29189
[  703.955728] binder: undelivered TRANSACTION_ERROR: 29189
[  703.982625] binder_alloc: 8107: binder_alloc_buf, no vma
[  703.982666] binder: 8107:8111 transaction failed 29189/-3, size 40-16 line 3134
[  703.990949] binder_alloc: 8107: binder_alloc_buf, no vma
[  703.990987] binder: 8110:8114 transaction failed 29189/-3, size 40-8 line 3134
[  703.999549] binder_alloc: 8107: binder_alloc_buf, no vma
[  703.999588] binder: 8106:8119 transaction failed 29189/-3, size 40-8 line 3134
[  703.999767] binder: BINDER_SET_CONTEXT_MGR already set
[  703.999774] binder: 8105:8120 ioctl 40046207 0 returned -16
[  704.000317] binder_alloc: 8107: binder_alloc_buf, no vma
[  704.000356] binder: 8109:8116 transaction failed 29189/-3, size 40-8 line 3134
[  704.000867] binder_alloc: 8107: binder_alloc_buf, no vma
[  704.000904] binder: 8105:8120 transaction failed 29189/-3, size 40-16 line 3134
[  704.005497] binder: BINDER_SET_CONTEXT_MGR already set
[  704.005504] binder: 8112:8118 ioctl 40046207 0 returned -16
[  704.006900] binder_alloc: 8107: binder_alloc_buf, no vma
[  704.006938] binder: 8112:8118 transaction failed 29189/-3, size 40-16 line 3134
[  704.011140] binder_alloc: 8107: binder_alloc_buf, no vma
[  704.011182] binder: 8113:8121 transaction failed 29189/-3, size 40-16 line 3134
[  704.031485] binder: undelivered TRANSACTION_ERROR: 29189
[  704.065051] binder: undelivered TRANSACTION_ERROR: 29189
[  704.071294] binder_alloc: 8141: binder_alloc_buf, no vma
[  704.071330] binder: 8141:8145 transaction failed 29189/-3, size 40-16 line 3134
[  704.105943] binder: undelivered TRANSACTION_ERROR: 29189
[  704.116979] binder: undelivered TRANSACTION_ERROR: 29189
[  704.123114] binder: undelivered TRANSACTION_ERROR: 29189
[  704.134781] binder: undelivered TRANSACTION_ERROR: 29189
[  704.140282] binder: 8150:8157 transaction failed 29189/-22, size 40-8 line 3011
[  704.142966] binder: undelivered TRANSACTION_ERROR: 29189
[  704.152915] binder: undelivered TRANSACTION_ERROR: 29189
[  704.162115] binder: 8158:8164 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.162211] binder: 8158:8164 transaction failed 29201/-22, size 40-16 line 3197
[  704.167517] binder: BINDER_SET_CONTEXT_MGR already set
[  704.167526] binder: 8160:8166 ioctl 40046207 0 returned -16
[  704.168503] binder: 8160:8166 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.168587] binder: 8160:8166 transaction failed 29201/-22, size 40-16 line 3197
[  704.172345] binder: BINDER_SET_CONTEXT_MGR already set
[  704.172352] binder: 8162:8167 ioctl 40046207 0 returned -16
[  704.173275] binder: 8162:8167 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.173358] binder: 8162:8167 transaction failed 29201/-22, size 40-16 line 3197
[  704.191074] binder: 8169:8173 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.191166] binder: 8169:8173 transaction failed 29201/-22, size 40-16 line 3197
[  704.214346] binder: undelivered TRANSACTION_ERROR: 29201
[  704.242563] binder: BINDER_SET_CONTEXT_MGR already set
[  704.242570] binder: 8191:8196 ioctl 40046207 0 returned -16
[  704.248528] binder: undelivered TRANSACTION_ERROR: 29189
[  704.248778] binder: 8191:8196 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.248867] binder: 8191:8196 transaction failed 29201/-22, size 40-16 line 3197
[  704.258482] binder: undelivered TRANSACTION_ERROR: 29201
[  704.258557] binder: send failed reply for transaction 40390 to 8159:8165
[  704.258575] binder: send failed reply for transaction 40396 to 8170:8183
[  704.271951] binder: undelivered TRANSACTION_ERROR: 29201
[  704.286055] binder: undelivered TRANSACTION_ERROR: 29201
[  704.300510] binder: undelivered TRANSACTION_COMPLETE
[  704.300524] binder: undelivered TRANSACTION_ERROR: 29189
[  704.314443] binder: undelivered TRANSACTION_ERROR: 29201
[  704.317216] binder: undelivered TRANSACTION_COMPLETE
[  704.317229] binder: undelivered TRANSACTION_ERROR: 29189
[  704.344463] binder: 8209:8217 transaction failed 29189/-22, size 40-16 line 3011
[  704.348123] binder_alloc: 8207: binder_alloc_buf, no vma
[  704.348160] binder: 8207:8215 transaction failed 29189/-3, size 40-16 line 3134
[  704.351205] binder: BINDER_SET_CONTEXT_MGR already set
[  704.351212] binder: 8208:8214 ioctl 40046207 0 returned -16
[  704.352000] binder_alloc: 8207: binder_alloc_buf, no vma
[  704.352036] binder: 8208:8214 transaction failed 29189/-3, size 40-16 line 3134
[  704.354498] binder_alloc: 8207: binder_alloc_buf, no vma
[  704.354536] binder: 8212:8216 transaction failed 29189/-3, size 40-8 line 3134
[  704.356805] binder_alloc: 8207: binder_alloc_buf, no vma
[  704.356841] binder: 8206:8218 transaction failed 29189/-3, size 40-8 line 3134
[  704.359569] binder: BINDER_SET_CONTEXT_MGR already set
[  704.359577] binder: 8210:8219 ioctl 40046207 0 returned -16
[  704.360339] binder_alloc: 8207: binder_alloc_buf, no vma
[  704.360377] binder: 8210:8219 transaction failed 29189/-3, size 40-16 line 3134
[  704.378023] binder_alloc: 8207: binder_alloc_buf, no vma
[  704.378061] binder: 8211:8226 transaction failed 29189/-3, size 40-8 line 3134
[  704.394727] binder: undelivered TRANSACTION_ERROR: 29189
[  704.429497] binder: undelivered TRANSACTION_ERROR: 29189
[  704.443646] binder_alloc: 8242: binder_alloc_buf, no vma
[  704.443684] binder: 8242:8249 transaction failed 29189/-3, size 40-16 line 3134
[  704.454531] binder: undelivered TRANSACTION_ERROR: 29189
[  704.454601] binder: undelivered TRANSACTION_ERROR: 29189
[  704.481358] binder: undelivered TRANSACTION_ERROR: 29189
[  704.481402] binder: undelivered TRANSACTION_ERROR: 29189
[  704.495243] binder: 8252:8257 transaction failed 29189/-22, size 40-8 line 3011
[  704.497954] binder: undelivered TRANSACTION_ERROR: 29189
[  704.503163] binder: undelivered TRANSACTION_ERROR: 29189
[  704.507458] binder: BINDER_SET_CONTEXT_MGR already set
[  704.507465] binder: 8258:8264 ioctl 40046207 0 returned -16
[  704.508531] binder: 8256:8262 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.508621] binder: 8256:8262 transaction failed 29201/-22, size 40-16 line 3197
[  704.508799] binder: 8258:8264 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.508879] binder: 8258:8264 transaction failed 29201/-22, size 40-16 line 3197
[  704.515526] binder: BINDER_SET_CONTEXT_MGR already set
[  704.515534] binder: 8259:8263 ioctl 40046207 0 returned -16
[  704.516847] binder: 8259:8263 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.516935] binder: 8259:8263 transaction failed 29201/-22, size 40-16 line 3197
[  704.560679] binder: undelivered TRANSACTION_ERROR: 29189
[  704.565613] binder: undelivered TRANSACTION_ERROR: 29201
[  704.604452] binder: release 8255:8261 transaction 40421 out, still active
[  704.604457] binder: unexpected work type, 4, not freed
[  704.604459] binder: undelivered TRANSACTION_COMPLETE
[  704.604561] binder: undelivered TRANSACTION_ERROR: 29201
[  704.604635] binder: send failed reply for transaction 40421, target dead
[  704.604651] binder: send failed reply for transaction 40426 to 8270:8284
[  704.604783] binder: undelivered TRANSACTION_ERROR: 29201
[  704.609776] binder: undelivered TRANSACTION_COMPLETE
[  704.609790] binder: undelivered TRANSACTION_ERROR: 29189
[  704.651770] binder: 8294:8298 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.651855] binder: 8294:8298 transaction failed 29201/-22, size 40-16 line 3197
[  704.654602] binder: BINDER_SET_CONTEXT_MGR already set
[  704.654609] binder: 8291:8299 ioctl 40046207 0 returned -16
[  704.655429] binder: 8291:8299 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.655463] binder: BINDER_SET_CONTEXT_MGR already set
[  704.655469] binder: 8295:8300 ioctl 40046207 0 returned -16
[  704.655518] binder: 8291:8299 transaction failed 29201/-22, size 40-16 line 3197
[  704.656726] binder: 8295:8300 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.656812] binder: 8295:8300 transaction failed 29201/-22, size 40-16 line 3197
[  704.661209] binder: 8296:8301 got transaction with invalid offset (0, min 0 max 0) or object.
[  704.661263] binder: 8296:8301 transaction failed 29201/-22, size 0-8 line 3197
[  704.664632] binder: 8290:8303 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.664715] binder: 8290:8303 transaction failed 29201/-22, size 40-16 line 3197
[  704.697554] binder: undelivered TRANSACTION_ERROR: 29201
[  704.733364] binder: release 8292:8302 transaction 40442 out, still active
[  704.733368] binder: unexpected work type, 4, not freed
[  704.733371] binder: undelivered TRANSACTION_COMPLETE
[  704.743038] binder: BINDER_SET_CONTEXT_MGR already set
[  704.743046] binder: 8326:8332 ioctl 40046207 0 returned -16
[  704.744619] binder: 8326:8332 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.744708] binder: 8326:8332 transaction failed 29201/-22, size 40-16 line 3197
[  704.755778] binder: undelivered TRANSACTION_ERROR: 29201
[  704.755890] binder: send failed reply for transaction 40433 to 8293:8297
[  704.755905] binder: send failed reply for transaction 40442, target dead
[  704.755919] binder: send failed reply for transaction 40449 to 8304:8312
[  704.761859] binder: undelivered TRANSACTION_ERROR: 29201
[  704.773855] binder: 8336:8338 transaction failed 29189/-22, size 40-8 line 3011
[  704.774077] binder: undelivered TRANSACTION_COMPLETE
[  704.774091] binder: undelivered TRANSACTION_ERROR: 29189
[  704.782635] binder: undelivered TRANSACTION_ERROR: 29201
[  704.801302] binder: undelivered TRANSACTION_ERROR: 29201
[  704.804439] binder: 8342:8347 transaction failed 29189/-22, size 40-16 line 3011
[  704.815542] binder: undelivered TRANSACTION_COMPLETE
[  704.815556] binder: undelivered TRANSACTION_ERROR: 29189
[  704.816936] binder: undelivered TRANSACTION_ERROR: 29201
[  704.824863] binder: 8346:8350 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.824955] binder: 8346:8350 transaction failed 29201/-22, size 40-16 line 3197
[  704.831778] binder: BINDER_SET_CONTEXT_MGR already set
[  704.831786] binder: 8340:8345 ioctl 40046207 0 returned -16
[  704.832732] binder: 8340:8345 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.832888] binder: 8340:8345 transaction failed 29201/-22, size 40-16 line 3197
[  704.837884] binder: BINDER_SET_CONTEXT_MGR already set
[  704.837891] binder: 8352:8358 ioctl 40046207 0 returned -16
[  704.838880] binder: 8352:8358 got transaction with invalid offset (0, min 24 max 40) or object.
[  704.838968] binder: 8352:8358 transaction failed 29201/-22, size 40-16 line 3197
[  704.850843] binder: undelivered TRANSACTION_ERROR: 29189
[  704.854533] binder: 8356:8362 got transaction with invalid offset (0, min 0 max 0) or object.
[  704.854578] binder: 8356:8362 transaction failed 29201/-22, size 0-8 line 3197
[  704.886585] binder: undelivered TRANSACTION_ERROR: 29201
[  704.895274] binder: undelivered TRANSACTION_ERROR: 29189
[  704.924399] binder: release 8344:8348 transaction 40461 out, still active
[  704.924403] binder: unexpected work type, 4, not freed
[  704.924405] binder: undelivered TRANSACTION_COMPLETE
[  704.928060] binder: undelivered TRANSACTION_ERROR: 29201
[  704.936716] binder: undelivered TRANSACTION_ERROR: 29201
[  704.937568] binder: send failed reply for transaction 40461, target dead
[  704.946545] binder: undelivered TRANSACTION_ERROR: 29201
[  704.969857] binder_alloc: 8378: binder_alloc_buf, no vma
[  704.969942] binder: 8378:8382 transaction failed 29189/-3, size 40-16 line 3134
[  704.976492] binder: BINDER_SET_CONTEXT_MGR already set
[  704.976502] binder: 8379:8384 ioctl 40046207 0 returned -16
[  704.977397] binder_alloc: 8378: binder_alloc_buf, no vma
[  704.977435] binder: 8379:8384 transaction failed 29189/-3, size 40-16 line 3134
[  704.983822] binder_alloc: 8378: binder_alloc_buf, no vma
[  704.983861] binder: 8385:8389 transaction failed 29189/-3, size 0-8 line 3134
[  704.986503] binder: BINDER_SET_CONTEXT_MGR already set
[  704.986510] binder: 8383:8390 ioctl 40046207 0 returned -16
[  704.989298] binder_alloc: 8378: binder_alloc_buf, no vma
[  704.989335] binder: 8383:8390 transaction failed 29189/-3, size 40-16 line 3134
[  704.990884] binder_alloc: 8378: binder_alloc_buf, no vma
[  704.990922] binder: 8381:8386 transaction failed 29189/-3, size 40-16 line 3134
[  704.992246] binder_alloc: 8378: binder_alloc_buf, no vma
[  704.992283] binder: 8388:8391 transaction failed 29189/-3, size 40-8 line 3134
[  704.999753] binder_alloc: 8378: binder_alloc_buf, no vma
[  704.999789] binder: 8380:8393 transaction failed 29189/-3, size 40-8 line 3134
[  705.004745] binder: BINDER_SET_CONTEXT_MGR already set
[  705.004752] binder: 8387:8395 ioctl 40046207 0 returned -16
[  705.005890] binder_alloc: 8378: binder_alloc_buf, no vma
[  705.005929] binder: 8387:8395 transaction failed 29189/-3, size 40-16 line 3134
[  705.031510] binder: undelivered TRANSACTION_ERROR: 29189
[  705.072557] binder: undelivered TRANSACTION_ERROR: 29189
[  705.092750] binder: undelivered TRANSACTION_ERROR: 29189
[  705.092833] binder: undelivered TRANSACTION_ERROR: 29189
[  705.102693] binder: undelivered TRANSACTION_ERROR: 29189
[  705.110465] binder: undelivered TRANSACTION_ERROR: 29189
[  705.115742] binder: undelivered TRANSACTION_ERROR: 29189
[  705.121839] binder_alloc: 8418: binder_alloc_buf, no vma
[  705.121884] binder: 8418:8425 transaction failed 29189/-3, size 40-16 line 3134
[  705.122438] binder: BINDER_SET_CONTEXT_MGR already set
[  705.122445] binder: 8427:8431 ioctl 40046207 0 returned -16
[  705.123284] binder_alloc: 8418: binder_alloc_buf, no vma
[  705.123323] binder: 8427:8431 transaction failed 29189/-3, size 40-16 line 3134
[  705.127145] binder: undelivered TRANSACTION_ERROR: 29189
[  705.127474] binder_alloc: 8418: binder_alloc_buf, no vma
[  705.127511] binder: 8426:8432 transaction failed 29189/-3, size 40-8 line 3134
[  705.139313] binder_alloc: 8418: binder_alloc_buf, no vma
[  705.139354] binder: 8428:8430 transaction failed 29189/-3, size 40-8 line 3134
[  705.147050] binder: undelivered TRANSACTION_ERROR: 29189
[  705.163392] binder: 8433:8436 transaction failed 29189/-22, size 40-0 line 3011
[  705.164556] binder: undelivered TRANSACTION_ERROR: 29189
[  705.187695] binder: undelivered TRANSACTION_ERROR: 29189
[  705.195143] binder: undelivered TRANSACTION_ERROR: 29189
[  705.215121] binder: undelivered TRANSACTION_ERROR: 29189
[  705.248739] binder: 8448:8457 transaction failed 29189/-22, size 40-8 line 3011
[  705.249207] binder: 8447:8456 transaction failed 29189/-22, size 40-16 line 3011
[  705.250059] binder_alloc: 8450: binder_alloc_buf, no vma
[  705.250103] binder: 8450:8455 transaction failed 29189/-3, size 40-16 line 3134
[  705.253859] binder: BINDER_SET_CONTEXT_MGR already set
[  705.253866] binder: 8449:8461 ioctl 40046207 0 returned -16
[  705.257190] binder_alloc: 8450: binder_alloc_buf, no vma
[  705.257225] binder: 8449:8461 transaction failed 29189/-3, size 40-16 line 3134
[  705.258365] binder: BINDER_SET_CONTEXT_MGR already set
[  705.258371] binder: 8454:8458 ioctl 40046207 0 returned -16
[  705.258989] binder_alloc: 8450: binder_alloc_buf, no vma
[  705.259023] binder: 8451:8459 transaction failed 29189/-3, size 40-0 line 3134
[  705.259366] binder_alloc: 8450: binder_alloc_buf, no vma
[  705.259403] binder: 8454:8458 transaction failed 29189/-3, size 40-16 line 3134
[  705.260816] binder: BINDER_SET_CONTEXT_MGR already set
[  705.260823] binder: 8453:8460 ioctl 40046207 0 returned -16
[  705.262264] binder_alloc: 8450: binder_alloc_buf, no vma
[  705.262301] binder: 8453:8460 transaction failed 29189/-3, size 40-16 line 3134
[  705.274776] binder_alloc: 8450: binder_alloc_buf, no vma
[  705.274814] binder: 8452:8462 transaction failed 29189/-3, size 40-8 line 3134
[  705.296066] binder: undelivered TRANSACTION_ERROR: 29189
[  705.343265] binder_alloc: 8484: binder_alloc_buf, no vma
[  705.343307] binder: 8484:8489 transaction failed 29189/-3, size 40-16 line 3134
[  705.350023] binder: undelivered TRANSACTION_ERROR: 29189
[  705.364678] binder: undelivered TRANSACTION_ERROR: 29189
[  705.364765] binder: undelivered TRANSACTION_ERROR: 29189
[  705.364844] binder: undelivered TRANSACTION_ERROR: 29189
[  705.371564] binder: undelivered TRANSACTION_ERROR: 29189
[  705.374424] binder: undelivered TRANSACTION_ERROR: 29189
[  705.386998] binder: undelivered TRANSACTION_ERROR: 29189
[  705.395293] binder: BINDER_SET_CONTEXT_MGR already set
[  705.395301] binder: 8499:8502 ioctl 40046207 0 returned -16
[  705.396035] binder_alloc: 8484: binder_alloc_buf, no vma
[  705.396073] binder: 8499:8502 transaction failed 29189/-3, size 40-16 line 3134
[  705.404951] binder: undelivered TRANSACTION_ERROR: 29189
[  705.408537] binder: 8500:8503 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.408630] binder: 8500:8503 transaction failed 29201/-22, size 40-16 line 3197
[  705.431316] binder: 8496:8513 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.431404] binder: 8496:8513 transaction failed 29201/-22, size 40-16 line 3197
[  705.441983] binder: BINDER_SET_CONTEXT_MGR already set
[  705.441992] binder: 8498:8514 ioctl 40046207 0 returned -16
[  705.443117] binder: 8498:8514 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.443206] binder: 8498:8514 transaction failed 29201/-22, size 40-16 line 3197
[  705.443263] binder: BINDER_SET_CONTEXT_MGR already set
[  705.443270] binder: 8510:8520 ioctl 40046207 0 returned -16
[  705.444224] binder: 8510:8520 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.444313] binder: 8510:8520 transaction failed 29201/-22, size 40-16 line 3197
[  705.472993] binder: undelivered TRANSACTION_ERROR: 29201
[  705.489933] binder: undelivered TRANSACTION_ERROR: 29189
[  705.498185] binder: release 8501:8504 transaction 40502 out, still active
[  705.498189] binder: undelivered TRANSACTION_COMPLETE
[  705.504541] binder: undelivered TRANSACTION_ERROR: 29201
[  705.504593] binder: send failed reply for transaction 40502, target dead
[  705.504609] binder: send failed reply for transaction 40506 to 8506:8509
[  705.521631] binder_alloc: 8533: binder_alloc_buf, no vma
[  705.521671] binder: 8533:8537 transaction failed 29189/-3, size 40-16 line 3134
[  705.546762] binder: undelivered TRANSACTION_COMPLETE
[  705.546775] binder: undelivered TRANSACTION_ERROR: 29189
[  705.555402] binder: undelivered TRANSACTION_ERROR: 29189
[  705.556014] binder: undelivered TRANSACTION_ERROR: 29201
[  705.568126] binder: undelivered TRANSACTION_ERROR: 29201
[  705.568251] binder: 8541:8550 transaction failed 29189/-22, size 40-8 line 3011
[  705.588090] binder: 8544:8547 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.588178] binder: 8544:8547 transaction failed 29201/-22, size 40-16 line 3197
[  705.590410] binder: BINDER_SET_CONTEXT_MGR already set
[  705.590417] binder: 8552:8556 ioctl 40046207 0 returned -16
[  705.591240] binder: 8552:8556 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.591328] binder: 8552:8556 transaction failed 29201/-22, size 40-16 line 3197
[  705.594885] binder: 8554:8557 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.594974] binder: 8554:8557 transaction failed 29201/-22, size 40-16 line 3197
[  705.595356] binder: BINDER_SET_CONTEXT_MGR already set
[  705.595363] binder: 8543:8548 ioctl 40046207 0 returned -16
[  705.596424] binder: 8543:8548 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.596513] binder: 8543:8548 transaction failed 29201/-22, size 40-16 line 3197
[  705.639088] binder: undelivered TRANSACTION_ERROR: 29201
[  705.652357] binder: undelivered TRANSACTION_ERROR: 29189
[  705.653824] binder: release 8555:8558 transaction 40531 out, still active
[  705.653828] binder: unexpected work type, 4, not freed
[  705.653830] binder: undelivered TRANSACTION_COMPLETE
[  705.669844] binder: undelivered TRANSACTION_ERROR: 29201
[  705.678373] binder: undelivered TRANSACTION_ERROR: 29201
[  705.695334] binder: undelivered TRANSACTION_ERROR: 29201
[  705.695386] binder: send failed reply for transaction 40531, target dead
[  705.731686] binder: 8579:8586 transaction failed 29189/-22, size 40-16 line 3011
[  705.737289] binder: 8578:8587 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.737377] binder: 8578:8587 transaction failed 29201/-22, size 40-16 line 3197
[  705.738013] binder: BINDER_SET_CONTEXT_MGR already set
[  705.738020] binder: 8583:8588 ioctl 40046207 0 returned -16
[  705.738999] binder: 8583:8588 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.740761] binder: BINDER_SET_CONTEXT_MGR already set
[  705.740769] binder: 8577:8591 ioctl 40046207 0 returned -16
[  705.744716] binder: 8583:8588 transaction failed 29201/-22, size 40-16 line 3197
[  705.746639] binder: BINDER_SET_CONTEXT_MGR already set
[  705.746646] binder: 8584:8590 ioctl 40046207 0 returned -16
[  705.756454] binder: 8577:8591 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.756534] binder: 8577:8591 transaction failed 29201/-22, size 40-16 line 3197
[  705.760922] binder: 8584:8590 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.760994] binder: 8584:8590 transaction failed 29201/-22, size 40-16 line 3197
[  705.807095] binder: undelivered TRANSACTION_ERROR: 29201
[  705.827082] binder: release 8581:8592 transaction 40542 out, still active
[  705.827087] binder: unexpected work type, 4, not freed
[  705.827089] binder: undelivered TRANSACTION_COMPLETE
[  705.828854] binder: undelivered TRANSACTION_ERROR: 29201
[  705.833830] binder: undelivered TRANSACTION_ERROR: 29189
[  705.842935] binder: undelivered TRANSACTION_ERROR: 29201
[  705.843008] binder: send failed reply for transaction 40542, target dead
[  705.843023] binder: send failed reply for transaction 40545 to 8582:8589
[  705.864082] binder: undelivered TRANSACTION_COMPLETE
[  705.864095] binder: undelivered TRANSACTION_ERROR: 29189
[  705.878627] binder: undelivered TRANSACTION_ERROR: 29201
[  705.908172] binder: BINDER_SET_CONTEXT_MGR already set
[  705.908179] binder: 8625:8629 ioctl 40046207 0 returned -16
[  705.910202] binder: 8625:8629 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.910291] binder: 8625:8629 transaction failed 29201/-22, size 40-16 line 3197
[  705.911531] binder: 8627:8636 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.911620] binder: 8627:8636 transaction failed 29201/-22, size 40-16 line 3197
[  705.913678] binder: 8626:8632 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.913763] binder: 8626:8632 transaction failed 29201/-22, size 40-16 line 3197
[  705.921551] binder: BINDER_SET_CONTEXT_MGR already set
[  705.921559] binder: 8624:8634 ioctl 40046207 0 returned -16
[  705.923141] binder: BINDER_SET_CONTEXT_MGR already set
[  705.923149] binder: 8630:8637 ioctl 40046207 0 returned -16
[  705.942786] binder: 8624:8634 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.942874] binder: 8624:8634 transaction failed 29201/-22, size 40-16 line 3197
[  705.956735] binder: undelivered TRANSACTION_ERROR: 29201
[  705.974222] binder: 8630:8637 got transaction with invalid offset (0, min 24 max 40) or object.
[  705.974307] binder: 8630:8637 transaction failed 29201/-22, size 40-16 line 3197
[  706.005645] binder: undelivered TRANSACTION_ERROR: 29201
[  706.005719] binder: send failed reply for transaction 40564 to 8628:8633
[  706.005737] binder: send failed reply for transaction 40567 to 8623:8635
[  706.016142] binder: undelivered TRANSACTION_ERROR: 29201
[  706.025101] binder: undelivered TRANSACTION_COMPLETE
[  706.025117] binder: undelivered TRANSACTION_ERROR: 29189
[  706.025646] binder_alloc: 8655: binder_alloc_buf, no vma
[  706.025686] binder: 8655:8665 transaction failed 29189/-3, size 40-16 line 3134
[  706.034189] binder: undelivered TRANSACTION_ERROR: 29201
[  706.055531] binder: BINDER_SET_CONTEXT_MGR already set
[  706.055539] binder: 8669:8678 ioctl 40046207 0 returned -16
[  706.057721] binder_alloc: 8655: binder_alloc_buf, no vma
[  706.057759] binder: 8669:8678 transaction failed 29189/-3, size 40-16 line 3134
[  706.065799] binder_alloc: 8655: binder_alloc_buf, no vma
[  706.065837] binder: 8672:8679 transaction failed 29189/-3, size 40-8 line 3134
[  706.070434] binder: BINDER_SET_CONTEXT_MGR already set
[  706.070441] binder: 8675:8680 ioctl 40046207 0 returned -16
[  706.072598] binder_alloc: 8655: binder_alloc_buf, no vma
[  706.072632] binder: 8671:8677 transaction failed 29189/-3, size 40-16 line 3134
[  706.072776] binder: undelivered TRANSACTION_COMPLETE
[  706.072790] binder: undelivered TRANSACTION_ERROR: 29189
[  706.073866] binder_alloc: 8655: binder_alloc_buf, no vma
[  706.073904] binder: 8675:8680 transaction failed 29189/-3, size 40-16 line 3134
[  706.100035] binder: undelivered TRANSACTION_ERROR: 29189
[  706.110007] binder: 8687:8691 transaction failed 29189/-22, size 40-8 line 3011
[  706.116863] binder: undelivered TRANSACTION_ERROR: 29201
[  706.157611] binder_alloc: 8697: binder_alloc_buf, no vma
[  706.157645] binder: 8697:8703 transaction failed 29189/-3, size 40-16 line 3134
[  706.168971] binder_alloc: 8697: binder_alloc_buf, no vma
[  706.169011] binder: 8701:8705 transaction failed 29189/-3, size 40-16 line 3134
[  706.174689] binder: undelivered TRANSACTION_ERROR: 29189
[  706.175226] binder: undelivered TRANSACTION_ERROR: 29189
[  706.184859] binder: undelivered TRANSACTION_ERROR: 29189
[  706.204209] binder: undelivered TRANSACTION_ERROR: 29189
[  706.206977] binder: BINDER_SET_CONTEXT_MGR already set
[  706.206983] binder: 8716:8722 ioctl 40046207 0 returned -16
[  706.211896] binder: undelivered TRANSACTION_ERROR: 29189
[  706.215247] binder: undelivered TRANSACTION_ERROR: 29189
[  706.220726] binder: 8716:8722 transaction failed 29189/-22, size 40-16 line 3011
[  706.231972] binder: 8724:8729 transaction failed 29189/-22, size 40-8 line 3011
[  706.241187] binder: 8720:8730 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.241273] binder: 8720:8730 transaction failed 29201/-22, size 40-16 line 3197
[  706.268343] binder: undelivered TRANSACTION_ERROR: 29189
[  706.301355] binder: undelivered TRANSACTION_ERROR: 29189
[  706.323248] binder: release 8718:8727 transaction 40592 out, still active
[  706.323252] binder: unexpected work type, 4, not freed
[  706.323254] binder: undelivered TRANSACTION_COMPLETE
[  706.323339] binder: undelivered TRANSACTION_ERROR: 29201
[  706.323386] binder: send failed reply for transaction 40592, target dead
[  706.348373] binder: undelivered TRANSACTION_ERROR: 29189
[  706.375054] binder: 8749:8752 transaction failed 29189/-22, size 40-16 line 3011
[  706.382385] binder_alloc: 8750: binder_alloc_buf, no vma
[  706.382423] binder: 8750:8757 transaction failed 29189/-3, size 40-16 line 3134
[  706.384322] binder: BINDER_SET_CONTEXT_MGR already set
[  706.384329] binder: 8755:8760 ioctl 40046207 0 returned -16
[  706.384977] binder: BINDER_SET_CONTEXT_MGR already set
[  706.384984] binder: 8748:8758 ioctl 40046207 0 returned -16
[  706.385789] binder_alloc: 8750: binder_alloc_buf, no vma
[  706.385827] binder: 8748:8758 transaction failed 29189/-3, size 40-16 line 3134
[  706.388894] binder_alloc: 8750: binder_alloc_buf, no vma
[  706.388930] binder: 8756:8761 transaction failed 29189/-3, size 40-8 line 3134
[  706.389046] binder_alloc: 8750: binder_alloc_buf, no vma
[  706.389081] binder: 8755:8760 transaction failed 29189/-3, size 40-16 line 3134
[  706.393412] binder_alloc: 8750: binder_alloc_buf, no vma
[  706.393447] binder: 8751:8759 transaction failed 29189/-3, size 40-16 line 3134
[  706.399978] binder_alloc: 8750: binder_alloc_buf, no vma
[  706.400017] binder: 8754:8764 transaction failed 29189/-3, size 40-8 line 3134
[  706.402051] binder_alloc: 8750: binder_alloc_buf, no vma
[  706.402089] binder: 8753:8763 transaction failed 29189/-3, size 0-8 line 3134
[  706.435061] binder: undelivered TRANSACTION_ERROR: 29189
[  706.480496] binder: undelivered TRANSACTION_ERROR: 29189
[  706.483138] binder: undelivered TRANSACTION_ERROR: 29189
[  706.502783] binder: undelivered TRANSACTION_ERROR: 29189
[  706.503310] binder: undelivered TRANSACTION_ERROR: 29189
[  706.503569] binder: undelivered TRANSACTION_ERROR: 29189
[  706.524192] binder: 8798:8800 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.524279] binder: 8798:8800 transaction failed 29201/-22, size 40-16 line 3197
[  706.531870] binder: BINDER_SET_CONTEXT_MGR already set
[  706.531877] binder: 8790:8795 ioctl 40046207 0 returned -16
[  706.532658] binder: 8790:8795 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.532866] binder: 8790:8795 transaction failed 29201/-22, size 40-16 line 3197
[  706.535522] binder: undelivered TRANSACTION_ERROR: 29189
[  706.540714] binder: undelivered TRANSACTION_ERROR: 29189
[  706.548586] binder: 8796:8801 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.548676] binder: 8796:8801 transaction failed 29201/-22, size 40-16 line 3197
[  706.558146] binder: undelivered TRANSACTION_ERROR: 29201
[  706.572081] binder: undelivered TRANSACTION_ERROR: 29201
[  706.589347] binder: undelivered TRANSACTION_ERROR: 29201
[  706.612044] binder: 8809:8815 transaction failed 29189/-22, size 40-8 line 3011
[  706.618493] binder: 8814:8821 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.618582] binder: 8814:8821 transaction failed 29201/-22, size 40-16 line 3197
[  706.624748] binder: BINDER_SET_CONTEXT_MGR already set
[  706.624756] binder: 8818:8822 ioctl 40046207 0 returned -16
[  706.625804] binder: 8818:8822 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.625875] binder: 8818:8822 transaction failed 29201/-22, size 40-16 line 3197
[  706.627099] binder: 8811:8820 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.627169] binder: 8811:8820 transaction failed 29201/-22, size 40-16 line 3197
[  706.628827] binder: 8813:8819 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.628898] binder: 8813:8819 transaction failed 29201/-22, size 40-16 line 3197
[  706.630447] binder: BINDER_SET_CONTEXT_MGR already set
[  706.630454] binder: 8817:8825 ioctl 40046207 0 returned -16
[  706.632436] binder: 8817:8825 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.632506] binder: 8817:8825 transaction failed 29201/-22, size 40-16 line 3197
[  706.637625] binder: 8816:8823 got transaction with invalid offset (0, min 0 max 0) or object.
[  706.637676] binder: 8816:8823 transaction failed 29201/-22, size 0-8 line 3197
[  706.691365] binder: undelivered TRANSACTION_ERROR: 29201
[  706.691420] binder: send failed reply for transaction 40620 to 8810:8812
[  706.702019] binder: undelivered TRANSACTION_ERROR: 29201
[  706.715577] binder: undelivered TRANSACTION_ERROR: 29189
[  706.721535] binder: undelivered TRANSACTION_ERROR: 29201
[  706.732453] binder: undelivered TRANSACTION_ERROR: 29201
[  706.753088] binder: undelivered TRANSACTION_ERROR: 29201
[  706.757506] binder: undelivered TRANSACTION_COMPLETE
[  706.757520] binder: undelivered TRANSACTION_ERROR: 29189
[  706.758175] binder: 8859:8862 transaction failed 29189/-22, size 40-16 line 3011
[  706.766660] binder_alloc: 8854: binder_alloc_buf, no vma
[  706.766699] binder: 8854:8861 transaction failed 29189/-3, size 40-16 line 3134
[  706.768933] binder: BINDER_SET_CONTEXT_MGR already set
[  706.768941] binder: 8853:8860 ioctl 40046207 0 returned -16
[  706.771472] binder_alloc: 8854: binder_alloc_buf, no vma
[  706.771510] binder: 8853:8860 transaction failed 29189/-3, size 40-16 line 3134
[  706.776070] binder: undelivered TRANSACTION_ERROR: 29201
[  706.776246] binder_alloc: 8854: binder_alloc_buf, no vma
[  706.776282] binder: 8858:8863 transaction failed 29189/-3, size 40-8 line 3134
[  706.785900] binder_alloc: 8854: binder_alloc_buf, no vma
[  706.785938] binder: 8865:8870 transaction failed 29189/-3, size 40-16 line 3134
[  706.802003] binder_alloc: 8854: binder_alloc_buf, no vma
[  706.802041] binder: 8866:8874 transaction failed 29189/-3, size 40-8 line 3134
[  706.803475] binder: undelivered TRANSACTION_ERROR: 29189
[  706.811826] binder: 8857:8864 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.811916] binder: 8857:8864 transaction failed 29201/-22, size 40-16 line 3197
[  706.838589] binder: 8875:8886 got transaction with invalid offset (0, min 0 max 0) or object.
[  706.838643] binder: 8875:8886 transaction failed 29201/-22, size 0-8 line 3197
[  706.841257] binder: undelivered TRANSACTION_ERROR: 29189
[  706.852775] binder: BINDER_SET_CONTEXT_MGR already set
[  706.852783] binder: 8883:8888 ioctl 40046207 0 returned -16
[  706.853855] binder: 8883:8888 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.853952] binder: 8883:8888 transaction failed 29201/-22, size 40-16 line 3197
[  706.871693] binder: BINDER_SET_CONTEXT_MGR already set
[  706.871700] binder: 8895:8897 ioctl 40046207 0 returned -16
[  706.872633] binder: 8895:8897 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.872999] binder: 8895:8897 transaction failed 29201/-22, size 40-16 line 3197
[  706.873358] binder: undelivered TRANSACTION_ERROR: 29189
[  706.886418] binder: undelivered TRANSACTION_ERROR: 29189
[  706.888820] binder: undelivered TRANSACTION_ERROR: 29189
[  706.914532] binder: 8903:8908 got transaction with invalid offset (0, min 24 max 40) or object.
[  706.914621] binder: 8903:8908 transaction failed 29201/-22, size 40-16 line 3197
[  706.922122] binder: undelivered TRANSACTION_ERROR: 29201
[  706.925887] binder: undelivered TRANSACTION_ERROR: 29189
[  706.932190] binder: undelivered TRANSACTION_ERROR: 29201
[  706.948266] binder: undelivered TRANSACTION_ERROR: 29201
[  706.958477] binder: undelivered TRANSACTION_ERROR: 29201
[  706.975470] binder: undelivered TRANSACTION_ERROR: 29201
[  707.008329] binder_alloc: 8921: binder_alloc_buf, no vma
[  707.008367] binder: 8921:8924 transaction failed 29189/-3, size 40-16 line 3134
[  707.015112] binder_alloc: 8921: binder_alloc_buf, no vma
[  707.015151] binder: 8919:8928 transaction failed 29189/-3, size 40-8 line 3134
[  707.015751] binder: BINDER_SET_CONTEXT_MGR already set
[  707.015758] binder: 8915:8925 ioctl 40046207 0 returned -16
[  707.015859] binder_alloc: 8921: binder_alloc_buf, no vma
[  707.015892] binder: 8916:8923 transaction failed 29189/-3, size 40-8 line 3134
[  707.016458] binder: BINDER_SET_CONTEXT_MGR already set
[  707.016465] binder: 8920:8927 ioctl 40046207 0 returned -16
[  707.016797] binder_alloc: 8921: binder_alloc_buf, no vma
[  707.016830] binder: 8915:8925 transaction failed 29189/-3, size 40-16 line 3134
[  707.017325] binder_alloc: 8921: binder_alloc_buf, no vma
[  707.018542] binder: 8920:8927 transaction failed 29189/-3, size 40-16 line 3134
[  707.022772] binder_alloc: 8921: binder_alloc_buf, no vma
[  707.022808] binder: 8917:8926 transaction failed 29189/-3, size 40-16 line 3134
[  707.023801] binder_alloc: 8921: binder_alloc_buf, no vma
[  707.023839] binder: 8918:8929 transaction failed 29189/-3, size 40-0 line 3134
[  707.053729] binder_alloc: 8921: binder_alloc_buf, no vma
[  707.053767] binder: 8922:8930 transaction failed 29189/-3, size 40-16 line 3134
[  707.067128] binder: undelivered TRANSACTION_ERROR: 29189
[  707.103226] binder_alloc: 8954: binder_alloc_buf, no vma
[  707.103261] binder: 8954:8960 transaction failed 29189/-3, size 40-16 line 3134
[  707.113291] binder: undelivered TRANSACTION_ERROR: 29189
[  707.115495] binder: undelivered TRANSACTION_ERROR: 29189
[  707.141805] binder: undelivered TRANSACTION_ERROR: 29189
[  707.145544] binder: undelivered TRANSACTION_ERROR: 29189
[  707.149049] binder: undelivered TRANSACTION_ERROR: 29189
[  707.149281] binder: undelivered TRANSACTION_ERROR: 29189
[  707.166014] binder_alloc: 8954: binder_alloc_buf, no vma
[  707.166053] binder: 8964:8967 transaction failed 29189/-3, size 40-8 line 3134
[  707.166270] binder: undelivered TRANSACTION_ERROR: 29189
[  707.170219] binder: undelivered TRANSACTION_ERROR: 29189
[  707.205253] binder: undelivered TRANSACTION_ERROR: 29189
[  707.206432] binder: 8962:8966 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.206542] binder: 8962:8966 transaction failed 29201/-22, size 40-16 line 3197
[  707.230622] binder: undelivered TRANSACTION_ERROR: 29201
[  707.258905] binder: 8978:8983 transaction failed 29189/-22, size 40-8 line 3011
[  707.260743] binder: 8975:8981 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.260825] binder: 8975:8981 transaction failed 29201/-22, size 40-16 line 3197
[  707.261407] binder: 8977:8979 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.261748] binder: 8977:8979 transaction failed 29201/-22, size 40-16 line 3197
[  707.274183] binder: BINDER_SET_CONTEXT_MGR already set
[  707.274191] binder: 8980:8986 ioctl 40046207 0 returned -16
[  707.276161] binder: 8980:8986 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.276245] binder: 8980:8986 transaction failed 29201/-22, size 40-16 line 3197
[  707.277312] binder: 8974:8988 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.277405] binder: 8974:8988 transaction failed 29201/-22, size 40-16 line 3197
[  707.282248] binder: BINDER_SET_CONTEXT_MGR already set
[  707.282255] binder: 8984:8991 ioctl 40046207 0 returned -16
[  707.283084] binder: 8984:8991 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.283435] binder: 8984:8991 transaction failed 29201/-22, size 40-16 line 3197
[  707.351317] binder: undelivered TRANSACTION_ERROR: 29201
[  707.372005] binder: undelivered TRANSACTION_ERROR: 29201
[  707.372061] binder: send failed reply for transaction 40680 to 8976:8985
[  707.372078] binder: send failed reply for transaction 40684 to 8982:8987
[  707.388043] binder: undelivered TRANSACTION_ERROR: 29201
[  707.392049] binder: undelivered TRANSACTION_ERROR: 29201
[  707.404006] binder: 9024:9025 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.404097] binder: 9024:9025 transaction failed 29201/-22, size 40-16 line 3197
[  707.405935] binder: undelivered TRANSACTION_COMPLETE
[  707.405948] binder: undelivered TRANSACTION_ERROR: 29189
[  707.420297] binder: undelivered TRANSACTION_ERROR: 29189
[  707.428487] binder: BINDER_SET_CONTEXT_MGR already set
[  707.428494] binder: 9022:9032 ioctl 40046207 0 returned -16
[  707.429377] binder: undelivered TRANSACTION_ERROR: 29201
[  707.429733] binder: 9022:9032 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.429786] binder: BINDER_SET_CONTEXT_MGR already set
[  707.429792] binder: 9027:9031 ioctl 40046207 0 returned -16
[  707.429823] binder: 9022:9032 transaction failed 29201/-22, size 40-16 line 3197
[  707.435988] binder: 9027:9031 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.436869] binder: 9028:9030 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.436954] binder: 9028:9030 transaction failed 29201/-22, size 40-16 line 3197
[  707.437281] binder: 9027:9031 transaction failed 29201/-22, size 40-16 line 3197
[  707.451010] binder: undelivered TRANSACTION_COMPLETE
[  707.451024] binder: undelivered TRANSACTION_ERROR: 29189
[  707.471122] binder: 9037:9043 got transaction with invalid offset (0, min 24 max 40) or object.
[  707.471211] binder: 9037:9043 transaction failed 29201/-22, size 40-16 line 3197
[  707.481504] binder: undelivered TRANSACTION_ERROR: 29201
[  707.501335] binder: undelivered TRANSACTION_ERROR: 29201
[  707.501411] binder: send failed reply for transaction 40706 to 9035:9039
[  707.501428] binder: send failed reply for transaction 40709 to 9033:9042
[  707.503415] binder: 9051:9057 transaction failed 29189/-22, size 40-0 line 3011
[  707.520436] binder_alloc: 9056: binder_alloc_buf, no vma
[  707.520476] binder: 9056:9060 transaction failed 29189/-3, size 40-16 line 3134
[  707.536635] binder: undelivered TRANSACTION_ERROR: 29201
[  707.544589] binder: undelivered TRANSACTION_ERROR: 29201
[  707.555298] binder: BINDER_SET_CONTEXT_MGR already set
[  707.555307] binder: 9065:9074 ioctl 40046207 0 returned -16
[  707.556065] binder_alloc: 9056: binder_alloc_buf, no vma
[  707.556103] binder: 9065:9074 transaction failed 29189/-3, size 40-16 line 3134
[  707.567511] binder: undelivered TRANSACTION_COMPLETE
[  707.567525] binder: undelivered TRANSACTION_ERROR: 29189
[  707.584945] binder: BINDER_SET_CONTEXT_MGR already set
[  707.584953] binder: 9077:9082 ioctl 40046207 0 returned -16
[  707.585810] binder_alloc: 9056: binder_alloc_buf, no vma
[  707.585847] binder: 9078:9084 transaction failed 29189/-3, size 40-16 line 3134
[  707.586076] binder_alloc: 9056: binder_alloc_buf, no vma
[  707.586114] binder: 9077:9082 transaction failed 29189/-3, size 40-16 line 3134
[  707.591293] binder: undelivered TRANSACTION_ERROR: 29189
[  707.591585] binder: undelivered TRANSACTION_ERROR: 29201
[  707.595646] binder: undelivered TRANSACTION_COMPLETE
[  707.595661] binder: undelivered TRANSACTION_ERROR: 29189
[  707.624278] binder: undelivered TRANSACTION_ERROR: 29189
[  707.635283] binder: undelivered TRANSACTION_ERROR: 29189
[  707.644852] binder: undelivered TRANSACTION_ERROR: 29189
[  707.663203] binder: undelivered TRANSACTION_ERROR: 29189
[  707.691516] binder_alloc: 9098: binder_alloc_buf, no vma
[  707.691551] binder: 9098:9106 transaction failed 29189/-3, size 40-16 line 3134
[  707.692665] binder: BINDER_SET_CONTEXT_MGR already set
[  707.692672] binder: 9100:9104 ioctl 40046207 0 returned -16
[  707.693107] binder_alloc: 9098: binder_alloc_buf, no vma
[  707.693141] binder: 9097:9105 transaction failed 29189/-3, size 40-8 line 3134
[  707.693631] binder_alloc: 9098: binder_alloc_buf, no vma
[  707.693670] binder: 9100:9104 transaction failed 29189/-3, size 40-16 line 3134
[  707.702550] binder_alloc: 9098: binder_alloc_buf, no vma
[  707.702587] binder: 9096:9109 transaction failed 29189/-3, size 40-16 line 3134
[  707.702919] binder: BINDER_SET_CONTEXT_MGR already set
[  707.702924] binder: 9101:9110 ioctl 40046207 0 returned -16
[  707.704118] binder_alloc: 9098: binder_alloc_buf, no vma
[  707.704156] binder: 9101:9110 transaction failed 29189/-3, size 40-16 line 3134
[  707.710220] binder_alloc: 9098: binder_alloc_buf, no vma
[  707.710257] binder: 9103:9111 transaction failed 29189/-3, size 40-16 line 3134
[  707.710445] binder_alloc: 9098: binder_alloc_buf, no vma
[  707.710480] binder: 9102:9107 transaction failed 29189/-3, size 40-8 line 3134
[  707.712348] binder_alloc: 9098: binder_alloc_buf, no vma
[  707.712391] binder: 9099:9108 transaction failed 29189/-3, size 40-8 line 3134
[  707.749719] binder: undelivered TRANSACTION_ERROR: 29189
[  707.786408] binder: undelivered TRANSACTION_ERROR: 29189
[  707.791998] binder: undelivered TRANSACTION_ERROR: 29189
[  707.796078] binder_alloc: 9137: binder_alloc_buf, no vma
[  707.796117] binder: 9137:9138 transaction failed 29189/-3, size 40-16 line 3134
[  707.822265] binder: BINDER_SET_CONTEXT_MGR already set
[  707.822273] binder: 9148:9150 ioctl 40046207 0 returned -16
[  707.823073] binder_alloc: 9137: binder_alloc_buf, no vma
[  707.823181] binder: 9148:9150 transaction failed 29189/-3, size 40-16 line 3134
[  707.824469] binder: undelivered TRANSACTION_ERROR: 29189
[  707.831400] binder: undelivered TRANSACTION_ERROR: 29189
[  707.839457] binder: undelivered TRANSACTION_ERROR: 29189
[  707.841969] binder_alloc: 9137: binder_alloc_buf, no vma
[  707.841999] binder: 9147:9152 transaction failed 29189/-3, size 40-8 line 3134
[  707.853414] binder: undelivered TRANSACTION_ERROR: 29189
[  707.857230] binder: undelivered TRANSACTION_ERROR: 29189
[  707.868950] binder_alloc: 9137: binder_alloc_buf, no vma
[  707.869034] binder: 9154:9158 transaction failed 29189/-3, size 40-16 line 3134
[  707.880396] binder: BINDER_SET_CONTEXT_MGR already set
[  707.880449] binder: 9157:9162 ioctl 40046207 0 returned -16
[  707.881223] binder_alloc: 9137: binder_alloc_buf, no vma
[  707.881262] binder: 9157:9162 transaction failed 29189/-3, size 40-16 line 3134
[  707.888083] binder: undelivered TRANSACTION_ERROR: 29189
[  707.892971] binder: 9163:9168 transaction failed 29189/-22, size 40-16 line 3011
[  707.902094] binder: 9159:9167 transaction failed 29189/-22, size 40-8 line 3011
[  707.930076] binder: undelivered TRANSACTION_ERROR: 29189
[  707.937037] binder: 9169:9178 transaction failed 29189/-22, size 40-8 line 3011
[  707.947157] binder: undelivered TRANSACTION_ERROR: 29189
[  707.957599] binder: undelivered TRANSACTION_ERROR: 29189
[  707.982335] binder: undelivered TRANSACTION_ERROR: 29189
[  707.991784] binder: undelivered TRANSACTION_ERROR: 29189
[  707.992169] binder: undelivered TRANSACTION_ERROR: 29189
[  708.005092] binder: undelivered TRANSACTION_ERROR: 29189
[  708.038404] binder_alloc: 9192: binder_alloc_buf, no vma
[  708.038442] binder: 9192:9199 transaction failed 29189/-3, size 40-16 line 3134
[  708.038822] binder: BINDER_SET_CONTEXT_MGR already set
[  708.038829] binder: 9196:9200 ioctl 40046207 0 returned -16
[  708.040297] binder_alloc: 9192: binder_alloc_buf, no vma
[  708.040343] binder: 9196:9200 transaction failed 29189/-3, size 40-16 line 3134
[  708.043168] binder_alloc: 9192: binder_alloc_buf, no vma
[  708.043204] binder: 9193:9202 transaction failed 29189/-3, size 40-8 line 3134
[  708.043467] binder_alloc: 9192: binder_alloc_buf, no vma
[  708.043503] binder: 9195:9201 transaction failed 29189/-3, size 40-16 line 3134
[  708.051054] binder_alloc: 9192: binder_alloc_buf, no vma
[  708.051093] binder: 9198:9204 transaction failed 29189/-3, size 40-8 line 3134
[  708.054057] binder_alloc: 9192: binder_alloc_buf, no vma
[  708.054092] binder: 9194:9203 transaction failed 29189/-3, size 40-8 line 3134
[  708.054382] binder: BINDER_SET_CONTEXT_MGR already set
[  708.054388] binder: 9197:9206 ioctl 40046207 0 returned -16
[  708.055268] binder_alloc: 9192: binder_alloc_buf, no vma
[  708.055302] binder: 9197:9206 transaction failed 29189/-3, size 40-16 line 3134
[  708.057449] binder_alloc: 9192: binder_alloc_buf, no vma
[  708.057483] binder: 9191:9205 transaction failed 29189/-3, size 40-16 line 3134
[  708.093985] binder: undelivered TRANSACTION_ERROR: 29189
[  708.139022] binder: undelivered TRANSACTION_ERROR: 29189
[  708.155646] binder: undelivered TRANSACTION_ERROR: 29189
[  708.155732] binder: undelivered TRANSACTION_ERROR: 29189
[  708.155808] binder: undelivered TRANSACTION_ERROR: 29189
[  708.161521] binder_alloc: 9231: binder_alloc_buf, no vma
[  708.161560] binder: 9231:9238 transaction failed 29189/-3, size 40-16 line 3134
[  708.162419] binder: undelivered TRANSACTION_ERROR: 29189
[  708.177679] binder: undelivered TRANSACTION_ERROR: 29189
[  708.197749] binder: BINDER_SET_CONTEXT_MGR already set
[  708.197757] binder: 9244:9249 ioctl 40046207 0 returned -16
[  708.197812] binder: BINDER_SET_CONTEXT_MGR already set
[  708.197819] binder: 9241:9246 ioctl 40046207 0 returned -16
[  708.198652] binder_alloc: 9231: binder_alloc_buf, no vma
[  708.198692] binder: 9240:9247 transaction failed 29189/-3, size 40-16 line 3134
[  708.198871] binder_alloc: 9231: binder_alloc_buf, no vma
[  708.198908] binder: 9241:9246 transaction failed 29189/-3, size 40-16 line 3134
[  708.201876] binder_alloc: 9231: binder_alloc_buf, no vma
[  708.201913] binder: 9242:9248 transaction failed 29189/-3, size 40-16 line 3134
[  708.203361] binder_alloc: 9231: binder_alloc_buf, no vma
[  708.203398] binder: 9244:9249 transaction failed 29189/-3, size 40-16 line 3134
[  708.211560] binder_alloc: 9231: binder_alloc_buf, no vma
[  708.211598] binder: 9243:9252 transaction failed 29189/-3, size 40-8 line 3134
[  708.215360] binder: undelivered TRANSACTION_ERROR: 29189
[  708.222461] binder: 9250:9257 transaction failed 29189/-22, size 40-8 line 3011
[  708.223000] binder: undelivered TRANSACTION_ERROR: 29189
[  708.264161] binder: undelivered TRANSACTION_ERROR: 29189
[  708.272284] binder: undelivered TRANSACTION_ERROR: 29189
[  708.275191] binder: undelivered TRANSACTION_ERROR: 29189
[  708.290471] binder: undelivered TRANSACTION_ERROR: 29189
[  708.303900] binder: undelivered TRANSACTION_ERROR: 29189
[  708.320934] binder: undelivered TRANSACTION_ERROR: 29189
[  708.344300] binder_alloc: 9277: binder_alloc_buf, no vma
[  708.344337] binder: 9277:9282 transaction failed 29189/-3, size 40-16 line 3134
[  708.346446] binder: BINDER_SET_CONTEXT_MGR already set
[  708.346453] binder: 9279:9284 ioctl 40046207 0 returned -16
[  708.347815] binder_alloc: 9277: binder_alloc_buf, no vma
[  708.347854] binder: 9279:9284 transaction failed 29189/-3, size 40-16 line 3134
[  708.355940] binder_alloc: 9277: binder_alloc_buf, no vma
[  708.355976] binder: 9276:9289 transaction failed 29189/-3, size 40-16 line 3134
[  708.357742] binder: BINDER_SET_CONTEXT_MGR already set
[  708.357749] binder: 9280:9286 ioctl 40046207 0 returned -16
[  708.358661] binder_alloc: 9277: binder_alloc_buf, no vma
[  708.358696] binder: 9280:9286 transaction failed 29189/-3, size 40-16 line 3134
[  708.360297] binder_alloc: 9277: binder_alloc_buf, no vma
[  708.360399] binder: 9281:9287 transaction failed 29189/-3, size 40-16 line 3134
[  708.360875] binder_alloc: 9277: binder_alloc_buf, no vma
[  708.360911] binder: 9283:9288 transaction failed 29189/-3, size 40-8 line 3134
[  708.377192] binder_alloc: 9277: binder_alloc_buf, no vma
[  708.377233] binder: 9285:9293 transaction failed 29189/-3, size 40-8 line 3134
[  708.379615] binder_alloc: 9277: binder_alloc_buf, no vma
[  708.379652] binder: 9278:9291 transaction failed 29189/-3, size 40-8 line 3134
[  708.401528] binder: undelivered TRANSACTION_ERROR: 29189
[  708.448982] binder: undelivered TRANSACTION_ERROR: 29189
[  708.455945] binder_alloc: 9312: binder_alloc_buf, no vma
[  708.455986] binder: 9312:9321 transaction failed 29189/-3, size 40-16 line 3134
[  708.463815] binder: undelivered TRANSACTION_ERROR: 29189
[  708.466461] binder: undelivered TRANSACTION_ERROR: 29189
[  708.474146] binder: undelivered TRANSACTION_ERROR: 29189
[  708.501987] binder: undelivered TRANSACTION_ERROR: 29189
[  708.508270] binder: undelivered TRANSACTION_ERROR: 29189
[  708.508381] binder: BINDER_SET_CONTEXT_MGR already set
[  708.508388] binder: 9324:9328 ioctl 40046207 0 returned -16
[  708.515601] binder_alloc: 9312: binder_alloc_buf, no vma
[  708.515639] binder: 9324:9328 transaction failed 29189/-3, size 40-16 line 3134
[  708.517085] binder_alloc: 9312: binder_alloc_buf, no vma
[  708.517123] binder: 9327:9332 transaction failed 29189/-3, size 40-8 line 3134
[  708.517227] binder_alloc: 9312: binder_alloc_buf, no vma
[  708.517263] binder: 9326:9333 transaction failed 29189/-3, size 40-16 line 3134
[  708.523669] binder: undelivered TRANSACTION_ERROR: 29189
[  708.525160] binder: BINDER_SET_CONTEXT_MGR already set
[  708.525167] binder: 9329:9336 ioctl 40046207 0 returned -16
[  708.531031] binder_alloc: 9312: binder_alloc_buf, no vma
[  708.531068] binder: 9329:9336 transaction failed 29189/-3, size 40-16 line 3134
[  708.537956] binder: undelivered TRANSACTION_ERROR: 29189
[  708.552192] binder: 9335:9341 transaction failed 29189/-22, size 40-8 line 3011
[  708.556123] binder: 9337:9342 transaction failed 29189/-22, size 40-16 line 3011
[  708.592618] binder: 9348:9353 transaction failed 29189/-22, size 40-16 line 3011
[  708.600931] binder: 9344:9356 transaction failed 29189/-22, size 40-8 line 3011
[  708.611280] binder: undelivered TRANSACTION_ERROR: 29189
[  708.623643] binder: undelivered TRANSACTION_ERROR: 29189
[  708.623731] binder: undelivered TRANSACTION_ERROR: 29189
[  708.637713] binder: undelivered TRANSACTION_ERROR: 29189
[  708.654905] binder: 9370:9378 transaction failed 29189/-22, size 40-16 line 3011
[  708.658467] binder: 9372:9379 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.660338] binder: 9372:9379 transaction failed 29201/-22, size 40-16 line 3197
[  708.683084] binder: undelivered TRANSACTION_ERROR: 29189
[  708.687554] binder: undelivered TRANSACTION_ERROR: 29189
[  708.715304] binder: undelivered TRANSACTION_ERROR: 29189
[  708.721207] binder: undelivered TRANSACTION_ERROR: 29189
[  708.751633] binder: undelivered TRANSACTION_ERROR: 29189
[  708.765261] binder: release 9376:9380 transaction 40780 out, still active
[  708.765266] binder: unexpected work type, 4, not freed
[  708.765269] binder: undelivered TRANSACTION_COMPLETE
[  708.770708] binder: undelivered TRANSACTION_ERROR: 29201
[  708.770760] binder: send failed reply for transaction 40780, target dead
[  708.804935] binder: 9395:9404 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.805018] binder: 9395:9404 transaction failed 29201/-22, size 40-16 line 3197
[  708.807763] binder: 9397:9403 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.807859] binder: 9397:9403 transaction failed 29201/-22, size 40-16 line 3197
[  708.819592] binder: BINDER_SET_CONTEXT_MGR already set
[  708.819600] binder: 9402:9408 ioctl 40046207 0 returned -16
[  708.821330] binder: BINDER_SET_CONTEXT_MGR already set
[  708.821338] binder: 9401:9409 ioctl 40046207 0 returned -16
[  708.822375] binder: 9398:9407 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.822462] binder: 9398:9407 transaction failed 29201/-22, size 40-16 line 3197
[  708.824943] binder: 9401:9409 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.825027] binder: 9401:9409 transaction failed 29201/-22, size 40-16 line 3197
[  708.825220] binder: 9402:9408 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.825304] binder: 9402:9408 transaction failed 29201/-22, size 40-16 line 3197
[  708.829033] binder: 9396:9410 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.830034] binder: 9396:9410 transaction failed 29201/-22, size 40-16 line 3197
[  708.904570] binder: undelivered TRANSACTION_ERROR: 29201
[  708.930729] binder: undelivered TRANSACTION_ERROR: 29201
[  708.935905] binder: undelivered TRANSACTION_ERROR: 29201
[  708.935981] binder: release 9400:9405 transaction 40790 out, still active
[  708.935985] binder: unexpected work type, 4, not freed
[  708.935987] binder: undelivered TRANSACTION_COMPLETE
[  708.937147] binder: undelivered TRANSACTION_ERROR: 29201
[  708.960395] binder: undelivered TRANSACTION_ERROR: 29201
[  708.960502] binder: send failed reply for transaction 40790, target dead
[  708.960518] binder: send failed reply for transaction 40802 to 9399:9406
[  708.972566] binder: undelivered TRANSACTION_COMPLETE
[  708.972581] binder: undelivered TRANSACTION_ERROR: 29189
[  708.977582] binder: undelivered TRANSACTION_ERROR: 29201
[  708.983514] binder: 9446:9452 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.983605] binder: 9446:9452 transaction failed 29201/-22, size 40-16 line 3197
[  708.984196] binder: 9444:9449 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.984285] binder: 9444:9449 transaction failed 29201/-22, size 40-16 line 3197
[  708.999070] binder: BINDER_SET_CONTEXT_MGR already set
[  708.999079] binder: 9451:9458 ioctl 40046207 0 returned -16
[  708.999828] binder: 9447:9454 got transaction with invalid offset (0, min 24 max 40) or object.
[  708.999912] binder: 9447:9454 transaction failed 29201/-22, size 40-16 line 3197
[  709.001500] binder: 9451:9458 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.001586] binder: 9451:9458 transaction failed 29201/-22, size 40-16 line 3197
[  709.006462] binder: 9450:9455 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.006743] binder: 9450:9455 transaction failed 29201/-22, size 40-16 line 3197
[  709.044832] binder: undelivered TRANSACTION_ERROR: 29201
[  709.053680] binder: undelivered TRANSACTION_ERROR: 29201
[  709.053734] binder: send failed reply for transaction 40815 to 9448:9453
[  709.091265] binder: undelivered TRANSACTION_ERROR: 29201
[  709.091331] binder: undelivered TRANSACTION_COMPLETE
[  709.091343] binder: undelivered TRANSACTION_ERROR: 29189
[  709.113673] binder: undelivered TRANSACTION_ERROR: 29201
[  709.113973] binder: undelivered TRANSACTION_ERROR: 29201
[  709.144061] binder: 9481:9485 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.144153] binder: 9481:9485 transaction failed 29201/-22, size 40-16 line 3197
[  709.148737] binder: 9484:9491 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.148830] binder: 9484:9491 transaction failed 29201/-22, size 40-16 line 3197
[  709.152436] binder: BINDER_SET_CONTEXT_MGR already set
[  709.152444] binder: 9486:9492 ioctl 40046207 0 returned -16
[  709.153524] binder: 9486:9492 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.153602] binder: 9486:9492 transaction failed 29201/-22, size 40-16 line 3197
[  709.157891] binder: 9487:9493 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.157978] binder: 9487:9493 transaction failed 29201/-22, size 40-16 line 3197
[  709.167760] binder: BINDER_SET_CONTEXT_MGR already set
[  709.167768] binder: 9489:9496 ioctl 40046207 0 returned -16
[  709.169736] binder: 9489:9496 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.169824] binder: 9489:9496 transaction failed 29201/-22, size 40-16 line 3197
[  709.170285] binder: 9488:9495 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.170368] binder: 9488:9495 transaction failed 29201/-22, size 40-16 line 3197
[  709.241556] binder: undelivered TRANSACTION_ERROR: 29201
[  709.254223] binder: undelivered TRANSACTION_ERROR: 29201
[  709.267436] binder: undelivered TRANSACTION_ERROR: 29201
[  709.267511] binder: send failed reply for transaction 40837 to 9482:9490
[  709.267528] binder: send failed reply for transaction 40849 to 9483:9494
[  709.270821] binder: 9531:9533 transaction failed 29189/-22, size 40-16 line 3011
[  709.281152] binder: undelivered TRANSACTION_ERROR: 29201
[  709.295037] binder: undelivered TRANSACTION_COMPLETE
[  709.295053] binder: undelivered TRANSACTION_ERROR: 29189
[  709.295140] binder: undelivered TRANSACTION_ERROR: 29201
[  709.295895] binder: undelivered TRANSACTION_ERROR: 29201
[  709.296443] binder: undelivered TRANSACTION_COMPLETE
[  709.296457] binder: undelivered TRANSACTION_ERROR: 29189
[  709.312443] binder: 9532:9534 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.312536] binder: 9532:9534 transaction failed 29201/-22, size 40-16 line 3197
[  709.313182] binder: BINDER_SET_CONTEXT_MGR already set
[  709.313189] binder: 9538:9542 ioctl 40046207 0 returned -16
[  709.314093] binder: 9538:9542 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.314179] binder: 9538:9542 transaction failed 29201/-22, size 40-16 line 3197
[  709.348690] binder: 9540:9544 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.348783] binder: 9540:9544 transaction failed 29201/-22, size 40-16 line 3197
[  709.355386] binder: BINDER_SET_CONTEXT_MGR already set
[  709.355395] binder: 9545:9555 ioctl 40046207 0 returned -16
[  709.356399] binder: 9545:9555 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.356481] binder: 9545:9555 transaction failed 29201/-22, size 40-16 line 3197
[  709.360780] binder: undelivered TRANSACTION_ERROR: 29189
[  709.416562] binder: undelivered TRANSACTION_ERROR: 29201
[  709.417547] binder: undelivered TRANSACTION_ERROR: 29201
[  709.417621] binder: send failed reply for transaction 40860 to 9537:9547
[  709.417638] binder: send failed reply for transaction 40866 to 9539:9543
[  709.430808] binder: undelivered TRANSACTION_COMPLETE
[  709.430822] binder: undelivered TRANSACTION_ERROR: 29189
[  709.439436] binder: undelivered TRANSACTION_ERROR: 29201
[  709.447114] binder: undelivered TRANSACTION_COMPLETE
[  709.447129] binder: undelivered TRANSACTION_ERROR: 29189
[  709.452942] binder: undelivered TRANSACTION_ERROR: 29201
[  709.488796] binder: BINDER_SET_CONTEXT_MGR already set
[  709.488805] binder: 9576:9579 ioctl 40046207 0 returned -16
[  709.489368] binder: BINDER_SET_CONTEXT_MGR already set
[  709.489376] binder: 9571:9584 ioctl 40046207 0 returned -16
[  709.492274] binder: 9574:9582 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.492366] binder: 9574:9582 transaction failed 29201/-22, size 40-16 line 3197
[  709.492641] binder: 9571:9584 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.492728] binder: 9571:9584 transaction failed 29201/-22, size 40-16 line 3197
[  709.493335] binder: 9575:9583 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.493411] binder: 9575:9583 transaction failed 29201/-22, size 40-16 line 3197
[  709.493882] binder: 9576:9579 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.493970] binder: 9576:9579 transaction failed 29201/-22, size 40-16 line 3197
[  709.495873] binder: 9573:9580 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.495960] binder: 9573:9580 transaction failed 29201/-22, size 40-16 line 3197
[  709.498436] binder: 9577:9585 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.498519] binder: 9577:9585 transaction failed 29201/-22, size 40-16 line 3197
[  709.572549] binder: undelivered TRANSACTION_ERROR: 29201
[  709.583980] binder: undelivered TRANSACTION_ERROR: 29201
[  709.595707] binder: undelivered TRANSACTION_ERROR: 29201
[  709.614280] binder: undelivered TRANSACTION_ERROR: 29201
[  709.614356] binder: send failed reply for transaction 40873 to 9572:9578
[  709.614373] binder: send failed reply for transaction 40894 to 9581:9587
[  709.614489] binder: undelivered TRANSACTION_COMPLETE
[  709.614501] binder: undelivered TRANSACTION_ERROR: 29189
[  709.614633] binder: undelivered TRANSACTION_ERROR: 29201
[  709.614715] binder: undelivered TRANSACTION_ERROR: 29201
[  709.641312] binder: undelivered TRANSACTION_COMPLETE
[  709.641328] binder: undelivered TRANSACTION_ERROR: 29189
[  709.647600] binder: 9617:9620 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.647682] binder: 9617:9620 transaction failed 29201/-22, size 40-16 line 3197
[  709.656108] binder: 9616:9626 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.656191] binder: 9616:9626 transaction failed 29201/-22, size 40-16 line 3197
[  709.660646] binder: 9623:9631 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.660729] binder: 9623:9631 transaction failed 29201/-22, size 40-16 line 3197
[  709.663105] binder: BINDER_SET_CONTEXT_MGR already set
[  709.663113] binder: 9625:9628 ioctl 40046207 0 returned -16
[  709.664286] binder: BINDER_SET_CONTEXT_MGR already set
[  709.664294] binder: 9621:9629 ioctl 40046207 0 returned -16
[  709.665242] binder: 9621:9629 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.665331] binder: 9621:9629 transaction failed 29201/-22, size 40-16 line 3197
[  709.667258] binder: 9625:9628 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.667345] binder: 9625:9628 transaction failed 29201/-22, size 40-16 line 3197
[  709.671613] binder: 9622:9633 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.671701] binder: 9622:9633 transaction failed 29201/-22, size 40-16 line 3197
[  709.720861] binder: undelivered TRANSACTION_ERROR: 29201
[  709.720940] binder: send failed reply for transaction 40907 to 9624:9632
[  709.720958] binder: send failed reply for transaction 40919 to 9635:9640
[  709.730851] binder: undelivered TRANSACTION_ERROR: 29201
[  709.776963] binder: undelivered TRANSACTION_ERROR: 29201
[  709.777054] binder: undelivered TRANSACTION_COMPLETE
[  709.777066] binder: undelivered TRANSACTION_ERROR: 29189
[  709.779279] binder: undelivered TRANSACTION_ERROR: 29201
[  709.780126] binder: undelivered TRANSACTION_ERROR: 29201
[  709.787757] binder: undelivered TRANSACTION_ERROR: 29201
[  709.805365] binder: undelivered TRANSACTION_COMPLETE
[  709.805380] binder: undelivered TRANSACTION_ERROR: 29189
[  709.837278] binder: BINDER_SET_CONTEXT_MGR already set
[  709.837287] binder: 9668:9671 ioctl 40046207 0 returned -16
[  709.837927] binder: 9667:9672 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.838021] binder: 9667:9672 transaction failed 29201/-22, size 40-16 line 3197
[  709.839896] binder: 9664:9673 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.839976] binder: 9664:9673 transaction failed 29201/-22, size 40-16 line 3197
[  709.841319] binder: 9665:9674 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.841408] binder: 9665:9674 transaction failed 29201/-22, size 40-16 line 3197
[  709.848428] binder: BINDER_SET_CONTEXT_MGR already set
[  709.848435] binder: 9663:9677 ioctl 40046207 0 returned -16
[  709.849434] binder: 9663:9677 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.849611] binder: 9663:9677 transaction failed 29201/-22, size 40-16 line 3197
[  709.867972] binder: 9666:9675 got transaction with invalid offset (0, min 24 max 40) or object.
[  709.868161] binder: 9666:9675 transaction failed 29201/-22, size 40-16 line 3197
[  709.930452] binder: undelivered TRANSACTION_ERROR: 29201
[  709.951907] binder: undelivered TRANSACTION_ERROR: 29201
[  709.952001] binder: release 9669:9676 transaction 40932 out, still active
[  709.952004] binder: unexpected work type, 4, not freed
[  709.952005] binder: undelivered TRANSACTION_COMPLETE
[  709.956949] binder: undelivered TRANSACTION_ERROR: 29201
[  709.957025] binder: send failed reply for transaction 40932, target dead
[  709.957040] binder: send failed reply for transaction 40941 to 9670:9682
[  709.971335] binder: undelivered TRANSACTION_ERROR: 29201
[  709.976122] binder: undelivered TRANSACTION_ERROR: 29201
[  709.995779] binder: 9714:9718 transaction failed 29189/-22, size 40-16 line 3011
[  709.998967] binder: 9713:9719 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.000624] binder: 9713:9719 transaction failed 29201/-22, size 40-16 line 3197
[  710.003825] binder: BINDER_SET_CONTEXT_MGR already set
[  710.003833] binder: 9712:9721 ioctl 40046207 0 returned -16
[  710.005385] binder: BINDER_SET_CONTEXT_MGR already set
[  710.005393] binder: 9716:9723 ioctl 40046207 0 returned -16
[  710.005860] binder: 9712:9721 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.005945] binder: 9712:9721 transaction failed 29201/-22, size 40-16 line 3197
[  710.007700] binder: 9715:9720 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.007783] binder: 9715:9720 transaction failed 29201/-22, size 40-16 line 3197
[  710.013098] binder: 9711:9724 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.013182] binder: 9711:9724 transaction failed 29201/-22, size 40-16 line 3197
[  710.027405] binder: undelivered TRANSACTION_COMPLETE
[  710.027419] binder: undelivered TRANSACTION_ERROR: 29189
[  710.093546] binder: undelivered TRANSACTION_ERROR: 29189
[  710.093868] binder: undelivered TRANSACTION_ERROR: 29201
[  710.093943] binder: send failed reply for transaction 40958 to 9710:9722
[  710.093961] binder: send failed reply for transaction 40961 to 9745:9751
[  710.102003] binder: undelivered TRANSACTION_ERROR: 29201
[  710.114963] binder: undelivered TRANSACTION_ERROR: 29201
[  710.132793] binder: undelivered TRANSACTION_COMPLETE
[  710.132807] binder: undelivered TRANSACTION_ERROR: 29189
[  710.143006] binder: 9757:9759 transaction failed 29189/-22, size 40-16 line 3011
[  710.157243] binder: undelivered TRANSACTION_ERROR: 29201
[  710.171791] binder: 9756:9760 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.171883] binder: 9756:9760 transaction failed 29201/-22, size 40-16 line 3197
[  710.182827] binder: undelivered TRANSACTION_COMPLETE
[  710.182841] binder: undelivered TRANSACTION_ERROR: 29189
[  710.192557] binder: undelivered TRANSACTION_ERROR: 29189
[  710.206769] binder: undelivered TRANSACTION_ERROR: 29201
[  710.249733] binder: 9772:9778 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.249828] binder: 9772:9778 transaction failed 29201/-22, size 40-16 line 3197
[  710.250713] binder: 9771:9780 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.250801] binder: 9771:9780 transaction failed 29201/-22, size 40-16 line 3197
[  710.258617] binder: BINDER_SET_CONTEXT_MGR already set
[  710.258624] binder: 9773:9786 ioctl 40046207 0 returned -16
[  710.261021] binder: 9773:9786 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.261182] binder: 9775:9784 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.261269] binder: 9775:9784 transaction failed 29201/-22, size 40-16 line 3197
[  710.261518] binder: 9773:9786 transaction failed 29201/-22, size 40-16 line 3197
[  710.265127] binder: BINDER_SET_CONTEXT_MGR already set
[  710.265135] binder: 9781:9785 ioctl 40046207 0 returned -16
[  710.266082] binder: 9781:9785 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.266169] binder: 9781:9785 transaction failed 29201/-22, size 40-16 line 3197
[  710.344319] binder: send failed reply for transaction 40976 to 9776:9782
[  710.344338] binder: send failed reply for transaction 40988 to 9777:9783
[  710.362114] binder: undelivered TRANSACTION_ERROR: 29201
[  710.371000] binder: undelivered TRANSACTION_ERROR: 29201
[  710.371085] binder: undelivered TRANSACTION_COMPLETE
[  710.371098] binder: undelivered TRANSACTION_ERROR: 29189
[  710.381352] binder: undelivered TRANSACTION_ERROR: 29201
[  710.385128] binder: undelivered TRANSACTION_ERROR: 29201
[  710.392576] binder: 9823:9824 transaction failed 29189/-22, size 40-16 line 3011
[  710.394474] binder: undelivered TRANSACTION_COMPLETE
[  710.394489] binder: undelivered TRANSACTION_ERROR: 29189
[  710.395227] binder: undelivered TRANSACTION_ERROR: 29201
[  710.412427] binder: 9821:9822 transaction failed 29189/-22, size 40-16 line 3011
[  710.413096] binder: 9826:9829 transaction failed 29189/-22, size 40-16 line 3011
[  710.438381] binder: undelivered TRANSACTION_ERROR: 29189
[  710.456072] binder: undelivered TRANSACTION_ERROR: 29189
[  710.464568] binder: undelivered TRANSACTION_ERROR: 29189
[  710.497947] binder: 9838:9845 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.498035] binder: 9838:9845 transaction failed 29201/-22, size 40-16 line 3197
[  710.502719] binder: BINDER_SET_CONTEXT_MGR already set
[  710.502726] binder: 9837:9844 ioctl 40046207 0 returned -16
[  710.507833] binder: 9837:9844 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.508216] binder: 9843:9846 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.508302] binder: 9843:9846 transaction failed 29201/-22, size 40-16 line 3197
[  710.508470] binder: 9837:9844 transaction failed 29201/-22, size 40-16 line 3197
[  710.510299] binder: 9839:9849 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.510387] binder: 9839:9849 transaction failed 29201/-22, size 40-16 line 3197
[  710.511700] binder: 9840:9847 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.511776] binder: 9840:9847 transaction failed 29201/-22, size 40-16 line 3197
[  710.513321] binder: 9842:9851 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.513407] binder: 9842:9851 transaction failed 29201/-22, size 40-16 line 3197
[  710.588047] binder: undelivered TRANSACTION_ERROR: 29201
[  710.601597] binder: undelivered TRANSACTION_ERROR: 29201
[  710.601676] binder: send failed reply for transaction 41004 to 9841:9850
[  710.601692] binder: send failed reply for transaction 41010 to 9836:9848
[  710.612455] binder: undelivered TRANSACTION_COMPLETE
[  710.612470] binder: undelivered TRANSACTION_ERROR: 29189
[  710.616551] binder: undelivered TRANSACTION_ERROR: 29201
[  710.629396] binder: undelivered TRANSACTION_ERROR: 29201
[  710.646849] binder: undelivered TRANSACTION_ERROR: 29201
[  710.655782] binder: 9890:9895 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.655872] binder: 9890:9895 transaction failed 29201/-22, size 40-16 line 3197
[  710.656115] binder: 9888:9893 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.656299] binder: 9888:9893 transaction failed 29201/-22, size 40-16 line 3197
[  710.659068] binder: 9889:9896 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.672942] binder: undelivered TRANSACTION_COMPLETE
[  710.672956] binder: undelivered TRANSACTION_ERROR: 29189
[  710.673411] binder: 9889:9896 transaction failed 29201/-22, size 40-16 line 3197
[  710.682265] binder: undelivered TRANSACTION_ERROR: 29201
[  710.685773] binder: BINDER_SET_CONTEXT_MGR already set
[  710.685779] binder: 9891:9892 ioctl 40046207 0 returned -16
[  710.687086] binder: 9891:9892 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.687181] binder: 9891:9892 transaction failed 29201/-22, size 40-16 line 3197
[  710.702277] binder: 9899:9908 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.702368] binder: 9899:9908 transaction failed 29201/-22, size 40-16 line 3197
[  710.718101] binder: 9906:9911 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.718193] binder: 9906:9911 transaction failed 29201/-22, size 40-16 line 3197
[  710.753903] binder: undelivered TRANSACTION_ERROR: 29201
[  710.753978] binder: send failed reply for transaction 41032 to 9894:9900
[  710.753996] binder: send failed reply for transaction 41038 to 9903:9912
[  710.757837] binder: undelivered TRANSACTION_ERROR: 29201
[  710.762673] binder: undelivered TRANSACTION_ERROR: 29201
[  710.784004] binder: undelivered TRANSACTION_ERROR: 29201
[  710.801485] binder: undelivered TRANSACTION_ERROR: 29201
[  710.815746] binder: undelivered TRANSACTION_COMPLETE
[  710.815760] binder: undelivered TRANSACTION_ERROR: 29189
[  710.825028] binder: undelivered TRANSACTION_ERROR: 29201
[  710.835255] binder: 9932:9937 got transaction with invalid offset (0, min 24 max 40) or object.
[  710.835341] binder: 9932:9937 transaction failed 29201/-22, size 40-16 line 3197
[  710.844505] binder: undelivered TRANSACTION_COMPLETE
[  710.844519] binder: undelivered TRANSACTION_ERROR: 29189
[  710.862794] binder: undelivered TRANSACTION_ERROR: 29201
[  710.895375] binder_alloc: 9944: binder_alloc_buf, no vma
[  710.895414] binder: 9944:9953 transaction failed 29189/-3, size 40-16 line 3134
[  710.897735] binder_alloc: 9944: binder_alloc_buf, no vma
[  710.897769] binder: 9943:9949 transaction failed 29189/-3, size 40-8 line 3134
[  710.897915] binder: BINDER_SET_CONTEXT_MGR already set
[  710.897923] binder: 9945:9951 ioctl 40046207 0 returned -16
[  710.898914] binder_alloc: 9944: binder_alloc_buf, no vma
[  710.898949] binder: 9946:9950 transaction failed 29189/-3, size 40-16 line 3134
[  710.899758] binder: BINDER_SET_CONTEXT_MGR already set
[  710.899764] binder: 9948:9955 ioctl 40046207 0 returned -16
[  710.900503] binder_alloc: 9944: binder_alloc_buf, no vma
[  710.900538] binder: 9948:9955 transaction failed 29189/-3, size 40-16 line 3134
[  710.904466] binder_alloc: 9944: binder_alloc_buf, no vma
[  710.904503] binder: 9945:9951 transaction failed 29189/-3, size 40-16 line 3134
[  710.906724] binder_alloc: 9944: binder_alloc_buf, no vma
[  710.906760] binder: 9941:9952 transaction failed 29189/-3, size 40-16 line 3134
[  710.910580] binder_alloc: 9944: binder_alloc_buf, no vma
[  710.910615] binder: 9942:9954 transaction failed 29189/-3, size 40-16 line 3134
[  710.915966] binder_alloc: 9944: binder_alloc_buf, no vma
[  710.916003] binder: 9947:9956 transaction failed 29189/-3, size 40-8 line 3134
[  710.951943] binder: undelivered TRANSACTION_ERROR: 29189
[  710.986626] binder: undelivered TRANSACTION_ERROR: 29189
[  710.991943] binder: undelivered TRANSACTION_ERROR: 29189
[  711.000929] binder: undelivered TRANSACTION_ERROR: 29189
[  711.009443] binder: undelivered TRANSACTION_ERROR: 29189
[  711.015981] binder: undelivered TRANSACTION_ERROR: 29189
[  711.020781] binder: undelivered TRANSACTION_ERROR: 29189
[  711.041775] binder_alloc: 9981: binder_alloc_buf, no vma
[  711.041813] binder: 9981:9986 transaction failed 29189/-3, size 40-16 line 3134
[  711.048412] binder: BINDER_SET_CONTEXT_MGR already set
[  711.048419] binder: 9989:9997 ioctl 40046207 0 returned -16
[  711.048451] binder_alloc: 9981: binder_alloc_buf, no vma
[  711.048487] binder: 9987:9994 transaction failed 29189/-3, size 40-16 line 3134
[  711.049627] binder_alloc: 9981: binder_alloc_buf, no vma
[  711.049661] binder: 9989:9997 transaction failed 29189/-3, size 40-16 line 3134
[  711.056589] binder: BINDER_SET_CONTEXT_MGR already set
[  711.056597] binder: 9990:9998 ioctl 40046207 0 returned -16
[  711.057321] binder_alloc: 9981: binder_alloc_buf, no vma
[  711.057357] binder: 9990:9998 transaction failed 29189/-3, size 40-16 line 3134
[  711.063103] binder: undelivered TRANSACTION_ERROR: 29189
[  711.064544] binder_alloc: 9981: binder_alloc_buf, no vma
[  711.064580] binder: 9991:9999 transaction failed 29189/-3, size 40-16 line 3134
[  711.065736] binder_alloc: 9981: binder_alloc_buf, no vma
[  711.065984] binder: 9996:10001 transaction failed 29189/-3, size 40-8 line 3134
[  711.066192] binder_alloc: 9981: binder_alloc_buf, no vma
[  711.066226] binder: 9995:10002 transaction failed 29189/-3, size 40-16 line 3134
[  711.083239] binder: undelivered TRANSACTION_ERROR: 29189
[  711.125900] binder: undelivered TRANSACTION_ERROR: 29189
[  711.130574] binder: undelivered TRANSACTION_ERROR: 29189
[  711.130878] binder_alloc: 10012: binder_alloc_buf, no vma
[  711.130990] binder: 10012:10017 transaction failed 29189/-3, size 40-16 line 3134
[  711.142417] binder: undelivered TRANSACTION_ERROR: 29189
[  711.149393] binder: 10020:10024 transaction failed 29189/-22, size 40-8 line 3011
[  711.154447] binder: undelivered TRANSACTION_ERROR: 29189
[  711.168205] binder: undelivered TRANSACTION_ERROR: 29189
[  711.168274] binder: undelivered TRANSACTION_ERROR: 29189
[  711.191643] binder: undelivered TRANSACTION_ERROR: 29189
[  711.200600] binder: undelivered TRANSACTION_ERROR: 29189
[  711.226341] binder: 10037:10042 transaction failed 29189/-22, size 40-16 line 3011
[  711.230568] binder: 10038:10043 transaction failed 29189/-22, size 40-16 line 3011
[  711.232648] binder: 10034:10041 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.232741] binder: 10034:10041 transaction failed 29201/-22, size 40-16 line 3197
[  711.233887] binder: BINDER_SET_CONTEXT_MGR already set
[  711.233895] binder: 10035:10044 ioctl 40046207 0 returned -16
[  711.234710] binder: 10035:10044 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.234796] binder: 10035:10044 transaction failed 29201/-22, size 40-16 line 3197
[  711.244650] binder: BINDER_SET_CONTEXT_MGR already set
[  711.244657] binder: 10039:10047 ioctl 40046207 0 returned -16
[  711.245908] binder: 10039:10047 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.245995] binder: 10039:10047 transaction failed 29201/-22, size 40-16 line 3197
[  711.249414] binder: 10036:10048 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.249498] binder: 10036:10048 transaction failed 29201/-22, size 40-16 line 3197
[  711.284692] binder: undelivered TRANSACTION_ERROR: 29201
[  711.313457] binder: undelivered TRANSACTION_ERROR: 29189
[  711.318144] binder: BINDER_SET_CONTEXT_MGR already set
[  711.318152] binder: 10070:10076 ioctl 40046207 0 returned -16
[  711.324374] binder: undelivered TRANSACTION_ERROR: 29201
[  711.324870] binder: 10070:10076 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.324958] binder: 10070:10076 transaction failed 29201/-22, size 40-16 line 3197
[  711.350735] binder: undelivered TRANSACTION_ERROR: 29189
[  711.354405] binder: undelivered TRANSACTION_ERROR: 29201
[  711.354479] binder: send failed reply for transaction 41083 to 10040:10050
[  711.354496] binder: send failed reply for transaction 41086 to 10045:10053
[  711.365481] binder: 10079:10081 transaction failed 29189/-22, size 40-16 line 3011
[  711.376107] binder: 10088:10092 transaction failed 29189/-22, size 40-16 line 3011
[  711.381850] binder: undelivered TRANSACTION_COMPLETE
[  711.381865] binder: undelivered TRANSACTION_ERROR: 29189
[  711.414535] binder: undelivered TRANSACTION_ERROR: 29201
[  711.414610] binder: undelivered TRANSACTION_ERROR: 29201
[  711.418263] binder: 10082:10090 transaction failed 29189/-22, size 40-16 line 3011
[  711.422319] binder: 10098:10106 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.422410] binder: 10098:10106 transaction failed 29201/-22, size 40-16 line 3197
[  711.454764] binder: BINDER_SET_CONTEXT_MGR already set
[  711.454773] binder: 10109:10115 ioctl 40046207 0 returned -16
[  711.455636] binder: 10109:10115 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.455725] binder: 10109:10115 transaction failed 29201/-22, size 40-16 line 3197
[  711.473097] binder: BINDER_SET_CONTEXT_MGR already set
[  711.473104] binder: 10110:10120 ioctl 40046207 0 returned -16
[  711.478224] binder: undelivered TRANSACTION_COMPLETE
[  711.478239] binder: undelivered TRANSACTION_ERROR: 29189
[  711.480925] binder: 10110:10120 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.481009] binder: 10110:10120 transaction failed 29201/-22, size 40-16 line 3197
[  711.490993] binder: undelivered TRANSACTION_ERROR: 29189
[  711.492093] binder: undelivered TRANSACTION_ERROR: 29189
[  711.498582] binder: undelivered TRANSACTION_ERROR: 29189
[  711.527096] binder: undelivered TRANSACTION_ERROR: 29201
[  711.527151] binder: send failed reply for transaction 41099 to 10097:10103
[  711.529688] binder: 10126:10132 transaction failed 29189/-22, size 40-8 line 3011
[  711.534942] binder: undelivered TRANSACTION_COMPLETE
[  711.534957] binder: undelivered TRANSACTION_ERROR: 29189
[  711.553619] binder: undelivered TRANSACTION_ERROR: 29201
[  711.563472] binder: undelivered TRANSACTION_ERROR: 29201
[  711.581074] binder: undelivered TRANSACTION_ERROR: 29189
[  711.612192] binder: 10143:10151 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.612255] binder: BINDER_SET_CONTEXT_MGR already set
[  711.612261] binder: 10140:10146 ioctl 40046207 0 returned -16
[  711.613498] binder: 10140:10146 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.613583] binder: 10140:10146 transaction failed 29201/-22, size 40-16 line 3197
[  711.613801] binder: 10141:10148 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.614145] binder: 10141:10148 transaction failed 29201/-22, size 40-16 line 3197
[  711.620939] binder: BINDER_SET_CONTEXT_MGR already set
[  711.620949] binder: 10144:10153 ioctl 40046207 0 returned -16
[  711.621941] binder: 10144:10153 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.623322] binder: 10144:10153 transaction failed 29201/-22, size 40-16 line 3197
[  711.626997] binder: 10143:10151 transaction failed 29201/-22, size 40-16 line 3197
[  711.628797] binder: 10139:10152 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.628880] binder: 10139:10152 transaction failed 29201/-22, size 40-16 line 3197
[  711.629319] binder: 10142:10150 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.629401] binder: 10142:10150 transaction failed 29201/-22, size 40-16 line 3197
[  711.714255] binder: undelivered TRANSACTION_ERROR: 29201
[  711.727970] binder: undelivered TRANSACTION_ERROR: 29201
[  711.736290] binder: undelivered TRANSACTION_ERROR: 29201
[  711.736395] binder: release 10145:10149 transaction 41125 out, still active
[  711.736399] binder: unexpected work type, 4, not freed
[  711.736402] binder: undelivered TRANSACTION_COMPLETE
[  711.746206] binder: undelivered TRANSACTION_ERROR: 29201
[  711.755493] binder: undelivered TRANSACTION_ERROR: 29201
[  711.755572] binder: send failed reply for transaction 41125, target dead
[  711.755588] binder: send failed reply for transaction 41131 to 10147:10160
[  711.759277] binder: undelivered TRANSACTION_ERROR: 29201
[  711.762578] binder: undelivered TRANSACTION_COMPLETE
[  711.762590] binder: undelivered TRANSACTION_ERROR: 29189
[  711.762722] binder: 10187:10188 transaction failed 29189/-22, size 40-16 line 3011
[  711.781482] binder: 10189:10193 transaction failed 29189/-22, size 40-16 line 3011
[  711.781671] binder: 10190:10194 transaction failed 29189/-22, size 40-8 line 3011
[  711.790844] binder: 10191:10195 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.790934] binder: 10191:10195 transaction failed 29201/-22, size 40-16 line 3197
[  711.807972] binder: BINDER_SET_CONTEXT_MGR already set
[  711.807979] binder: 10196:10202 ioctl 40046207 0 returned -16
[  711.810186] binder: 10196:10202 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.810273] binder: 10196:10202 transaction failed 29201/-22, size 40-16 line 3197
[  711.821789] binder: 10199:10207 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.821874] binder: 10199:10207 transaction failed 29201/-22, size 40-16 line 3197
[  711.853278] binder: undelivered TRANSACTION_ERROR: 29189
[  711.889093] binder: undelivered TRANSACTION_ERROR: 29189
[  711.890946] binder: undelivered TRANSACTION_ERROR: 29189
[  711.905744] binder: undelivered TRANSACTION_ERROR: 29201
[  711.905803] binder: send failed reply for transaction 41147 to 10204:10212
[  711.924987] binder: undelivered TRANSACTION_ERROR: 29201
[  711.934054] binder: undelivered TRANSACTION_ERROR: 29201
[  711.953698] binder: undelivered TRANSACTION_COMPLETE
[  711.953712] binder: undelivered TRANSACTION_ERROR: 29189
[  711.980595] binder: 10234:10239 transaction failed 29189/-22, size 40-16 line 3011
[  711.986678] binder: 10235:10244 transaction failed 29189/-22, size 40-16 line 3011
[  711.988648] binder: 10238:10241 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.988737] binder: 10238:10241 transaction failed 29201/-22, size 40-16 line 3197
[  711.990890] binder: 10240:10242 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.990979] binder: 10240:10242 transaction failed 29201/-22, size 40-16 line 3197
[  711.995230] binder: 10236:10245 got transaction with invalid offset (0, min 24 max 40) or object.
[  711.995316] binder: 10236:10245 transaction failed 29201/-22, size 40-16 line 3197
[  712.074754] binder: undelivered TRANSACTION_ERROR: 29189
[  712.100575] binder: undelivered TRANSACTION_ERROR: 29201
[  712.112435] binder: undelivered TRANSACTION_ERROR: 29201
[  712.117324] binder: undelivered TRANSACTION_ERROR: 29189
[  712.126169] binder: undelivered TRANSACTION_ERROR: 29201
[  712.126244] binder: send failed reply for transaction 41162 to 10237:10246
[  712.126263] binder: send failed reply for transaction 41165 to 10243:10249
[  712.136273] binder: 10279:10283 transaction failed 29189/-22, size 40-16 line 3011
[  712.139092] binder: undelivered TRANSACTION_COMPLETE
[  712.139156] binder: undelivered TRANSACTION_ERROR: 29189
[  712.139451] binder: undelivered TRANSACTION_COMPLETE
[  712.139465] binder: undelivered TRANSACTION_ERROR: 29189
[  712.141984] binder: 10287:10288 transaction failed 29189/-22, size 40-16 line 3011
[  712.147047] binder: 10286:10289 transaction failed 29189/-22, size 40-16 line 3011
[  712.173202] binder: undelivered TRANSACTION_ERROR: 29189
[  712.199914] binder: undelivered TRANSACTION_ERROR: 29189
[  712.207673] binder: undelivered TRANSACTION_ERROR: 29189
[  712.242999] binder: 10304:10309 transaction failed 29189/-22, size 40-8 line 3011
[  712.246252] binder: 10301:10307 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.246342] binder: 10301:10307 transaction failed 29201/-22, size 40-16 line 3197
[  712.246635] binder: BINDER_SET_CONTEXT_MGR already set
[  712.246642] binder: 10303:10305 ioctl 40046207 0 returned -16
[  712.247629] binder: 10303:10305 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.247759] binder: 10303:10305 transaction failed 29201/-22, size 40-16 line 3197
[  712.251017] binder: 10300:10308 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.251105] binder: 10300:10308 transaction failed 29201/-22, size 40-16 line 3197
[  712.255839] binder: 10306:10311 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.255925] binder: 10306:10311 transaction failed 29201/-22, size 40-16 line 3197
[  712.258196] binder: 10310:10313 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.258283] binder: 10310:10313 transaction failed 29201/-22, size 40-16 line 3197
[  712.262548] binder: 10299:10314 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.262633] binder: 10299:10314 transaction failed 29201/-22, size 40-16 line 3197
[  712.338689] binder: undelivered TRANSACTION_ERROR: 29201
[  712.338744] binder: send failed reply for transaction 41182 to 10302:10312
[  712.343061] binder: undelivered TRANSACTION_ERROR: 29201
[  712.357983] binder: undelivered TRANSACTION_ERROR: 29201
[  712.368484] binder: undelivered TRANSACTION_ERROR: 29201
[  712.372700] binder: undelivered TRANSACTION_ERROR: 29201
[  712.373076] binder: undelivered TRANSACTION_COMPLETE
[  712.373090] binder: undelivered TRANSACTION_ERROR: 29189
[  712.373378] binder: undelivered TRANSACTION_ERROR: 29201
[  712.402806] binder: 10349:10354 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.402901] binder: 10349:10354 transaction failed 29201/-22, size 40-16 line 3197
[  712.409880] binder: BINDER_SET_CONTEXT_MGR already set
[  712.409887] binder: 10347:10356 ioctl 40046207 0 returned -16
[  712.410340] binder: 10348:10355 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.410421] binder: 10348:10355 transaction failed 29201/-22, size 40-16 line 3197
[  712.411335] binder: 10347:10356 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.411419] binder: 10347:10356 transaction failed 29201/-22, size 40-16 line 3197
[  712.412027] binder: undelivered TRANSACTION_ERROR: 29189
[  712.415963] binder: BINDER_SET_CONTEXT_MGR already set
[  712.415970] binder: 10352:10358 ioctl 40046207 0 returned -16
[  712.416900] binder: 10352:10358 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.417012] binder: 10352:10358 transaction failed 29201/-22, size 40-16 line 3197
[  712.423117] binder: 10350:10357 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.423207] binder: 10350:10357 transaction failed 29201/-22, size 40-16 line 3197
[  712.435285] binder: 10353:10360 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.435371] binder: 10353:10360 transaction failed 29201/-22, size 40-16 line 3197
[  712.452261] binder: undelivered TRANSACTION_ERROR: 29201
[  712.498964] binder: BINDER_SET_CONTEXT_MGR already set
[  712.498971] binder: 10379:10386 ioctl 40046207 0 returned -16
[  712.500204] binder: 10379:10386 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.500294] binder: 10379:10386 transaction failed 29201/-22, size 40-16 line 3197
[  712.507338] binder: undelivered TRANSACTION_ERROR: 29201
[  712.518747] binder: undelivered TRANSACTION_ERROR: 29201
[  712.518823] binder: send failed reply for transaction 41210 to 10351:10359
[  712.518841] binder: send failed reply for transaction 41219 to 10374:10389
[  712.520087] binder: undelivered TRANSACTION_ERROR: 29201
[  712.532881] binder: undelivered TRANSACTION_ERROR: 29201
[  712.543631] binder: 10393:10396 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.543709] binder: 10393:10396 transaction failed 29201/-22, size 40-16 line 3197
[  712.548061] binder: undelivered TRANSACTION_ERROR: 29201
[  712.552000] binder: undelivered TRANSACTION_COMPLETE
[  712.552015] binder: undelivered TRANSACTION_ERROR: 29189
[  712.567434] binder: undelivered TRANSACTION_ERROR: 29201
[  712.575556] binder: 10395:10402 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.575627] binder: 10395:10402 transaction failed 29201/-22, size 40-16 line 3197
[  712.587447] binder: BINDER_SET_CONTEXT_MGR already set
[  712.587455] binder: 10400:10408 ioctl 40046207 0 returned -16
[  712.588318] binder: 10400:10408 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.591614] binder: 10399:10407 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.591702] binder: 10399:10407 transaction failed 29201/-22, size 40-16 line 3197
[  712.594255] binder: 10400:10408 transaction failed 29201/-22, size 40-16 line 3197
[  712.617395] binder: undelivered TRANSACTION_ERROR: 29201
[  712.630056] binder: undelivered TRANSACTION_ERROR: 29201
[  712.641698] binder: undelivered TRANSACTION_COMPLETE
[  712.641712] binder: undelivered TRANSACTION_ERROR: 29189
[  712.657277] binder: undelivered TRANSACTION_ERROR: 29201
[  712.669986] binder: undelivered TRANSACTION_ERROR: 29201
[  712.695466] binder_alloc: 10422: binder_alloc_buf, no vma
[  712.695506] binder: 10422:10425 transaction failed 29189/-3, size 40-16 line 3134
[  712.699740] binder_alloc: 10422: binder_alloc_buf, no vma
[  712.699934] binder: 10421:10429 transaction failed 29189/-3, size 40-16 line 3134
[  712.700398] binder_alloc: 10422: binder_alloc_buf, no vma
[  712.700433] binder: 10424:10427 transaction failed 29189/-3, size 40-16 line 3134
[  712.702523] binder: BINDER_SET_CONTEXT_MGR already set
[  712.702531] binder: 10428:10433 ioctl 40046207 0 returned -16
[  712.704829] binder: BINDER_SET_CONTEXT_MGR already set
[  712.704835] binder: 10426:10431 ioctl 40046207 0 returned -16
[  712.705653] binder_alloc: 10422: binder_alloc_buf, no vma
[  712.705690] binder: 10426:10431 transaction failed 29189/-3, size 40-16 line 3134
[  712.706601] binder_alloc: 10422: binder_alloc_buf, no vma
[  712.706637] binder: 10428:10433 transaction failed 29189/-3, size 40-16 line 3134
[  712.710261] binder_alloc: 10422: binder_alloc_buf, no vma
[  712.710295] binder: 10420:10434 transaction failed 29189/-3, size 40-8 line 3134
[  712.714634] binder_alloc: 10422: binder_alloc_buf, no vma
[  712.714669] binder: 10423:10430 transaction failed 29189/-3, size 40-8 line 3134
[  712.721178] binder_alloc: 10422: binder_alloc_buf, no vma
[  712.721214] binder: 10432:10435 transaction failed 29189/-3, size 40-16 line 3134
[  712.745139] binder: undelivered TRANSACTION_ERROR: 29189
[  712.778907] binder: undelivered TRANSACTION_ERROR: 29189
[  712.794615] binder: 10459:10466 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.794704] binder: 10459:10466 transaction failed 29201/-22, size 40-16 line 3197
[  712.806803] binder: undelivered TRANSACTION_ERROR: 29189
[  712.812426] binder: undelivered TRANSACTION_ERROR: 29189
[  712.816653] binder: undelivered TRANSACTION_ERROR: 29189
[  712.823325] binder: undelivered TRANSACTION_ERROR: 29189
[  712.850666] binder: undelivered TRANSACTION_ERROR: 29189
[  712.850722] binder: undelivered TRANSACTION_ERROR: 29189
[  712.855253] binder: BINDER_SET_CONTEXT_MGR already set
[  712.855261] binder: 10475:10479 ioctl 40046207 0 returned -16
[  712.856100] binder: 10475:10479 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.856188] binder: 10475:10479 transaction failed 29201/-22, size 40-16 line 3197
[  712.857319] binder: 10473:10478 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.857388] binder: 10473:10478 transaction failed 29201/-22, size 40-16 line 3197
[  712.863682] binder: 10468:10472 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.863772] binder: 10468:10472 transaction failed 29201/-22, size 40-16 line 3197
[  712.912225] binder: undelivered TRANSACTION_ERROR: 29201
[  712.912318] binder: undelivered TRANSACTION_ERROR: 29201
[  712.912372] binder: send failed reply for transaction 41257 to 10474:10480
[  712.937102] binder: undelivered TRANSACTION_ERROR: 29201
[  712.942991] binder: undelivered TRANSACTION_ERROR: 29201
[  712.951812] binder: undelivered TRANSACTION_COMPLETE
[  712.951827] binder: undelivered TRANSACTION_ERROR: 29189
[  712.981483] binder: 10499:10505 transaction failed 29189/-22, size 40-16 line 3011
[  712.984538] binder: 10498:10510 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.985611] binder: 10498:10510 transaction failed 29201/-22, size 40-16 line 3197
[  712.985847] binder: 10497:10506 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.985943] binder: 10497:10506 transaction failed 29201/-22, size 40-16 line 3197
[  712.991780] binder: BINDER_SET_CONTEXT_MGR already set
[  712.991787] binder: 10501:10508 ioctl 40046207 0 returned -16
[  712.992626] binder: 10502:10507 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.992711] binder: 10502:10507 transaction failed 29201/-22, size 40-16 line 3197
[  712.993073] binder: 10501:10508 got transaction with invalid offset (0, min 24 max 40) or object.
[  712.993153] binder: 10501:10508 transaction failed 29201/-22, size 40-16 line 3197
[  713.001628] binder: BINDER_SET_CONTEXT_MGR already set
[  713.001635] binder: 10504:10512 ioctl 40046207 0 returned -16
[  713.002450] binder: 10504:10512 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.002537] binder: 10504:10512 transaction failed 29201/-22, size 40-16 line 3197
[  713.091782] binder: undelivered TRANSACTION_ERROR: 29201
[  713.098886] binder: undelivered TRANSACTION_ERROR: 29201
[  713.099962] binder: undelivered TRANSACTION_ERROR: 29189
[  713.100676] binder: undelivered TRANSACTION_ERROR: 29201
[  713.102032] binder: undelivered TRANSACTION_ERROR: 29201
[  713.102106] binder: send failed reply for transaction 41274 to 10503:10509
[  713.102122] binder: send failed reply for transaction 41277 to 10500:10511
[  713.123403] binder: undelivered TRANSACTION_ERROR: 29201
[  713.142169] binder: undelivered TRANSACTION_COMPLETE
[  713.142183] binder: undelivered TRANSACTION_ERROR: 29189
[  713.143164] binder: 10545:10546 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.143256] binder: 10545:10546 transaction failed 29201/-22, size 40-16 line 3197
[  713.145180] binder: undelivered TRANSACTION_COMPLETE
[  713.145194] binder: undelivered TRANSACTION_ERROR: 29189
[  713.155369] binder: BINDER_SET_CONTEXT_MGR already set
[  713.155376] binder: 10549:10551 ioctl 40046207 0 returned -16
[  713.157776] binder: 10549:10551 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.157861] binder: 10549:10551 transaction failed 29201/-22, size 40-16 line 3197
[  713.164095] binder: 10554:10556 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.164175] binder: 10554:10556 transaction failed 29201/-22, size 40-16 line 3197
[  713.166762] binder: 10552:10558 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.166846] binder: 10552:10558 transaction failed 29201/-22, size 40-16 line 3197
[  713.167322] binder: BINDER_SET_CONTEXT_MGR already set
[  713.167328] binder: 10550:10559 ioctl 40046207 0 returned -16
[  713.168512] binder: 10550:10559 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.168595] binder: 10550:10559 transaction failed 29201/-22, size 40-16 line 3197
[  713.175159] binder: 10553:10560 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.176092] binder: 10553:10560 transaction failed 29201/-22, size 40-16 line 3197
[  713.188712] binder: undelivered TRANSACTION_ERROR: 29201
[  713.223759] binder: 10570:10575 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.223850] binder: 10570:10575 transaction failed 29201/-22, size 40-16 line 3197
[  713.240237] binder: undelivered TRANSACTION_ERROR: 29201
[  713.240296] binder: send failed reply for transaction 41302 to 10557:10562
[  713.247444] binder: 10563:10579 transaction failed 29189/-22, size 40-8 line 3011
[  713.262226] binder: undelivered TRANSACTION_ERROR: 29201
[  713.278192] binder: undelivered TRANSACTION_ERROR: 29201
[  713.278651] binder: undelivered TRANSACTION_ERROR: 29201
[  713.283806] binder: undelivered TRANSACTION_ERROR: 29201
[  713.416203] binder: undelivered TRANSACTION_ERROR: 29201
[  713.448600] binder: undelivered TRANSACTION_COMPLETE
[  713.448615] binder: undelivered TRANSACTION_ERROR: 29189
[  713.496360] binder: undelivered TRANSACTION_ERROR: 29189
[  713.575463] binder: 10592:10594 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.575554] binder: 10592:10594 transaction failed 29201/-22, size 40-16 line 3197
[  713.582828] binder: BINDER_SET_CONTEXT_MGR already set
[  713.582836] binder: 10588:10593 ioctl 40046207 0 returned -16
[  713.588217] binder: 10588:10593 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.588306] binder: 10588:10593 transaction failed 29201/-22, size 40-16 line 3197
[  713.615948] binder: undelivered TRANSACTION_ERROR: 29201
[  713.625446] binder: undelivered TRANSACTION_ERROR: 29201
[  713.644779] binder: 10606:10607 transaction failed 29189/-22, size 40-16 line 3011
[  713.651058] binder: 10608:10610 transaction failed 29189/-22, size 40-16 line 3011
[  713.660222] binder: undelivered TRANSACTION_ERROR: 29189
[  713.688338] binder: undelivered TRANSACTION_ERROR: 29189
[  713.719357] binder: 10617:10619 transaction failed 29189/-22, size 40-16 line 3011
[  713.721995] binder: 10618:10624 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.722090] binder: 10618:10624 transaction failed 29201/-22, size 40-16 line 3197
[  713.724768] binder: BINDER_SET_CONTEXT_MGR already set
[  713.724775] binder: 10621:10627 ioctl 40046207 0 returned -16
[  713.730146] binder: 10621:10627 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.730234] binder: 10621:10627 transaction failed 29201/-22, size 40-16 line 3197
[  713.732628] binder: 10622:10630 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.732711] binder: 10622:10630 transaction failed 29201/-22, size 40-16 line 3197
[  713.739350] binder: 10625:10631 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.739436] binder: 10625:10631 transaction failed 29201/-22, size 40-16 line 3197
[  713.813869] binder: undelivered TRANSACTION_ERROR: 29201
[  713.828112] binder: undelivered TRANSACTION_ERROR: 29201
[  713.828191] binder: send failed reply for transaction 41329 to 10616:10629
[  713.828209] binder: send failed reply for transaction 41335 to 10620:10626
[  713.828327] binder: undelivered TRANSACTION_ERROR: 29201
[  713.833154] binder: undelivered TRANSACTION_COMPLETE
[  713.833169] binder: undelivered TRANSACTION_ERROR: 29189
[  713.834765] binder: undelivered TRANSACTION_ERROR: 29189
[  713.848394] binder: undelivered TRANSACTION_ERROR: 29201
[  713.875941] binder: 10662:10664 transaction failed 29189/-22, size 40-16 line 3011
[  713.892116] binder: undelivered TRANSACTION_ERROR: 29189
[  713.892425] binder: undelivered TRANSACTION_COMPLETE
[  713.892438] binder: undelivered TRANSACTION_ERROR: 29189
[  713.918100] binder: 10671:10676 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.918188] binder: 10671:10676 transaction failed 29201/-22, size 40-16 line 3197
[  713.923806] binder: 10672:10677 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.923893] binder: 10672:10677 transaction failed 29201/-22, size 40-16 line 3197
[  713.924774] binder: BINDER_SET_CONTEXT_MGR already set
[  713.924781] binder: 10674:10678 ioctl 40046207 0 returned -16
[  713.925741] binder: 10674:10678 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.925824] binder: 10674:10678 transaction failed 29201/-22, size 40-16 line 3197
[  713.926027] binder: BINDER_SET_CONTEXT_MGR already set
[  713.926033] binder: 10669:10679 ioctl 40046207 0 returned -16
[  713.927005] binder: 10669:10679 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.927087] binder: 10669:10679 transaction failed 29201/-22, size 40-16 line 3197
[  713.937142] binder: 10670:10683 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.937219] binder: 10670:10683 transaction failed 29201/-22, size 40-16 line 3197
[  713.938417] binder: 10675:10682 got transaction with invalid offset (0, min 24 max 40) or object.
[  713.938504] binder: 10675:10682 transaction failed 29201/-22, size 40-16 line 3197
[  714.011603] binder: undelivered TRANSACTION_ERROR: 29201
[  714.024308] binder: undelivered TRANSACTION_ERROR: 29201
[  714.024387] binder: send failed reply for transaction 41352 to 10673:10681
[  714.024403] binder: send failed reply for transaction 41361 to 10680:10684
[  714.041404] binder: undelivered TRANSACTION_COMPLETE
[  714.041418] binder: undelivered TRANSACTION_ERROR: 29189
[  714.041496] binder: undelivered TRANSACTION_ERROR: 29201
[  714.041572] binder: undelivered TRANSACTION_ERROR: 29201
[  714.050204] binder: undelivered TRANSACTION_ERROR: 29201
[  714.053028] binder: 10718:10719 transaction failed 29189/-22, size 40-8 line 3011
[  714.057911] binder: 10720:10721 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.058001] binder: 10720:10721 transaction failed 29201/-22, size 40-16 line 3197
[  714.077441] binder: undelivered TRANSACTION_ERROR: 29201
[  714.085848] binder: 10717:10728 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.085937] binder: 10717:10728 transaction failed 29201/-22, size 40-16 line 3197
[  714.091639] binder: 10722:10729 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.091730] binder: 10722:10729 transaction failed 29201/-22, size 40-16 line 3197
[  714.096135] binder: BINDER_SET_CONTEXT_MGR already set
[  714.096142] binder: 10725:10730 ioctl 40046207 0 returned -16
[  714.096838] binder: BINDER_SET_CONTEXT_MGR already set
[  714.096844] binder: 10727:10731 ioctl 40046207 0 returned -16
[  714.097767] binder: 10725:10730 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.097853] binder: 10725:10730 transaction failed 29201/-22, size 40-16 line 3197
[  714.098134] binder: 10727:10731 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.098215] binder: 10727:10731 transaction failed 29201/-22, size 40-16 line 3197
[  714.111688] binder: undelivered TRANSACTION_COMPLETE
[  714.111703] binder: undelivered TRANSACTION_ERROR: 29189
[  714.126629] binder: 10735:10742 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.126719] binder: 10735:10742 transaction failed 29201/-22, size 40-16 line 3197
[  714.142994] binder: undelivered TRANSACTION_ERROR: 29189
[  714.168868] binder: undelivered TRANSACTION_ERROR: 29201
[  714.175714] binder: undelivered TRANSACTION_ERROR: 29201
[  714.198673] binder: undelivered TRANSACTION_ERROR: 29201
[  714.204755] binder: undelivered TRANSACTION_ERROR: 29201
[  714.204965] binder: 10749:10754 transaction failed 29189/-22, size 40-8 line 3011
[  714.205038] binder: undelivered TRANSACTION_ERROR: 29201
[  714.217719] binder: undelivered TRANSACTION_ERROR: 29201
[  714.245360] binder: undelivered TRANSACTION_ERROR: 29189
[  714.287078] binder: 10770:10774 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.287442] binder: 10770:10774 transaction failed 29201/-22, size 40-16 line 3197
[  714.288660] binder: 10771:10778 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.288767] binder: 10771:10778 transaction failed 29201/-22, size 40-16 line 3197
[  714.289555] binder: BINDER_SET_CONTEXT_MGR already set
[  714.289561] binder: 10768:10775 ioctl 40046207 0 returned -16
[  714.290453] binder: 10768:10775 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.290537] binder: 10768:10775 transaction failed 29201/-22, size 40-16 line 3197
[  714.292154] binder: BINDER_SET_CONTEXT_MGR already set
[  714.292161] binder: 10769:10779 ioctl 40046207 0 returned -16
[  714.293966] binder: 10769:10779 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.294051] binder: 10769:10779 transaction failed 29201/-22, size 40-16 line 3197
[  714.296065] binder: 10772:10776 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.296151] binder: 10772:10776 transaction failed 29201/-22, size 40-16 line 3197
[  714.371898] binder: 10803:10808 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.371989] binder: 10803:10808 transaction failed 29201/-22, size 40-16 line 3197
[  714.392699] binder: undelivered TRANSACTION_ERROR: 29201
[  714.398221] binder: undelivered TRANSACTION_ERROR: 29201
[  714.409991] binder: undelivered TRANSACTION_ERROR: 29201
[  714.410221] binder: undelivered TRANSACTION_ERROR: 29201
[  714.413942] binder: release 10767:10773 transaction 41386 out, still active
[  714.413947] binder: unexpected work type, 4, not freed
[  714.413949] binder: undelivered TRANSACTION_COMPLETE
[  714.425365] binder: undelivered TRANSACTION_ERROR: 29201
[  714.425475] binder: send failed reply for transaction 41386, target dead
[  714.425491] binder: send failed reply for transaction 41404 to 10777:10788
[  714.443601] binder: 10814:10818 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.443696] binder: 10814:10818 transaction failed 29201/-22, size 40-16 line 3197
[  714.444127] binder: 10815:10817 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.444217] binder: 10815:10817 transaction failed 29201/-22, size 40-16 line 3197
[  714.451403] binder: BINDER_SET_CONTEXT_MGR already set
[  714.451411] binder: 10822:10825 ioctl 40046207 0 returned -16
[  714.454674] binder: 10822:10825 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.454762] binder: 10822:10825 transaction failed 29201/-22, size 40-16 line 3197
[  714.462522] binder: undelivered TRANSACTION_COMPLETE
[  714.462538] binder: undelivered TRANSACTION_ERROR: 29189
[  714.485736] binder: BINDER_SET_CONTEXT_MGR already set
[  714.485744] binder: 10823:10827 ioctl 40046207 0 returned -16
[  714.485873] binder: 10819:10828 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.485950] binder: 10819:10828 transaction failed 29201/-22, size 40-16 line 3197
[  714.486720] binder: 10823:10827 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.486888] binder: 10823:10827 transaction failed 29201/-22, size 40-16 line 3197
[  714.493894] binder: undelivered TRANSACTION_ERROR: 29201
[  714.538736] binder: 10843:10849 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.538818] binder: 10843:10849 transaction failed 29201/-22, size 40-16 line 3197
[  714.556851] binder: undelivered TRANSACTION_ERROR: 29201
[  714.569789] binder: undelivered TRANSACTION_ERROR: 29201
[  714.569869] binder: send failed reply for transaction 41420 to 10821:10826
[  714.569886] binder: send failed reply for transaction 41432 to 10833:10840
[  714.580438] binder: undelivered TRANSACTION_ERROR: 29201
[  714.598135] binder: undelivered TRANSACTION_ERROR: 29201
[  714.598333] binder: undelivered TRANSACTION_ERROR: 29201
[  714.602097] binder: undelivered TRANSACTION_COMPLETE
[  714.602111] binder: undelivered TRANSACTION_ERROR: 29189
[  714.632940] binder: undelivered TRANSACTION_COMPLETE
[  714.632954] binder: undelivered TRANSACTION_ERROR: 29189
[  714.638869] binder: undelivered TRANSACTION_ERROR: 29201
[  714.666554] binder: 10868:10873 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.666636] binder: 10868:10873 transaction failed 29201/-22, size 40-16 line 3197
[  714.668920] binder: 10871:10876 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.668999] binder: 10871:10876 transaction failed 29201/-22, size 40-16 line 3197
[  714.669778] binder: 10866:10874 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.669874] binder: 10866:10874 transaction failed 29201/-22, size 40-16 line 3197
[  714.676279] binder: BINDER_SET_CONTEXT_MGR already set
[  714.676294] binder: 10867:10880 ioctl 40046207 0 returned -16
[  714.677486] binder: 10867:10880 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.677573] binder: 10867:10880 transaction failed 29201/-22, size 40-16 line 3197
[  714.678132] binder: BINDER_SET_CONTEXT_MGR already set
[  714.678138] binder: 10870:10878 ioctl 40046207 0 returned -16
[  714.678957] binder: 10870:10878 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.679037] binder: 10870:10878 transaction failed 29201/-22, size 40-16 line 3197
[  714.681876] binder: 10872:10879 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.682101] binder: 10872:10879 transaction failed 29201/-22, size 40-16 line 3197
[  714.764727] binder: undelivered TRANSACTION_ERROR: 29201
[  714.779446] binder: undelivered TRANSACTION_ERROR: 29201
[  714.779525] binder: release 10869:10875 transaction 41445 out, still active
[  714.779528] binder: unexpected work type, 4, not freed
[  714.779531] binder: undelivered TRANSACTION_COMPLETE
[  714.800595] binder: undelivered TRANSACTION_ERROR: 29201
[  714.800685] binder: undelivered TRANSACTION_ERROR: 29201
[  714.806913] binder: undelivered TRANSACTION_ERROR: 29201
[  714.806989] binder: send failed reply for transaction 41445, target dead
[  714.807004] binder: send failed reply for transaction 41457 to 10877:10887
[  714.825376] binder: undelivered TRANSACTION_ERROR: 29201
[  714.829779] binder: 10918:10920 transaction failed 29189/-22, size 40-16 line 3011
[  714.833497] binder: 10919:10922 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.833589] binder: 10919:10922 transaction failed 29201/-22, size 40-16 line 3197
[  714.841603] binder: 10913:10916 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.841694] binder: 10913:10916 transaction failed 29201/-22, size 40-16 line 3197
[  714.846238] binder: undelivered TRANSACTION_COMPLETE
[  714.846252] binder: undelivered TRANSACTION_ERROR: 29189
[  714.851020] binder: 10917:10928 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.851106] binder: 10917:10928 transaction failed 29201/-22, size 40-16 line 3197
[  714.856327] binder: BINDER_SET_CONTEXT_MGR already set
[  714.856334] binder: 10924:10932 ioctl 40046207 0 returned -16
[  714.858063] binder: 10924:10932 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.858141] binder: 10924:10932 transaction failed 29201/-22, size 40-16 line 3197
[  714.862902] binder: BINDER_SET_CONTEXT_MGR already set
[  714.862909] binder: 10923:10930 ioctl 40046207 0 returned -16
[  714.863757] binder: 10923:10930 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.864001] binder: 10923:10930 transaction failed 29201/-22, size 40-16 line 3197
[  714.937664] binder: undelivered TRANSACTION_ERROR: 29189
[  714.939995] binder: undelivered TRANSACTION_ERROR: 29201
[  714.941375] binder: undelivered TRANSACTION_ERROR: 29201
[  714.941452] binder: send failed reply for transaction 41468 to 10915:10927
[  714.941511] binder: send failed reply for transaction 41480 to 10941:10947
[  714.966992] binder: undelivered TRANSACTION_ERROR: 29201
[  714.974820] binder: undelivered TRANSACTION_COMPLETE
[  714.974836] binder: undelivered TRANSACTION_ERROR: 29189
[  714.974916] binder: 10960:10965 got transaction with invalid offset (0, min 24 max 40) or object.
[  714.975007] binder: 10960:10965 transaction failed 29201/-22, size 40-16 line 3197
[  714.979889] binder: undelivered TRANSACTION_ERROR: 29201
[  714.997934] binder: undelivered TRANSACTION_ERROR: 29201
[  715.003463] binder: 10967:10969 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.003539] binder: 10967:10969 transaction failed 29201/-22, size 40-16 line 3197
[  715.004010] binder: 10961:10971 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.004095] binder: 10961:10971 transaction failed 29201/-22, size 40-16 line 3197
[  715.007693] binder: 10962:10972 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.007786] binder: 10962:10972 transaction failed 29201/-22, size 40-16 line 3197
[  715.036178] binder: undelivered TRANSACTION_COMPLETE
[  715.036194] binder: undelivered TRANSACTION_ERROR: 29189
[  715.054673] binder: undelivered TRANSACTION_ERROR: 29201
[  715.065020] binder: undelivered TRANSACTION_ERROR: 29201
[  715.083616] binder: undelivered TRANSACTION_ERROR: 29201
[  715.094030] binder: undelivered TRANSACTION_ERROR: 29201
[  715.120753] binder: 10990:10998 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.120843] binder: 10990:10998 transaction failed 29201/-22, size 40-16 line 3197
[  715.124842] binder: BINDER_SET_CONTEXT_MGR already set
[  715.124850] binder: 10987:10997 ioctl 40046207 0 returned -16
[  715.127390] binder: 10987:10997 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.127469] binder: 10987:10997 transaction failed 29201/-22, size 40-16 line 3197
[  715.128919] binder: BINDER_SET_CONTEXT_MGR already set
[  715.128925] binder: 10994:11000 ioctl 40046207 0 returned -16
[  715.130807] binder: 10991:10996 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.130884] binder: 10991:10996 transaction failed 29201/-22, size 40-16 line 3197
[  715.131203] binder: 10994:11000 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.131331] binder: 10993:10999 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.131418] binder: 10994:11000 transaction failed 29201/-22, size 40-16 line 3197
[  715.131611] binder: 10992:10995 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.132890] binder: 10992:10995 transaction failed 29201/-22, size 40-16 line 3197
[  715.132980] binder: 10993:10999 transaction failed 29201/-22, size 40-16 line 3197
[  715.225411] binder: undelivered TRANSACTION_ERROR: 29201
[  715.225483] binder: send failed reply for transaction 41515 to 10988:11002
[  715.225500] binder: send failed reply for transaction 41518 to 10989:11001
[  715.235877] binder: undelivered TRANSACTION_ERROR: 29201
[  715.246316] binder: undelivered TRANSACTION_ERROR: 29201
[  715.255957] binder: undelivered TRANSACTION_ERROR: 29201
[  715.264252] binder: 11035:11037 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.264340] binder: 11035:11037 transaction failed 29201/-22, size 40-16 line 3197
[  715.273000] binder: undelivered TRANSACTION_COMPLETE
[  715.273016] binder: undelivered TRANSACTION_ERROR: 29189
[  715.273806] binder: undelivered TRANSACTION_ERROR: 29201
[  715.285678] binder: undelivered TRANSACTION_COMPLETE
[  715.285692] binder: undelivered TRANSACTION_ERROR: 29189
[  715.285791] binder: undelivered TRANSACTION_ERROR: 29201
[  715.312858] binder: undelivered TRANSACTION_ERROR: 29201
[  715.343085] binder: 11045:11050 transaction failed 29189/-22, size 40-16 line 3011
[  715.344426] binder: 11042:11048 transaction failed 29189/-22, size 40-8 line 3011
[  715.351823] binder: 11043:11051 transaction failed 29189/-22, size 40-16 line 3011
[  715.356624] binder: 11041:11053 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.356712] binder: 11041:11053 transaction failed 29201/-22, size 40-16 line 3197
[  715.356912] binder: 11047:11052 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.356999] binder: 11047:11052 transaction failed 29201/-22, size 40-16 line 3197
[  715.357255] binder: BINDER_SET_CONTEXT_MGR already set
[  715.357264] binder: 11046:11054 ioctl 40046207 0 returned -16
[  715.358912] binder: 11046:11054 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.358999] binder: 11046:11054 transaction failed 29201/-22, size 40-16 line 3197
[  715.363057] binder: BINDER_SET_CONTEXT_MGR already set
[  715.363065] binder: 11049:11056 ioctl 40046207 0 returned -16
[  715.364163] binder: 11049:11056 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.364255] binder: 11049:11056 transaction failed 29201/-22, size 40-16 line 3197
[  715.438977] binder: undelivered TRANSACTION_ERROR: 29189
[  715.443879] binder: undelivered TRANSACTION_ERROR: 29189
[  715.455876] binder: undelivered TRANSACTION_ERROR: 29201
[  715.472288] binder: undelivered TRANSACTION_ERROR: 29201
[  715.472345] binder: send failed reply for transaction 41541 to 11044:11055
[  715.473641] binder: undelivered TRANSACTION_ERROR: 29189
[  715.483447] binder: undelivered TRANSACTION_ERROR: 29201
[  715.496357] binder: 11090:11095 transaction failed 29189/-22, size 40-16 line 3011
[  715.512536] binder: 11097:11103 transaction failed 29189/-22, size 40-16 line 3011
[  715.512753] binder: undelivered TRANSACTION_ERROR: 29201
[  715.518640] binder: undelivered TRANSACTION_COMPLETE
[  715.518655] binder: undelivered TRANSACTION_ERROR: 29189
[  715.522034] binder: 11099:11104 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.522126] binder: 11099:11104 transaction failed 29201/-22, size 40-16 line 3197
[  715.530114] binder: 11093:11100 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.530195] binder: 11093:11100 transaction failed 29201/-22, size 40-16 line 3197
[  715.535133] binder: BINDER_SET_CONTEXT_MGR already set
[  715.535142] binder: 11098:11102 ioctl 40046207 0 returned -16
[  715.535981] binder: 11098:11102 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.536227] binder: 11098:11102 transaction failed 29201/-22, size 40-16 line 3197
[  715.544577] binder: BINDER_SET_CONTEXT_MGR already set
[  715.544585] binder: 11107:11111 ioctl 40046207 0 returned -16
[  715.545790] binder: 11107:11111 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.545880] binder: 11107:11111 transaction failed 29201/-22, size 40-16 line 3197
[  715.602778] binder: undelivered TRANSACTION_ERROR: 29189
[  715.616901] binder: undelivered TRANSACTION_ERROR: 29189
[  715.631874] binder: undelivered TRANSACTION_ERROR: 29201
[  715.631959] binder: undelivered TRANSACTION_ERROR: 29201
[  715.632032] binder: send failed reply for transaction 41553 to 11092:11096
[  715.632049] binder: send failed reply for transaction 41562 to 11117:11122
[  715.640354] binder: undelivered TRANSACTION_COMPLETE
[  715.640368] binder: undelivered TRANSACTION_ERROR: 29189
[  715.651861] binder: 11138:11143 transaction failed 29189/-22, size 40-16 line 3011
[  715.656755] binder: undelivered TRANSACTION_ERROR: 29201
[  715.672736] binder: undelivered TRANSACTION_ERROR: 29201
[  715.686566] binder: undelivered TRANSACTION_COMPLETE
[  715.686581] binder: undelivered TRANSACTION_ERROR: 29189
[  715.700875] binder: undelivered TRANSACTION_ERROR: 29189
[  715.732940] binder: 11150:11162 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.733028] binder: 11150:11162 transaction failed 29201/-22, size 40-16 line 3197
[  715.735837] binder: BINDER_SET_CONTEXT_MGR already set
[  715.735845] binder: 11149:11158 ioctl 40046207 0 returned -16
[  715.736846] binder: 11149:11158 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.736930] binder: 11149:11158 transaction failed 29201/-22, size 40-16 line 3197
[  715.737265] binder: 11156:11163 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.737351] binder: 11156:11163 transaction failed 29201/-22, size 40-16 line 3197
[  715.737596] binder: 11151:11160 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.737682] binder: 11151:11160 transaction failed 29201/-22, size 40-16 line 3197
[  715.745320] binder: 11153:11159 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.745403] binder: 11153:11159 transaction failed 29201/-22, size 40-16 line 3197
[  715.748695] binder: BINDER_SET_CONTEXT_MGR already set
[  715.748702] binder: 11152:11161 ioctl 40046207 0 returned -16
[  715.749711] binder: 11152:11161 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.749795] binder: 11152:11161 transaction failed 29201/-22, size 40-16 line 3197
[  715.847074] binder: undelivered TRANSACTION_ERROR: 29201
[  715.847161] binder: undelivered TRANSACTION_ERROR: 29201
[  715.847238] binder: undelivered TRANSACTION_ERROR: 29201
[  715.851293] binder: release 11155:11157 transaction 41579 out, still active
[  715.851297] binder: unexpected work type, 4, not freed
[  715.851300] binder: undelivered TRANSACTION_COMPLETE
[  715.855307] binder: undelivered TRANSACTION_ERROR: 29201
[  715.863675] binder: undelivered TRANSACTION_ERROR: 29201
[  715.871620] binder: undelivered TRANSACTION_ERROR: 29201
[  715.871700] binder: send failed reply for transaction 41579, target dead
[  715.871715] binder: send failed reply for transaction 41588 to 11154:11164
[  715.876693] binder: undelivered TRANSACTION_COMPLETE
[  715.876708] binder: undelivered TRANSACTION_ERROR: 29189
[  715.898864] binder: 11199:11205 transaction failed 29189/-22, size 40-16 line 3011
[  715.903939] binder: 11202:11206 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.904797] binder: 11202:11206 transaction failed 29201/-22, size 40-16 line 3197
[  715.905877] binder: BINDER_SET_CONTEXT_MGR already set
[  715.905884] binder: 11203:11207 ioctl 40046207 0 returned -16
[  715.907555] binder: 11203:11207 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.907640] binder: 11203:11207 transaction failed 29201/-22, size 40-16 line 3197
[  715.907797] binder: 11197:11211 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.907886] binder: 11197:11211 transaction failed 29201/-22, size 40-16 line 3197
[  715.915466] binder: 11200:11212 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.915553] binder: 11200:11212 transaction failed 29201/-22, size 40-16 line 3197
[  715.918663] binder: BINDER_SET_CONTEXT_MGR already set
[  715.918676] binder: 11198:11210 ioctl 40046207 0 returned -16
[  715.919748] binder: 11198:11210 got transaction with invalid offset (0, min 24 max 40) or object.
[  715.919836] binder: 11198:11210 transaction failed 29201/-22, size 40-16 line 3197
[  716.008123] binder: release 11201:11213 transaction 41605 out, still active
[  716.008128] binder: unexpected work type, 4, not freed
[  716.008130] binder: undelivered TRANSACTION_COMPLETE
[  716.008215] binder: undelivered TRANSACTION_ERROR: 29201
[  716.014693] binder: undelivered TRANSACTION_ERROR: 29189
[  716.014775] binder: undelivered TRANSACTION_ERROR: 29201
[  716.037334] binder: undelivered TRANSACTION_ERROR: 29201
[  716.040218] binder: BINDER_SET_CONTEXT_MGR already set
[  716.040226] binder: 11247:11250 ioctl 40046207 0 returned -16
[  716.044202] binder: 11248:11251 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.044291] binder: 11248:11251 transaction failed 29201/-22, size 40-16 line 3197
[  716.048120] binder: undelivered TRANSACTION_ERROR: 29201
[  716.052101] binder: release 11204:11208 transaction 41611 out, still active
[  716.052105] binder: unexpected work type, 4, not freed
[  716.052108] binder: undelivered TRANSACTION_COMPLETE
[  716.063223] binder: 11246:11249 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.063312] binder: 11246:11249 transaction failed 29201/-22, size 40-16 line 3197
[  716.065198] binder: undelivered TRANSACTION_ERROR: 29201
[  716.065271] binder: send failed reply for transaction 41605, target dead
[  716.065285] binder: send failed reply for transaction 41611, target dead
[  716.103354] binder: undelivered TRANSACTION_ERROR: 29201
[  716.133399] binder: undelivered TRANSACTION_ERROR: 29201
[  716.152679] binder: 11265:11268 transaction failed 29189/-22, size 40-8 line 3011
[  716.166804] binder: BINDER_SET_CONTEXT_MGR already set
[  716.166812] binder: 11270:11272 ioctl 40046207 0 returned -16
[  716.167766] binder: 11270:11272 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.167855] binder: 11270:11272 transaction failed 29201/-22, size 40-16 line 3197
[  716.169027] binder: 11264:11276 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.171122] binder: 11266:11274 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.171213] binder: 11264:11276 transaction failed 29201/-22, size 40-16 line 3197
[  716.171334] binder: 11266:11274 transaction failed 29201/-22, size 40-16 line 3197
[  716.179478] binder: 11267:11277 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.179564] binder: 11267:11277 transaction failed 29201/-22, size 40-16 line 3197
[  716.242475] binder: undelivered TRANSACTION_ERROR: 29189
[  716.261454] binder: undelivered TRANSACTION_ERROR: 29201
[  716.269328] binder: undelivered TRANSACTION_ERROR: 29201
[  716.271640] binder: undelivered TRANSACTION_ERROR: 29201
[  716.280227] binder: send failed reply for transaction 41634 to 11271:11278
[  716.294471] binder: undelivered TRANSACTION_ERROR: 29201
[  716.300162] binder: undelivered TRANSACTION_COMPLETE
[  716.300177] binder: undelivered TRANSACTION_ERROR: 29189
[  716.306389] binder: 11306:11312 transaction failed 29189/-22, size 40-8 line 3011
[  716.313536] binder: 11309:11314 transaction failed 29189/-22, size 40-16 line 3011
[  716.322673] binder: 11307:11317 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.322755] binder: 11307:11317 transaction failed 29201/-22, size 40-16 line 3197
[  716.323289] binder: BINDER_SET_CONTEXT_MGR already set
[  716.323296] binder: 11313:11315 ioctl 40046207 0 returned -16
[  716.324163] binder: 11313:11315 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.324605] binder: 11313:11315 transaction failed 29201/-22, size 40-16 line 3197
[  716.327898] binder: 11310:11318 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.327990] binder: 11310:11318 transaction failed 29201/-22, size 40-16 line 3197
[  716.330352] binder: BINDER_SET_CONTEXT_MGR already set
[  716.330360] binder: 11308:11319 ioctl 40046207 0 returned -16
[  716.333609] binder: 11311:11320 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.333704] binder: 11311:11320 transaction failed 29201/-22, size 40-16 line 3197
[  716.388973] binder: undelivered TRANSACTION_ERROR: 29201
[  716.412093] binder: undelivered TRANSACTION_ERROR: 29189
[  716.421032] binder: undelivered TRANSACTION_ERROR: 29189
[  716.448083] binder: release 11316:11323 transaction 41652 out, still active
[  716.448087] binder: unexpected work type, 4, not freed
[  716.448089] binder: undelivered TRANSACTION_COMPLETE
[  716.452285] binder: undelivered TRANSACTION_ERROR: 29201
[  716.466525] binder: undelivered TRANSACTION_ERROR: 29201
[  716.470824] binder: undelivered TRANSACTION_ERROR: 29201
[  716.470876] binder: send failed reply for transaction 41652, target dead
[  716.483548] binder: 11353:11354 transaction failed 29189/-22, size 40-16 line 3011
[  716.498856] binder: undelivered TRANSACTION_ERROR: 29189
[  716.518004] binder: 11360:11364 transaction failed 29189/-22, size 40-16 line 3011
[  716.519596] binder: 11357:11363 transaction failed 29189/-22, size 40-8 line 3011
[  716.524674] binder: 11358:11369 transaction failed 29189/-22, size 40-16 line 3011
[  716.526377] binder: BINDER_SET_CONTEXT_MGR already set
[  716.526385] binder: 11361:11370 ioctl 40046207 0 returned -16
[  716.526843] binder: 11356:11368 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.526926] binder: 11356:11368 transaction failed 29201/-22, size 40-16 line 3197
[  716.527233] binder: 11362:11367 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.527308] binder: 11362:11367 transaction failed 29201/-22, size 40-16 line 3197
[  716.528440] binder: 11361:11370 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.528523] binder: 11361:11370 transaction failed 29201/-22, size 40-16 line 3197
[  716.532876] binder: 11365:11371 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.532962] binder: 11365:11371 transaction failed 29201/-22, size 40-16 line 3197
[  716.575610] binder: undelivered TRANSACTION_ERROR: 29201
[  716.628914] binder: undelivered TRANSACTION_ERROR: 29189
[  716.639046] binder: undelivered TRANSACTION_ERROR: 29201
[  716.639231] binder: send failed reply for transaction 41669 to 11359:11366
[  716.639695] binder: undelivered TRANSACTION_ERROR: 29189
[  716.643009] binder: undelivered TRANSACTION_COMPLETE
[  716.643023] binder: undelivered TRANSACTION_ERROR: 29189
[  716.658037] binder: undelivered TRANSACTION_ERROR: 29201
[  716.658813] binder: undelivered TRANSACTION_ERROR: 29189
[  716.673089] binder: 11397:11403 transaction failed 29189/-22, size 40-16 line 3011
[  716.675758] binder: undelivered TRANSACTION_ERROR: 29201
[  716.695791] binder: 11411:11417 transaction failed 29189/-22, size 40-16 line 3011
[  716.698476] binder: 11408:11415 transaction failed 29189/-22, size 40-8 line 3011
[  716.702554] binder: 11407:11414 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.702660] binder: 11407:11414 transaction failed 29201/-22, size 40-16 line 3197
[  716.704474] binder: 11404:11413 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.704556] binder: 11404:11413 transaction failed 29201/-22, size 40-16 line 3197
[  716.712926] binder: BINDER_SET_CONTEXT_MGR already set
[  716.712933] binder: 11406:11416 ioctl 40046207 0 returned -16
[  716.713853] binder: 11406:11416 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.713937] binder: 11406:11416 transaction failed 29201/-22, size 40-16 line 3197
[  716.718707] binder: 11412:11419 got transaction with invalid offset (0, min 24 max 40) or object.
[  716.718795] binder: 11412:11419 transaction failed 29201/-22, size 40-16 line 3197
[  716.774808] binder: undelivered TRANSACTION_ERROR: 29189
[  716.800358] binder: undelivered TRANSACTION_ERROR: 29189
[  716.817539] binder: undelivered TRANSACTION_ERROR: 29201
[  716.818864] binder: undelivered TRANSACTION_ERROR: 29189
[  716.824729] binder: undelivered TRANSACTION_ERROR: 29201
[  716.837809] binder: undelivered TRANSACTION_ERROR: 29201
[  716.837865] binder: send failed reply for transaction 41691 to 11409:11418
[  716.840770] binder: undelivered TRANSACTION_ERROR: 29201
[  716.846144] binder: undelivered TRANSACTION_COMPLETE
[  716.846158] binder: undelivered TRANSACTION_ERROR: 29189
[  716.877931] binder_alloc: 11452: binder_alloc_buf, no vma
[  716.877968] binder: 11452:11461 transaction failed 29189/-3, size 40-16 line 3134
[  716.887779] binder_alloc: 11452: binder_alloc_buf, no vma
[  716.887819] binder: 11454:11460 transaction failed 29189/-3, size 40-16 line 3134
[  716.890668] binder: BINDER_SET_CONTEXT_MGR already set
[  716.890675] binder: 11455:11464 ioctl 40046207 0 returned -16
[  716.891869] binder_alloc: 11452: binder_alloc_buf, no vma
[  716.891904] binder: 11453:11466 transaction failed 29189/-3, size 40-16 line 3134
[  716.892144] binder_alloc: 11452: binder_alloc_buf, no vma
[  716.892179] binder: 11456:11465 transaction failed 29189/-3, size 40-8 line 3134
[  716.892341] binder_alloc: 11452: binder_alloc_buf, no vma
[  716.892349] binder_alloc: 11452: binder_alloc_buf, no vma
[  716.892378] binder: 11455:11464 transaction failed 29189/-3, size 40-16 line 3134
[  716.892386] binder: 11458:11462 transaction failed 29189/-3, size 40-16 line 3134
[  716.897071] binder_alloc: 11452: binder_alloc_buf, no vma
[  716.897114] binder: 11457:11463 transaction failed 29189/-3, size 40-16 line 3134
[  716.928189] binder: undelivered TRANSACTION_ERROR: 29189
[  716.937664] binder: 11459:11467 transaction failed 29189/-22, size 40-8 line 3011
[  716.950567] binder_alloc: 11486: binder_alloc_buf, no vma
[  716.950606] binder: 11486:11488 transaction failed 29189/-3, size 40-16 line 3134
[  716.989305] binder: undelivered TRANSACTION_ERROR: 29189
[  717.010349] binder: undelivered TRANSACTION_ERROR: 29189
[  717.010434] binder: undelivered TRANSACTION_ERROR: 29189
[  717.010511] binder: undelivered TRANSACTION_ERROR: 29189
[  717.016613] binder: undelivered TRANSACTION_ERROR: 29189
[  717.021676] binder: undelivered TRANSACTION_ERROR: 29189
[  717.048700] binder: BINDER_SET_CONTEXT_MGR already set
[  717.048708] binder: 11502:11510 ioctl 40046207 0 returned -16
[  717.049584] binder_alloc: 11486: binder_alloc_buf, no vma
[  717.049624] binder: 11502:11510 transaction failed 29189/-3, size 40-16 line 3134
[  717.051361] binder: undelivered TRANSACTION_ERROR: 29189
[  717.056950] binder: 11501:11511 transaction failed 29189/-22, size 40-16 line 3011
[  717.061135] binder: 11504:11512 transaction failed 29189/-22, size 40-16 line 3011
[  717.061189] binder: 11506:11513 transaction failed 29189/-22, size 40-16 line 3011
[  717.065179] binder: 11507:11514 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.065269] binder: 11507:11514 transaction failed 29201/-22, size 40-16 line 3197
[  717.076259] binder: undelivered TRANSACTION_ERROR: 29189
[  717.103211] binder: undelivered TRANSACTION_ERROR: 29189
[  717.131803] binder: undelivered TRANSACTION_ERROR: 29189
[  717.136265] binder: undelivered TRANSACTION_ERROR: 29189
[  717.144416] binder: undelivered TRANSACTION_ERROR: 29189
[  717.160701] binder: undelivered TRANSACTION_ERROR: 29201
[  717.160756] binder: send failed reply for transaction 41713 to 11508:11515
[  717.168546] binder: undelivered TRANSACTION_COMPLETE
[  717.168560] binder: undelivered TRANSACTION_ERROR: 29189
[  717.185880] binder_alloc: 11538: binder_alloc_buf, no vma
[  717.185918] binder: 11538:11543 transaction failed 29189/-3, size 40-16 line 3134
[  717.191525] binder: BINDER_SET_CONTEXT_MGR already set
[  717.191533] binder: 11537:11545 ioctl 40046207 0 returned -16
[  717.192237] binder_alloc: 11538: binder_alloc_buf, no vma
[  717.192273] binder: 11537:11545 transaction failed 29189/-3, size 40-16 line 3134
[  717.197065] binder_alloc: 11538: binder_alloc_buf, no vma
[  717.197107] binder: 11540:11546 transaction failed 29189/-3, size 40-8 line 3134
[  717.203432] binder_alloc: 11538: binder_alloc_buf, no vma
[  717.203469] binder: 11547:11550 transaction failed 29189/-3, size 40-8 line 3134
[  717.216570] binder_alloc: 11538: binder_alloc_buf, no vma
[  717.216608] binder: 11541:11554 transaction failed 29189/-3, size 40-16 line 3134
[  717.218281] binder_alloc: 11538: binder_alloc_buf, no vma
[  717.218320] binder: 11544:11555 transaction failed 29189/-3, size 40-16 line 3134
[  717.224952] binder: BINDER_SET_CONTEXT_MGR already set
[  717.224959] binder: 11548:11557 ioctl 40046207 0 returned -16
[  717.225877] binder_alloc: 11538: binder_alloc_buf, no vma
[  717.225956] binder: 11548:11557 transaction failed 29189/-3, size 40-16 line 3134
[  717.236191] binder: undelivered TRANSACTION_ERROR: 29189
[  717.251407] binder: undelivered TRANSACTION_ERROR: 29189
[  717.263682] binder: 11570:11575 transaction failed 29189/-22, size 40-16 line 3011
[  717.271144] binder_alloc: 11568: binder_alloc_buf, no vma
[  717.271183] binder: 11568:11576 transaction failed 29189/-3, size 40-16 line 3134
[  717.291491] binder: undelivered TRANSACTION_ERROR: 29189
[  717.300716] binder: BINDER_SET_CONTEXT_MGR already set
[  717.300724] binder: 11574:11584 ioctl 40046207 0 returned -16
[  717.301436] binder_alloc: 11568: binder_alloc_buf, no vma
[  717.301480] binder: 11574:11584 transaction failed 29189/-3, size 40-16 line 3134
[  717.317860] binder: undelivered TRANSACTION_ERROR: 29189
[  717.324950] binder: undelivered TRANSACTION_ERROR: 29189
[  717.327419] binder: undelivered TRANSACTION_ERROR: 29189
[  717.328097] binder: undelivered TRANSACTION_ERROR: 29189
[  717.354284] binder: undelivered TRANSACTION_ERROR: 29189
[  717.355333] binder: 11592:11596 transaction failed 29189/-22, size 40-16 line 3011
[  717.362938] binder: 11591:11594 transaction failed 29189/-22, size 40-8 line 3011
[  717.364108] binder: undelivered TRANSACTION_ERROR: 29189
[  717.383535] binder: 11595:11599 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.383631] binder: 11595:11599 transaction failed 29201/-22, size 40-16 line 3197
[  717.388206] binder: undelivered TRANSACTION_ERROR: 29189
[  717.420986] binder: undelivered TRANSACTION_ERROR: 29189
[  717.425208] binder: undelivered TRANSACTION_ERROR: 29201
[  717.425262] binder: send failed reply for transaction 41734 to 11597:11601
[  717.451846] binder: undelivered TRANSACTION_COMPLETE
[  717.451861] binder: undelivered TRANSACTION_ERROR: 29189
[  717.460771] binder: undelivered TRANSACTION_ERROR: 29189
[  717.493060] binder: BINDER_SET_CONTEXT_MGR already set
[  717.493068] binder: 11617:11627 ioctl 40046207 0 returned -16
[  717.493376] binder: 11615:11624 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.493456] binder: 11615:11624 transaction failed 29201/-22, size 40-16 line 3197
[  717.493884] binder: 11617:11627 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.493972] binder: 11617:11627 transaction failed 29201/-22, size 40-16 line 3197
[  717.494150] binder: BINDER_SET_CONTEXT_MGR already set
[  717.494225] binder: 11619:11623 ioctl 40046207 0 returned -16
[  717.496818] binder: 11619:11623 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.496905] binder: 11619:11623 transaction failed 29201/-22, size 40-16 line 3197
[  717.498473] binder: 11618:11628 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.498567] binder: 11618:11628 transaction failed 29201/-22, size 40-16 line 3197
[  717.506100] binder: 11620:11625 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.507160] binder: 11620:11625 transaction failed 29201/-22, size 40-16 line 3197
[  717.512132] binder: 11621:11629 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.512213] binder: 11621:11629 transaction failed 29201/-22, size 40-16 line 3197
[  717.518731] binder: undelivered TRANSACTION_ERROR: 29201
[  717.548808] binder: BINDER_SET_CONTEXT_MGR already set
[  717.548816] binder: 11640:11648 ioctl 40046207 0 returned -16
[  717.553284] binder: 11640:11648 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.553372] binder: 11640:11648 transaction failed 29201/-22, size 40-16 line 3197
[  717.596477] binder: undelivered TRANSACTION_ERROR: 29201
[  717.602411] binder: undelivered TRANSACTION_ERROR: 29201
[  717.602471] binder: send failed reply for transaction 41753 to 11616:11626
[  717.602485] binder: send failed reply for transaction 41759 to 11622:11630
[  717.619497] binder: undelivered TRANSACTION_COMPLETE
[  717.619512] binder: undelivered TRANSACTION_ERROR: 29189
[  717.627257] binder: undelivered TRANSACTION_ERROR: 29201
[  717.627323] binder: undelivered TRANSACTION_ERROR: 29201
[  717.627402] binder: undelivered TRANSACTION_ERROR: 29201
[  717.644986] binder: undelivered TRANSACTION_ERROR: 29201
[  717.646983] binder: 11665:11666 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.647074] binder: 11665:11666 transaction failed 29201/-22, size 40-16 line 3197
[  717.666999] binder: undelivered TRANSACTION_COMPLETE
[  717.667013] binder: undelivered TRANSACTION_ERROR: 29189
[  717.672323] binder: 11667:11675 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.672414] binder: 11667:11675 transaction failed 29201/-22, size 40-16 line 3197
[  717.673117] binder: 11669:11673 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.673304] binder: 11669:11673 transaction failed 29201/-22, size 40-16 line 3197
[  717.682019] binder: 11670:11676 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.682114] binder: 11670:11676 transaction failed 29201/-22, size 40-16 line 3197
[  717.685588] binder: 11674:11678 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.685674] binder: 11674:11678 transaction failed 29201/-22, size 40-16 line 3197
[  717.687589] binder: BINDER_SET_CONTEXT_MGR already set
[  717.687596] binder: 11671:11680 ioctl 40046207 0 returned -16
[  717.688724] binder: 11671:11680 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.688808] binder: 11671:11680 transaction failed 29201/-22, size 40-16 line 3197
[  717.743892] binder: undelivered TRANSACTION_ERROR: 29201
[  717.743968] binder: send failed reply for transaction 41778 to 11668:11677
[  717.743985] binder: send failed reply for transaction 41787 to 11685:11692
[  717.764682] binder: undelivered TRANSACTION_ERROR: 29201
[  717.787900] binder: undelivered TRANSACTION_COMPLETE
[  717.787916] binder: undelivered TRANSACTION_ERROR: 29189
[  717.792395] binder: undelivered TRANSACTION_ERROR: 29201
[  717.805412] binder: undelivered TRANSACTION_ERROR: 29201
[  717.816009] binder: undelivered TRANSACTION_ERROR: 29201
[  717.818848] binder: 11706:11717 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.818939] binder: 11706:11717 transaction failed 29201/-22, size 40-16 line 3197
[  717.821800] binder: 11716:11721 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.821887] binder: 11716:11721 transaction failed 29201/-22, size 40-16 line 3197
[  717.831519] binder: undelivered TRANSACTION_ERROR: 29201
[  717.838755] binder: 11719:11725 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.838841] binder: 11719:11725 transaction failed 29201/-22, size 40-16 line 3197
[  717.849554] binder: 11724:11729 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.849687] binder: 11724:11729 transaction failed 29201/-22, size 40-16 line 3197
[  717.860290] binder: undelivered TRANSACTION_COMPLETE
[  717.860306] binder: undelivered TRANSACTION_ERROR: 29189
[  717.892378] binder: undelivered TRANSACTION_ERROR: 29201
[  717.912958] binder: undelivered TRANSACTION_ERROR: 29201
[  717.917279] binder: undelivered TRANSACTION_ERROR: 29201
[  717.917334] binder: send failed reply for transaction 41803 to 11720:11727
[  717.923189] binder: undelivered TRANSACTION_ERROR: 29201
[  717.942218] binder: undelivered TRANSACTION_COMPLETE
[  717.942232] binder: undelivered TRANSACTION_ERROR: 29189
[  717.971705] binder: BINDER_SET_CONTEXT_MGR already set
[  717.971712] binder: 11751:11754 ioctl 40046207 0 returned -16
[  717.972152] binder: 11748:11755 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.972248] binder: 11748:11755 transaction failed 29201/-22, size 40-16 line 3197
[  717.974614] binder: 11751:11754 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.974700] binder: 11751:11754 transaction failed 29201/-22, size 40-16 line 3197
[  717.974940] binder: 11749:11758 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.975026] binder: 11749:11758 transaction failed 29201/-22, size 40-16 line 3197
[  717.975393] binder: 11753:11756 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.975480] binder: 11753:11756 transaction failed 29201/-22, size 40-16 line 3197
[  717.985023] binder: 11752:11760 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.985108] binder: 11752:11760 transaction failed 29201/-22, size 40-16 line 3197
[  717.990099] binder: 11747:11761 got transaction with invalid offset (0, min 24 max 40) or object.
[  717.990187] binder: 11747:11761 transaction failed 29201/-22, size 40-16 line 3197
[  718.064079] binder: release 11757:11762 transaction 41828 out, still active
[  718.064084] binder: unexpected work type, 4, not freed
[  718.064086] binder: undelivered TRANSACTION_COMPLETE
[  718.067084] binder: undelivered TRANSACTION_ERROR: 29201
[  718.087930] binder: undelivered TRANSACTION_ERROR: 29201
[  718.093278] binder: undelivered TRANSACTION_ERROR: 29201
[  718.093354] binder: send failed reply for transaction 41825 to 11750:11759
[  718.093370] binder: send failed reply for transaction 41828, target dead
[  718.095607] binder: undelivered TRANSACTION_ERROR: 29201
[  718.106141] binder: undelivered TRANSACTION_ERROR: 29201
[  718.118535] binder: undelivered TRANSACTION_ERROR: 29201
[  718.125865] binder: 11798:11799 transaction failed 29189/-22, size 40-16 line 3011
[  718.132011] binder: 11797:11800 transaction failed 29189/-22, size 40-8 line 3011
[  718.142178] binder: 11802:11806 transaction failed 29189/-22, size 40-16 line 3011
[  718.154432] binder: 11801:11809 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.154527] binder: 11801:11809 transaction failed 29201/-22, size 40-16 line 3197
[  718.156413] binder: undelivered TRANSACTION_COMPLETE
[  718.156427] binder: undelivered TRANSACTION_ERROR: 29189
[  718.216076] binder: undelivered TRANSACTION_ERROR: 29189
[  718.216146] binder: undelivered TRANSACTION_ERROR: 29189
[  718.226908] binder: undelivered TRANSACTION_ERROR: 29189
[  718.233942] binder: undelivered TRANSACTION_ERROR: 29201
[  718.275494] binder: 11831:11835 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.275584] binder: 11831:11835 transaction failed 29201/-22, size 40-16 line 3197
[  718.277034] binder: 11833:11842 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.277122] binder: 11833:11842 transaction failed 29201/-22, size 40-16 line 3197
[  718.285939] binder: 11836:11841 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.286028] binder: 11836:11841 transaction failed 29201/-22, size 40-16 line 3197
[  718.292708] binder: BINDER_SET_CONTEXT_MGR already set
[  718.292718] binder: 11839:11844 ioctl 40046207 0 returned -16
[  718.296745] binder: 11838:11843 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.296920] binder: 11838:11843 transaction failed 29201/-22, size 40-16 line 3197
[  718.372275] binder: undelivered TRANSACTION_ERROR: 29201
[  718.372370] binder: send failed reply for transaction 41845 to 11834:11840
[  718.372387] binder: send failed reply for transaction 41854 to 11832:11845
[  718.382669] binder: undelivered TRANSACTION_ERROR: 29201
[  718.393270] binder: undelivered TRANSACTION_ERROR: 29201
[  718.399481] binder: undelivered TRANSACTION_COMPLETE
[  718.399496] binder: undelivered TRANSACTION_ERROR: 29189
[  718.401499] binder: undelivered TRANSACTION_ERROR: 29201
[  718.430279] binder: 11883:11888 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.430374] binder: 11883:11888 transaction failed 29201/-22, size 40-16 line 3197
[  718.430507] binder: 11880:11886 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.430588] binder: 11880:11886 transaction failed 29201/-22, size 40-16 line 3197
[  718.455421] binder: undelivered TRANSACTION_COMPLETE
[  718.455435] binder: undelivered TRANSACTION_ERROR: 29189
[  718.464021] binder: 11882:11887 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.464108] binder: 11882:11887 transaction failed 29201/-22, size 40-16 line 3197
[  718.493237] binder: undelivered TRANSACTION_ERROR: 29201
[  718.502426] binder: undelivered TRANSACTION_ERROR: 29201
[  718.524490] binder: undelivered TRANSACTION_ERROR: 29201
[  718.556386] binder: BINDER_SET_CONTEXT_MGR already set
[  718.556393] binder: 11905:11910 ioctl 40046207 0 returned -16
[  718.558837] binder: 11905:11910 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.558930] binder: 11905:11910 transaction failed 29201/-22, size 40-16 line 3197
[  718.564643] binder: 11901:11914 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.564738] binder: 11901:11914 transaction failed 29201/-22, size 40-16 line 3197
[  718.565601] binder: BINDER_SET_CONTEXT_MGR already set
[  718.565609] binder: 11906:11913 ioctl 40046207 0 returned -16
[  718.566752] binder: 11906:11913 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.566841] binder: 11906:11913 transaction failed 29201/-22, size 40-16 line 3197
[  718.567875] binder: 11908:11912 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.567961] binder: 11908:11912 transaction failed 29201/-22, size 40-16 line 3197
[  718.579495] binder: 11909:11916 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.579579] binder: 11909:11916 transaction failed 29201/-22, size 40-16 line 3197
[  718.670627] binder: undelivered TRANSACTION_ERROR: 29201
[  718.677871] binder: undelivered TRANSACTION_ERROR: 29201
[  718.678025] binder: send failed reply for transaction 41871 to 11902:11911
[  718.678043] binder: send failed reply for transaction 41886 to 11904:11915
[  718.678275] binder: undelivered TRANSACTION_ERROR: 29201
[  718.678530] binder: undelivered TRANSACTION_ERROR: 29201
[  718.707920] binder: undelivered TRANSACTION_COMPLETE
[  718.707935] binder: undelivered TRANSACTION_ERROR: 29189
[  718.714468] binder: undelivered TRANSACTION_ERROR: 29201
[  718.725994] binder: 11950:11954 transaction failed 29189/-22, size 40-16 line 3011
[  718.732816] binder: 11951:11956 transaction failed 29189/-22, size 40-16 line 3011
[  718.734039] binder_alloc: 11955: binder_alloc_buf, no vma
[  718.734193] binder: 11955:11961 transaction failed 29189/-3, size 40-16 line 3134
[  718.734993] binder: BINDER_SET_CONTEXT_MGR already set
[  718.735001] binder: 11953:11959 ioctl 40046207 0 returned -16
[  718.735727] binder_alloc: 11955: binder_alloc_buf, no vma
[  718.735764] binder: 11953:11959 transaction failed 29189/-3, size 40-16 line 3134
[  718.743109] binder_alloc: 11955: binder_alloc_buf, no vma
[  718.743147] binder: 11958:11964 transaction failed 29189/-3, size 40-8 line 3134
[  718.744249] binder: BINDER_SET_CONTEXT_MGR already set
[  718.744256] binder: 11960:11965 ioctl 40046207 0 returned -16
[  718.747777] binder_alloc: 11955: binder_alloc_buf, no vma
[  718.747814] binder: 11957:11962 transaction failed 29189/-3, size 40-16 line 3134
[  718.756308] binder: undelivered TRANSACTION_COMPLETE
[  718.756323] binder: undelivered TRANSACTION_ERROR: 29189
[  718.770072] binder: undelivered TRANSACTION_ERROR: 29189
[  718.786680] binder: undelivered TRANSACTION_ERROR: 29189
[  718.801578] binder_alloc: 11980: binder_alloc_buf, no vma
[  718.801658] binder: 11980:11984 transaction failed 29189/-3, size 40-16 line 3134
[  718.820269] binder: undelivered TRANSACTION_ERROR: 29189
[  718.822941] binder_alloc: 11980: binder_alloc_buf, no vma
[  718.822980] binder: 11975:11987 transaction failed 29189/-3, size 40-8 line 3134
[  718.833370] binder: undelivered TRANSACTION_ERROR: 29189
[  718.839100] binder: undelivered TRANSACTION_ERROR: 29189
[  718.858373] binder: undelivered TRANSACTION_ERROR: 29189
[  718.882394] binder: undelivered TRANSACTION_ERROR: 29189
[  718.887331] binder: undelivered TRANSACTION_ERROR: 29189
[  718.918159] binder: 12001:12008 transaction failed 29189/-22, size 40-16 line 3011
[  718.920877] binder: 11997:12007 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.922013] binder: 11997:12007 transaction failed 29201/-22, size 40-16 line 3197
[  718.924468] binder: 11998:12005 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.924553] binder: 11998:12005 transaction failed 29201/-22, size 40-16 line 3197
[  718.928632] binder: BINDER_SET_CONTEXT_MGR already set
[  718.928639] binder: 12004:12009 ioctl 40046207 0 returned -16
[  718.931649] binder: 12000:12011 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.931975] binder: 12000:12011 transaction failed 29201/-22, size 40-16 line 3197
[  718.936203] binder: BINDER_SET_CONTEXT_MGR already set
[  718.936211] binder: 12002:12010 ioctl 40046207 0 returned -16
[  718.937154] binder: 12002:12010 got transaction with invalid offset (0, min 24 max 40) or object.
[  718.937348] binder: 12002:12010 transaction failed 29201/-22, size 40-16 line 3197
[  718.978373] binder: undelivered TRANSACTION_ERROR: 29201
[  719.012955] binder: undelivered TRANSACTION_ERROR: 29201
[  719.015578] binder: 12033:12041 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.015714] binder: 12033:12041 transaction failed 29201/-22, size 40-16 line 3197
[  719.023850] binder: release 11999:12006 transaction 41907 out, still active
[  719.023854] binder: unexpected work type, 4, not freed
[  719.023857] binder: undelivered TRANSACTION_COMPLETE
[  719.028174] binder: undelivered TRANSACTION_ERROR: 29201
[  719.028247] binder: send failed reply for transaction 41907, target dead
[  719.028263] binder: send failed reply for transaction 41916 to 12003:12013
[  719.043614] binder: undelivered TRANSACTION_ERROR: 29201
[  719.043700] binder: undelivered TRANSACTION_ERROR: 29189
[  719.047663] binder_alloc: 12043: binder_alloc_buf, no vma
[  719.047703] binder: 12043:12044 transaction failed 29189/-3, size 40-16 line 3134
[  719.075857] binder: BINDER_SET_CONTEXT_MGR already set
[  719.075865] binder: 12047:12053 ioctl 40046207 0 returned -16
[  719.077858] binder_alloc: 12043: binder_alloc_buf, no vma
[  719.077895] binder: 12047:12053 transaction failed 29189/-3, size 40-16 line 3134
[  719.082340] binder: undelivered TRANSACTION_ERROR: 29201
[  719.082970] binder: BINDER_SET_CONTEXT_MGR already set
[  719.082977] binder: 12049:12055 ioctl 40046207 0 returned -16
[  719.091522] binder_alloc: 12043: binder_alloc_buf, no vma
[  719.091559] binder: 12054:12058 transaction failed 29189/-3, size 40-16 line 3134
[  719.093070] binder: undelivered TRANSACTION_ERROR: 29189
[  719.094653] binder: 12050:12057 transaction failed 29189/-22, size 40-16 line 3011
[  719.098391] binder: undelivered TRANSACTION_COMPLETE
[  719.098405] binder: undelivered TRANSACTION_ERROR: 29189
[  719.100615] binder: 12052:12059 transaction failed 29189/-22, size 40-8 line 3011
[  719.124399] binder: 12062:12066 transaction failed 29189/-22, size 40-16 line 3011
[  719.171439] binder: undelivered TRANSACTION_ERROR: 29189
[  719.182217] binder: undelivered TRANSACTION_ERROR: 29189
[  719.183255] binder: undelivered TRANSACTION_ERROR: 29189
[  719.189551] binder: undelivered TRANSACTION_ERROR: 29189
[  719.192595] binder: undelivered TRANSACTION_ERROR: 29189
[  719.225274] binder: 12090:12092 got transaction with invalid offset (0, min 0 max 0) or object.
[  719.225327] binder: 12090:12092 transaction failed 29201/-22, size 0-16 line 3197
[  719.225650] binder: BINDER_SET_CONTEXT_MGR already set
[  719.225657] binder: 12084:12095 ioctl 40046207 0 returned -16
[  719.226480] binder: 12084:12095 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.226565] binder: 12084:12095 transaction failed 29201/-22, size 40-16 line 3197
[  719.230580] binder: 12085:12094 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.230657] binder: 12085:12094 transaction failed 29201/-22, size 40-16 line 3197
[  719.231343] binder: BINDER_SET_CONTEXT_MGR already set
[  719.231350] binder: 12088:12097 ioctl 40046207 0 returned -16
[  719.234158] binder: 12088:12097 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.234314] binder: 12088:12097 transaction failed 29201/-22, size 40-16 line 3197
[  719.235920] binder: 12091:12098 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.235996] binder: 12091:12098 transaction failed 29201/-22, size 40-16 line 3197
[  719.236545] binder: 12089:12096 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.236631] binder: 12089:12096 transaction failed 29201/-22, size 40-16 line 3197
[  719.280341] binder: undelivered TRANSACTION_ERROR: 29201
[  719.293424] binder: undelivered TRANSACTION_ERROR: 29201
[  719.312828] binder: BINDER_SET_CONTEXT_MGR already set
[  719.312836] binder: 12122:12127 ioctl 40046207 0 returned -16
[  719.316422] binder: undelivered TRANSACTION_ERROR: 29201
[  719.316497] binder: send failed reply for transaction 41931 to 12087:12093
[  719.316514] binder: send failed reply for transaction 41949 to 12086:12099
[  719.326099] binder: 12122:12127 transaction failed 29189/-22, size 40-16 line 3011
[  719.342717] binder: undelivered TRANSACTION_ERROR: 29201
[  719.346621] binder: undelivered TRANSACTION_COMPLETE
[  719.346636] binder: undelivered TRANSACTION_ERROR: 29189
[  719.352989] binder: undelivered TRANSACTION_ERROR: 29201
[  719.363569] binder: 12131:12135 got transaction with invalid offset (0, min 0 max 0) or object.
[  719.363623] binder: 12131:12135 transaction failed 29201/-22, size 0-16 line 3197
[  719.366444] binder: undelivered TRANSACTION_ERROR: 29201
[  719.378754] binder: undelivered TRANSACTION_COMPLETE
[  719.378771] binder: undelivered TRANSACTION_ERROR: 29189
[  719.385704] binder: 12136:12140 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.385792] binder: 12136:12140 transaction failed 29201/-22, size 40-16 line 3197
[  719.390933] binder: 12137:12143 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.391025] binder: 12137:12143 transaction failed 29201/-22, size 40-16 line 3197
[  719.395918] binder: 12128:12133 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.396004] binder: 12128:12133 transaction failed 29201/-22, size 40-16 line 3197
[  719.399939] binder: BINDER_SET_CONTEXT_MGR already set
[  719.399946] binder: 12141:12146 ioctl 40046207 0 returned -16
[  719.400831] binder: 12141:12146 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.400922] binder: 12141:12146 transaction failed 29201/-22, size 40-16 line 3197
[  719.406488] binder: undelivered TRANSACTION_ERROR: 29189
[  719.435023] binder: undelivered TRANSACTION_ERROR: 29201
[  719.455586] binder: 12157:12162 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.455671] binder: 12157:12162 transaction failed 29201/-22, size 40-16 line 3197
[  719.467931] binder: undelivered TRANSACTION_ERROR: 29201
[  719.468037] binder: send failed reply for transaction 41964 to 12138:12144
[  719.468054] binder: send failed reply for transaction 41970 to 12154:12165
[  719.498954] binder: undelivered TRANSACTION_ERROR: 29201
[  719.501278] binder: undelivered TRANSACTION_ERROR: 29201
[  719.514207] binder: undelivered TRANSACTION_ERROR: 29201
[  719.516988] binder: undelivered TRANSACTION_COMPLETE
[  719.517003] binder: undelivered TRANSACTION_ERROR: 29189
[  719.537561] binder: undelivered TRANSACTION_COMPLETE
[  719.537575] binder: undelivered TRANSACTION_ERROR: 29189
[  719.546882] binder: undelivered TRANSACTION_ERROR: 29201
[  719.583452] binder: 12186:12194 transaction failed 29189/-22, size 40-16 line 3011
[  719.587942] binder: 12187:12195 got transaction with invalid offset (0, min 0 max 0) or object.
[  719.587995] binder: 12187:12195 transaction failed 29201/-22, size 0-16 line 3197
[  719.588544] binder: BINDER_SET_CONTEXT_MGR already set
[  719.588551] binder: 12184:12190 ioctl 40046207 0 returned -16
[  719.589466] binder: 12183:12192 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.589544] binder: 12183:12192 transaction failed 29201/-22, size 40-16 line 3197
[  719.589736] binder: 12184:12190 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.589818] binder: 12184:12190 transaction failed 29201/-22, size 40-16 line 3197
[  719.595452] binder: 12188:12193 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.595537] binder: 12188:12193 transaction failed 29201/-22, size 40-16 line 3197
[  719.691904] binder: undelivered TRANSACTION_ERROR: 29201
[  719.691975] binder: send failed reply for transaction 41979 to 12185:12191
[  719.691992] binder: send failed reply for transaction 41991 to 12189:12197
[  719.699163] binder: undelivered TRANSACTION_ERROR: 29189
[  719.714126] binder: undelivered TRANSACTION_ERROR: 29201
[  719.714197] binder: undelivered TRANSACTION_ERROR: 29201
[  719.714277] binder: undelivered TRANSACTION_COMPLETE
[  719.714290] binder: undelivered TRANSACTION_ERROR: 29189
[  719.718113] binder: undelivered TRANSACTION_ERROR: 29201
[  719.745462] binder: 12231:12236 transaction failed 29189/-22, size 40-16 line 3011
[  719.754705] binder: 12234:12240 transaction failed 29189/-22, size 40-8 line 3011
[  719.758148] binder: 12233:12239 transaction failed 29189/-22, size 40-16 line 3011
[  719.763951] binder: BINDER_SET_CONTEXT_MGR already set
[  719.763959] binder: 12232:12242 ioctl 40046207 0 returned -16
[  719.764988] binder: 12235:12243 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.765080] binder: 12235:12243 transaction failed 29201/-22, size 40-16 line 3197
[  719.774800] binder: 12238:12245 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.774887] binder: 12238:12245 transaction failed 29201/-22, size 40-16 line 3197
[  719.785138] binder: undelivered TRANSACTION_COMPLETE
[  719.785154] binder: undelivered TRANSACTION_ERROR: 29189
[  719.860528] binder: undelivered TRANSACTION_ERROR: 29189
[  719.861399] binder: undelivered TRANSACTION_ERROR: 29189
[  719.885038] binder: undelivered TRANSACTION_ERROR: 29189
[  719.885254] binder: undelivered TRANSACTION_ERROR: 29201
[  719.885328] binder: send failed reply for transaction 42001 to 12232:12242
[  719.885345] binder: send failed reply for transaction 42007 to 12269:12270
[  719.885461] binder: undelivered TRANSACTION_COMPLETE
[  719.885474] binder: undelivered TRANSACTION_ERROR: 29189
[  719.894015] binder: 12277:12279 transaction failed 29189/-22, size 40-16 line 3011
[  719.910854] binder: undelivered TRANSACTION_ERROR: 29201
[  719.912905] binder: 12278:12281 transaction failed 29189/-22, size 40-8 line 3011
[  719.918186] binder: 12282:12286 got transaction with invalid offset (0, min 24 max 40) or object.
[  719.918279] binder: 12282:12286 transaction failed 29201/-22, size 40-16 line 3197
[  719.964913] binder: undelivered TRANSACTION_COMPLETE
[  719.964928] binder: undelivered TRANSACTION_ERROR: 29189
[  719.984418] binder: undelivered TRANSACTION_ERROR: 29189
[  719.984503] binder: undelivered TRANSACTION_ERROR: 29189
[  720.000328] binder: undelivered TRANSACTION_ERROR: 29201
[  720.050511] binder: BINDER_SET_CONTEXT_MGR already set
[  720.050519] binder: 12310:12314 ioctl 40046207 0 returned -16
[  720.053088] binder: BINDER_SET_CONTEXT_MGR already set
[  720.053096] binder: 12303:12312 ioctl 40046207 0 returned -16
[  720.054221] binder: 12310:12314 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.054311] binder: 12310:12314 transaction failed 29201/-22, size 40-16 line 3197
[  720.055365] binder: 12307:12313 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.055452] binder: 12307:12313 transaction failed 29201/-22, size 40-16 line 3197
[  720.055942] binder: 12305:12315 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.056026] binder: 12305:12315 transaction failed 29201/-22, size 40-16 line 3197
[  720.162769] binder: release 12308:12316 transaction 42029 out, still active
[  720.162773] binder: unexpected work type, 4, not freed
[  720.162776] binder: undelivered TRANSACTION_COMPLETE
[  720.162901] binder: undelivered TRANSACTION_ERROR: 29201
[  720.163054] binder: undelivered TRANSACTION_ERROR: 29201
[  720.168617] binder: release 12304:12311 transaction 42017 out, still active
[  720.168622] binder: unexpected work type, 4, not freed
[  720.168624] binder: undelivered TRANSACTION_COMPLETE
[  720.168726] binder: send failed reply for transaction 42017, target dead
[  720.168738] binder: send failed reply for transaction 42029, target dead
[  720.168751] binder: send failed reply for transaction 42032 to 12306:12319
[  720.186244] binder: undelivered TRANSACTION_COMPLETE
[  720.186259] binder: undelivered TRANSACTION_ERROR: 29189
[  720.186860] binder: undelivered TRANSACTION_ERROR: 29201
[  720.203460] binder: 12352:12357 transaction failed 29189/-22, size 40-8 line 3011
[  720.206100] binder: BINDER_SET_CONTEXT_MGR already set
[  720.206107] binder: 12356:12359 ioctl 40046207 0 returned -16
[  720.206984] binder: BINDER_SET_CONTEXT_MGR already set
[  720.206991] binder: 12355:12360 ioctl 40046207 0 returned -16
[  720.207755] binder: 12356:12359 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.207998] binder: 12356:12359 transaction failed 29201/-22, size 40-16 line 3197
[  720.213989] binder: 12353:12361 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.214073] binder: 12353:12361 transaction failed 29201/-22, size 40-16 line 3197
[  720.271042] binder: undelivered TRANSACTION_ERROR: 29201
[  720.278591] binder: undelivered TRANSACTION_ERROR: 29189
[  720.280254] binder: undelivered TRANSACTION_ERROR: 29201
[  720.295835] binder: release 12355:12360 transaction 42040 out, still active
[  720.295839] binder: unexpected work type, 4, not freed
[  720.295841] binder: undelivered TRANSACTION_COMPLETE
[  720.295985] binder: send failed reply for transaction 42040, target dead
[  720.321536] binder: 12380:12387 transaction failed 29189/-22, size 40-8 line 3011
[  720.322992] binder: 12381:12391 transaction failed 29189/-22, size 0-16 line 3011
[  720.326927] binder: 12386:12392 transaction failed 29189/-22, size 40-16 line 3011
[  720.331842] binder: BINDER_SET_CONTEXT_MGR already set
[  720.331849] binder: 12382:12390 ioctl 40046207 0 returned -16
[  720.332526] binder: BINDER_SET_CONTEXT_MGR already set
[  720.332532] binder: 12385:12389 ioctl 40046207 0 returned -16
[  720.333780] binder: 12385:12389 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.333869] binder: 12385:12389 transaction failed 29201/-22, size 40-16 line 3197
[  720.342193] binder: 12379:12393 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.342276] binder: 12379:12393 transaction failed 29201/-22, size 40-16 line 3197
[  720.418558] binder: undelivered TRANSACTION_ERROR: 29189
[  720.438340] binder: send failed reply for transaction 42050 to 12382:12390
[  720.438356] binder: send failed reply for transaction 42059 to 12384:12394
[  720.438474] binder: undelivered TRANSACTION_ERROR: 29189
[  720.456797] binder: undelivered TRANSACTION_ERROR: 29201
[  720.459941] binder: undelivered TRANSACTION_ERROR: 29201
[  720.460288] binder: undelivered TRANSACTION_ERROR: 29189
[  720.475965] binder: undelivered TRANSACTION_COMPLETE
[  720.475981] binder: undelivered TRANSACTION_ERROR: 29189
[  720.488667] binder: 12428:12429 transaction failed 29189/-22, size 40-8 line 3011
[  720.488890] binder: undelivered TRANSACTION_COMPLETE
[  720.488904] binder: undelivered TRANSACTION_ERROR: 29189
[  720.518628] binder: undelivered TRANSACTION_ERROR: 29189
[  720.550307] binder: 12438:12443 transaction failed 29189/-22, size 0-16 line 3011
[  720.552046] binder: BINDER_SET_CONTEXT_MGR already set
[  720.552053] binder: 12436:12441 ioctl 40046207 0 returned -16
[  720.553616] binder: 12437:12445 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.553703] binder: 12437:12445 transaction failed 29201/-22, size 40-16 line 3197
[  720.554200] binder: 12435:12442 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.554279] binder: 12435:12442 transaction failed 29201/-22, size 40-16 line 3197
[  720.557428] binder: BINDER_SET_CONTEXT_MGR already set
[  720.557435] binder: 12434:12444 ioctl 40046207 0 returned -16
[  720.563054] binder: 12433:12447 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.563393] binder: 12433:12447 transaction failed 29201/-22, size 40-16 line 3197
[  720.663346] binder: undelivered TRANSACTION_ERROR: 29201
[  720.663439] binder: send failed reply for transaction 42068 to 12436:12441
[  720.663457] binder: send failed reply for transaction 42077 to 12439:12448
[  720.663472] binder: send failed reply for transaction 42080 to 12440:12446
[  720.663603] binder: undelivered TRANSACTION_ERROR: 29189
[  720.667362] binder: undelivered TRANSACTION_ERROR: 29201
[  720.672140] binder: undelivered TRANSACTION_ERROR: 29201
[  720.681012] binder: undelivered TRANSACTION_COMPLETE
[  720.681028] binder: undelivered TRANSACTION_ERROR: 29189
[  720.691886] binder: undelivered TRANSACTION_COMPLETE
[  720.691900] binder: undelivered TRANSACTION_ERROR: 29189
[  720.701802] binder: 12480:12486 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.701892] binder: 12480:12486 transaction failed 29201/-22, size 40-16 line 3197
[  720.713365] binder: 12483:12485 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.713450] binder: 12483:12485 transaction failed 29201/-22, size 40-16 line 3197
[  720.716677] binder: undelivered TRANSACTION_COMPLETE
[  720.716692] binder: undelivered TRANSACTION_ERROR: 29189
[  720.717040] binder: BINDER_SET_CONTEXT_MGR already set
[  720.717046] binder: 12484:12487 ioctl 40046207 0 returned -16
[  720.717222] binder: 12484:12487 got transaction with invalid offset (0, min 0 max 0) or object.
[  720.717276] binder: 12484:12487 transaction failed 29201/-22, size 0-16 line 3197
[  720.729361] binder: 12481:12491 got transaction with invalid offset (0, min 0 max 0) or object.
[  720.729415] binder: 12481:12491 transaction failed 29201/-22, size 0-16 line 3197
[  720.731455] binder: BINDER_SET_CONTEXT_MGR already set
[  720.731462] binder: 12488:12496 ioctl 40046207 0 returned -16
[  720.737363] binder: 12490:12492 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.737449] binder: 12490:12492 transaction failed 29201/-22, size 40-16 line 3197
[  720.830050] binder: undelivered TRANSACTION_ERROR: 29201
[  720.830137] binder: undelivered TRANSACTION_ERROR: 29201
[  720.835951] binder: undelivered TRANSACTION_ERROR: 29201
[  720.836046] binder: send failed reply for transaction 42092 to 12488:12496
[  720.836062] binder: send failed reply for transaction 42098 to 12489:12497
[  720.836078] binder: send failed reply for transaction 42101 to 12498:12505
[  720.841344] binder: undelivered TRANSACTION_ERROR: 29201
[  720.854637] binder: undelivered TRANSACTION_COMPLETE
[  720.854651] binder: undelivered TRANSACTION_ERROR: 29189
[  720.854735] binder: undelivered TRANSACTION_COMPLETE
[  720.854747] binder: undelivered TRANSACTION_ERROR: 29189
[  720.854826] binder: undelivered TRANSACTION_ERROR: 29201
[  720.869956] binder: 12530:12535 got transaction with invalid offset (0, min 0 max 0) or object.
[  720.870012] binder: 12530:12535 transaction failed 29201/-22, size 0-16 line 3197
[  720.882700] binder: undelivered TRANSACTION_COMPLETE
[  720.882715] binder: undelivered TRANSACTION_ERROR: 29189
[  720.891137] binder: BINDER_SET_CONTEXT_MGR already set
[  720.891144] binder: 12531:12534 ioctl 40046207 0 returned -16
[  720.892006] binder: 12531:12534 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.892092] binder: 12531:12534 transaction failed 29201/-22, size 40-16 line 3197
[  720.920337] binder: undelivered TRANSACTION_ERROR: 29201
[  720.920392] binder: send failed reply for transaction 42109 to 12528:12533
[  720.932370] binder: undelivered TRANSACTION_ERROR: 29201
[  720.951448] binder: undelivered TRANSACTION_COMPLETE
[  720.951463] binder: undelivered TRANSACTION_ERROR: 29189
[  720.984065] binder: 12546:12550 transaction failed 29189/-22, size 40-8 line 3011
[  720.988292] binder: 12547:12552 got transaction with invalid offset (0, min 0 max 0) or object.
[  720.988352] binder: 12547:12552 transaction failed 29201/-22, size 0-16 line 3197
[  720.992473] binder: 12549:12556 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.992554] binder: 12549:12556 transaction failed 29201/-22, size 40-16 line 3197
[  720.993158] binder: 12545:12558 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.993246] binder: 12545:12558 transaction failed 29201/-22, size 40-16 line 3197
[  720.994822] binder: BINDER_SET_CONTEXT_MGR already set
[  720.994829] binder: 12548:12555 ioctl 40046207 0 returned -16
[  720.995924] binder: 12548:12555 got transaction with invalid offset (0, min 24 max 40) or object.
[  720.996007] binder: 12548:12555 transaction failed 29201/-22, size 40-16 line 3197
[  721.006793] binder: BINDER_SET_CONTEXT_MGR already set
[  721.006801] binder: 12553:12561 ioctl 40046207 0 returned -16
[  721.007651] binder: 12553:12561 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.007739] binder: 12553:12561 transaction failed 29201/-22, size 40-16 line 3197
[  721.080048] binder: undelivered TRANSACTION_ERROR: 29189
[  721.092645] binder: undelivered TRANSACTION_ERROR: 29201
[  721.092723] binder: send failed reply for transaction 42124 to 12554:12557
[  721.092742] binder: send failed reply for transaction 42130 to 12551:12559
[  721.103922] binder: undelivered TRANSACTION_ERROR: 29201
[  721.106617] binder: undelivered TRANSACTION_COMPLETE
[  721.106633] binder: undelivered TRANSACTION_ERROR: 29189
[  721.116960] binder: undelivered TRANSACTION_ERROR: 29201
[  721.117051] binder: undelivered TRANSACTION_ERROR: 29201
[  721.119771] binder: undelivered TRANSACTION_ERROR: 29201
[  721.143569] binder: undelivered TRANSACTION_COMPLETE
[  721.143583] binder: undelivered TRANSACTION_ERROR: 29189
[  721.147887] binder: 12593:12598 transaction failed 29189/-22, size 40-8 line 3011
[  721.152262] binder: 12596:12600 transaction failed 29189/-22, size 40-16 line 3011
[  721.163401] binder: 12599:12605 transaction failed 29189/-22, size 40-16 line 3011
[  721.163528] binder: BINDER_SET_CONTEXT_MGR already set
[  721.163534] binder: 12601:12606 ioctl 40046207 0 returned -16
[  721.164657] binder: 12601:12606 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.164745] binder: 12601:12606 transaction failed 29201/-22, size 40-16 line 3197
[  721.168829] binder: BINDER_SET_CONTEXT_MGR already set
[  721.168837] binder: 12602:12608 ioctl 40046207 0 returned -16
[  721.170495] binder: 12602:12608 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.170586] binder: 12602:12608 transaction failed 29201/-22, size 40-16 line 3197
[  721.243181] binder: undelivered TRANSACTION_ERROR: 29189
[  721.258506] binder: undelivered TRANSACTION_ERROR: 29189
[  721.271841] binder: undelivered TRANSACTION_ERROR: 29201
[  721.271928] binder: release 12597:12604 transaction 42143 out, still active
[  721.271932] binder: unexpected work type, 4, not freed
[  721.271934] binder: undelivered TRANSACTION_COMPLETE
[  721.272121] binder: release 12595:12603 transaction 42138 out, still active
[  721.272125] binder: unexpected work type, 4, not freed
[  721.272127] binder: undelivered TRANSACTION_COMPLETE
[  721.272226] binder: send failed reply for transaction 42138, target dead
[  721.272245] binder: send failed reply for transaction 42143, target dead
[  721.272259] binder: send failed reply for transaction 42149 to 12613:12620
[  721.272471] binder: undelivered TRANSACTION_ERROR: 29189
[  721.298016] binder: undelivered TRANSACTION_ERROR: 29201
[  721.300980] binder: 12640:12642 transaction failed 29189/-22, size 40-8 line 3011
[  721.316907] binder: 12644:12650 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.316997] binder: 12644:12650 transaction failed 29201/-22, size 40-16 line 3197
[  721.317449] binder: 12643:12649 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.317535] binder: 12643:12649 transaction failed 29201/-22, size 40-16 line 3197
[  721.317767] binder: 12645:12651 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.317852] binder: 12645:12651 transaction failed 29201/-22, size 40-16 line 3197
[  721.318872] binder: BINDER_SET_CONTEXT_MGR already set
[  721.318881] binder: 12647:12653 ioctl 40046207 0 returned -16
[  721.358209] binder: undelivered TRANSACTION_COMPLETE
[  721.358224] binder: undelivered TRANSACTION_ERROR: 29189
[  721.401160] binder: undelivered TRANSACTION_ERROR: 29201
[  721.401255] binder: release 12647:12653 transaction 42163 out, still active
[  721.401259] binder: unexpected work type, 4, not freed
[  721.401261] binder: undelivered TRANSACTION_COMPLETE
[  721.408132] binder: undelivered TRANSACTION_ERROR: 29201
[  721.416095] binder: undelivered TRANSACTION_ERROR: 29189
[  721.422991] binder: undelivered TRANSACTION_ERROR: 29201
[  721.423044] binder: send failed reply for transaction 42163, target dead
[  721.455828] binder: 12677:12680 transaction failed 29189/-22, size 40-16 line 3011
[  721.466802] binder: BINDER_SET_CONTEXT_MGR already set
[  721.466810] binder: 12683:12688 ioctl 40046207 0 returned -16
[  721.467776] binder: 12683:12688 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.467864] binder: 12683:12688 transaction failed 29201/-22, size 40-16 line 3197
[  721.468997] binder: 12679:12686 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.469080] binder: 12679:12686 transaction failed 29201/-22, size 40-16 line 3197
[  721.469725] binder: BINDER_SET_CONTEXT_MGR already set
[  721.469731] binder: 12674:12687 ioctl 40046207 0 returned -16
[  721.470860] binder: 12674:12687 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.470942] binder: 12674:12687 transaction failed 29201/-22, size 40-16 line 3197
[  721.554024] binder: undelivered TRANSACTION_ERROR: 29189
[  721.573829] binder: release 12678:12682 transaction 42174 out, still active
[  721.573834] binder: unexpected work type, 4, not freed
[  721.573837] binder: undelivered TRANSACTION_COMPLETE
[  721.574201] binder: release 12675:12681 transaction 42168 out, still active
[  721.574204] binder: unexpected work type, 4, not freed
[  721.574207] binder: undelivered TRANSACTION_COMPLETE
[  721.574334] binder: send failed reply for transaction 42168, target dead
[  721.574349] binder: send failed reply for transaction 42170 to 12676:12684
[  721.574365] binder: send failed reply for transaction 42174, target dead
[  721.574380] binder: send failed reply for transaction 42186 to 12685:12692
[  721.583675] binder: undelivered TRANSACTION_ERROR: 29201
[  721.583910] binder: undelivered TRANSACTION_COMPLETE
[  721.583922] binder: undelivered TRANSACTION_ERROR: 29189
[  721.583997] binder: undelivered TRANSACTION_ERROR: 29201
[  721.585350] binder: undelivered TRANSACTION_COMPLETE
[  721.585364] binder: undelivered TRANSACTION_ERROR: 29189
[  721.598217] binder: undelivered TRANSACTION_ERROR: 29201
[  721.616801] binder: 12724:12726 transaction failed 29189/-22, size 40-8 line 3011
[  721.627543] binder: 12723:12730 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.627634] binder: 12723:12730 transaction failed 29201/-22, size 40-16 line 3197
[  721.672425] binder: release 12725:12727 transaction 42191 out, still active
[  721.672430] binder: unexpected work type, 4, not freed
[  721.672432] binder: undelivered TRANSACTION_COMPLETE
[  721.672517] binder: send failed reply for transaction 42191, target dead
[  721.672532] binder: send failed reply for transaction 42197 to 12728:12731
[  721.685572] binder: undelivered TRANSACTION_ERROR: 29201
[  721.691367] binder: undelivered TRANSACTION_COMPLETE
[  721.691381] binder: undelivered TRANSACTION_ERROR: 29189
[  721.703072] binder: undelivered TRANSACTION_ERROR: 29189
[  721.734789] binder: 12747:12754 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.734877] binder: 12747:12754 transaction failed 29201/-22, size 40-16 line 3197
[  721.738821] binder: BINDER_SET_CONTEXT_MGR already set
[  721.738829] binder: 12748:12757 ioctl 40046207 0 returned -16
[  721.742355] binder: 12748:12757 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.742442] binder: 12748:12757 transaction failed 29201/-22, size 40-16 line 3197
[  721.746494] binder: 12745:12753 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.746584] binder: 12745:12753 transaction failed 29201/-22, size 40-16 line 3197
[  721.750165] binder: BINDER_SET_CONTEXT_MGR already set
[  721.750173] binder: 12750:12759 ioctl 40046207 0 returned -16
[  721.753627] binder: 12746:12755 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.753714] binder: 12746:12755 transaction failed 29201/-22, size 40-16 line 3197
[  721.848299] binder: release 12744:12752 transaction 42207 out, still active
[  721.848304] binder: unexpected work type, 4, not freed
[  721.848307] binder: undelivered TRANSACTION_COMPLETE
[  721.849751] binder: undelivered TRANSACTION_ERROR: 29201
[  721.849851] binder: send failed reply for transaction 42207, target dead
[  721.849863] binder: send failed reply for transaction 42213 to 12750:12759
[  721.849876] binder: send failed reply for transaction 42219 to 12749:12756
[  721.849889] binder: send failed reply for transaction 42222 to 12751:12758
[  721.855773] binder: undelivered TRANSACTION_COMPLETE
[  721.855788] binder: undelivered TRANSACTION_ERROR: 29189
[  721.855962] binder: undelivered TRANSACTION_COMPLETE
[  721.855975] binder: undelivered TRANSACTION_ERROR: 29189
[  721.861796] binder: undelivered TRANSACTION_ERROR: 29201
[  721.874751] binder: undelivered TRANSACTION_ERROR: 29201
[  721.880012] binder: undelivered TRANSACTION_COMPLETE
[  721.880026] binder: undelivered TRANSACTION_ERROR: 29189
[  721.896335] binder: 12795:12801 transaction failed 29189/-22, size 40-16 line 3011
[  721.903360] binder: BINDER_SET_CONTEXT_MGR already set
[  721.903368] binder: 12798:12800 ioctl 40046207 0 returned -16
[  721.904386] binder: 12798:12800 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.905011] binder: BINDER_SET_CONTEXT_MGR already set
[  721.905018] binder: 12794:12803 ioctl 40046207 0 returned -16
[  721.905622] binder: 12798:12800 transaction failed 29201/-22, size 40-16 line 3197
[  721.907060] binder: 12794:12803 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.907143] binder: 12794:12803 transaction failed 29201/-22, size 40-16 line 3197
[  721.908639] binder: undelivered TRANSACTION_ERROR: 29201
[  721.924114] binder: 12799:12804 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.924210] binder: 12799:12804 transaction failed 29201/-22, size 40-16 line 3197
[  721.967458] binder: 12811:12823 got transaction with invalid offset (0, min 24 max 40) or object.
[  721.967547] binder: 12811:12823 transaction failed 29201/-22, size 40-16 line 3197
[  722.005901] binder: undelivered TRANSACTION_ERROR: 29201
[  722.016112] binder: release 12796:12802 transaction 42227 out, still active
[  722.016117] binder: unexpected work type, 4, not freed
[  722.016119] binder: undelivered TRANSACTION_COMPLETE
[  722.016225] binder: send failed reply for transaction 42227, target dead
[  722.016241] binder: send failed reply for transaction 42239 to 12797:12806
[  722.016258] binder: send failed reply for transaction 42245 to 12805:12821
[  722.021993] binder: undelivered TRANSACTION_ERROR: 29201
[  722.028070] binder: undelivered TRANSACTION_ERROR: 29189
[  722.046746] binder: undelivered TRANSACTION_ERROR: 29201
[  722.062851] binder: undelivered TRANSACTION_COMPLETE
[  722.062866] binder: undelivered TRANSACTION_ERROR: 29189
[  722.063330] binder: undelivered TRANSACTION_ERROR: 29201
[  722.078008] binder: undelivered TRANSACTION_COMPLETE
[  722.078022] binder: undelivered TRANSACTION_ERROR: 29189
[  722.082637] binder: 12837:12840 got transaction with invalid offset (0, min 24 max 40) or object.
[  722.082731] binder: 12837:12840 transaction failed 29201/-22, size 40-16 line 3197
[  722.108955] binder: undelivered TRANSACTION_ERROR: 29201
[  722.145880] binder: 12850:12859 transaction failed 29189/-22, size 40-8 line 3011
[  722.150133] binder: 12847:12860 got transaction with invalid offset (0, min 24 max 40) or object.
[  722.150222] binder: 12847:12860 transaction failed 29201/-22, size 40-16 line 3197
[  722.150264] binder: BINDER_SET_CONTEXT_MGR already set
[  722.150270] binder: 12849:12856 ioctl 40046207 0 returned -16
[  722.151096] binder: 12849:12856 got transaction with invalid offset (0, min 24 max 40) or object.
[  722.151190] binder: 12849:12856 transaction failed 29201/-22, size 40-16 line 3197
[  722.152275] binder: 12848:12852 got transaction with invalid offset (0, min 24 max 40) or object.
[  722.152362] binder: 12848:12852 transaction failed 29201/-22, size 40-16 line 3197
[  722.154911] binder: BINDER_SET_CONTEXT_MGR already set
[  722.155044] binder: 12857:12861 ioctl 40046207 0 returned -16
[  722.156489] binder: 12857:12861 got transaction with invalid offset (0, min 24 max 40) or object.
[  722.156574] binder: 12857:12861 transaction failed 29201/-22, size 40-16 line 3197
[  722.158479] binder: 12851:12855 got transaction with invalid offset (0, min 24 max 40) or object.
[  722.158561] binder: 12851:12855 transaction failed 29201/-22, size 40-16 line 3197
[  722.165455] binder: 12853:12858 got transaction with invalid offset (0, min 24 max 40) or object.
[  722.165541] binder: 12853:12858 transaction failed 29201/-22, size 40-16 line 3197
[  722.179386] INFO: task init:23389 blocked for more than 120 seconds.
[  722.179390]       Not tainted 4.4.125-g38f41ec #63
[  722.179393] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  722.179414] init            D ffff88019761f718 29272 23389      1 0x00000000
[  722.179423]  ffff88019761f718 ffff8800adc19800 0000000000000000 0000000000000007
[  722.179431]  ffff8800adc19800 ffff8801db31fdb8 ffff8801db31fde0 ffff8801db31f4d8
[  722.179439]  ffff8801db31f4c0 ffff8800b609c800 ffff8800adc19800 0000000000000000
[  722.179441] Call Trace:
[  722.179455]  [<ffffffff8376b82a>] schedule+0x7a/0x1b0
[  722.179461]  [<ffffffff8376c023>] schedule_preempt_disabled+0x13/0x20
[  722.179467]  [<ffffffff837705e6>] mutex_lock_nested+0x306/0x850
[  722.179477]  [<ffffffff81f4f7ea>] ? tty_open+0x4ca/0xee0
[  722.179484]  [<ffffffff837702e0>] ? __ww_mutex_lock+0x14f0/0x14f0
[  722.179490]  [<ffffffff81f4f478>] ? tty_open+0x158/0xee0
[  722.179499]  [<ffffffff814f9d40>] ? kmem_cache_alloc_trace+0x100/0x2b0
[  722.179506]  [<ffffffff81f4f7ea>] tty_open+0x4ca/0xee0
[  722.179512]  [<ffffffff81f4f320>] ? tty_init_dev+0x430/0x430
[  722.179520]  [<ffffffff8152a507>] ? chrdev_open+0xc7/0x4c0
[  722.179527]  [<ffffffff81f4f320>] ? tty_init_dev+0x430/0x430
[  722.179532]  [<ffffffff8152a66b>] chrdev_open+0x22b/0x4c0
[  722.179539]  [<ffffffff8152a440>] ? cdev_put.part.0+0x50/0x50
[  722.179546]  [<ffffffff8151881b>] do_dentry_open+0x59b/0xba0
[  722.179552]  [<ffffffff8153cfab>] ? __inode_permission2+0x9b/0x240
[  722.179557]  [<ffffffff8152a440>] ? cdev_put.part.0+0x50/0x50
[  722.179564]  [<ffffffff8151c0e0>] vfs_open+0x110/0x210
[  722.179569]  [<ffffffff8153d59e>] ? may_open+0x1ae/0x280
[  722.179576]  [<ffffffff8154d373>] path_openat+0x923/0x3940
[  722.179583]  [<ffffffff81daf873>] ? depot_save_stack+0x1c3/0x640
[  722.179590]  [<ffffffff8154ca50>] ? path_mountpoint+0x830/0x830
[  722.179596]  [<ffffffff815508cb>] ? getname_flags+0xcb/0x580
[  722.179601]  [<ffffffff81550d99>] ? getname+0x19/0x20
[  722.179608]  [<ffffffff8151c96f>] ? do_sys_open+0x21f/0x660
[  722.179614]  [<ffffffff8151cddd>] ? SyS_open+0x2d/0x40
[  722.179621]  [<ffffffff83779965>] ? entry_SYSCALL_64_fastpath+0x22/0x9e
[  722.179630]  [<ffffffff812378f0>] ? debug_check_no_locks_freed+0x2c0/0x2c0
[  722.179636]  [<ffffffff81230631>] ? __lock_is_held+0xa1/0xf0
[  722.179642]  [<ffffffff81553017>] do_filp_open+0x197/0x290
[  722.179649]  [<ffffffff81552e80>] ? user_path_mountpoint_at+0x40/0x40
[  722.179655]  [<ffffffff83778e2c>] ? _raw_spin_unlock+0x2c/0x50
[  722.179662]  [<ffffffff8157a573>] ? __alloc_fd+0x1e3/0x500
[  722.179669]  [<ffffffff8151cab9>] do_sys_open+0x369/0x660
[  722.179675]  [<ffffffff8151c750>] ? filp_open+0x70/0x70
[  722.179682]  [<ffffffff81f4a2b9>] ? proc_clear_tty+0xd9/0x140
[  722.179688]  [<ffffffff83779457>] ? _raw_write_unlock_irq+0x27/0x50
[  722.179695]  [<ffffffff8151cddd>] SyS_open+0x2d/0x40
[  722.179702]  [<ffffffff83779965>] entry_SYSCALL_64_fastpath+0x22/0x9e
[  722.179706] 1 lock held by init/23389:
[  722.179721]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81f4f7ea>] tty_open+0x4ca/0xee0
[  722.179724] Sending NMI to all CPUs:
[  722.180952] NMI backtrace for cpu 0
[  722.180955] CPU: 0 PID: 486 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #63
[  722.180959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  722.180962] task: ffff8800bb149800 task.stack: ffff8800bad18000
[  722.180965] RIP: 0010:[<ffffffff810c3f87>]  [<ffffffff810c3f87>] flat_send_IPI_mask+0xf7/0x1a0
[  722.180968] RSP: 0018:ffff8800bad1fcb8  EFLAGS: 00000046
[  722.180971] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000
[  722.180974] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300
[  722.180977] RBP: ffff8800bad1fce0 R08: 0000000000000001 R09: 0000000000000000
[  722.180980] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246
[  722.180983] R13: 0000000000000003 R14: ffffffff8426f5a0 R15: 0000000000000002
[  722.180986] FS:  0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
[  722.180989] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  722.180992] CR2: 0000000020000240 CR3: 00000001c8566000 CR4: 0000000000160670
[  722.180995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  722.180998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  722.180999] Stack:
[  722.181002]  ffffffff8426f5a0 ffffffff847f0b40 fffffbfff08fdc1c dffffc0000000000
[  722.181005]  ffff8801db31bca0 ffff8800bad1fd00 ffffffff810b9abb ffffffff839f6dc0
[  722.181008]  0000000000000003 ffff8800bad1fd60 ffffffff81d11764 ffffffff8141b993
[  722.181009] Call Trace:
[  722.181012]  [<ffffffff810b9abb>] nmi_raise_cpu_backtrace+0x5b/0x70
[  722.181015]  [<ffffffff81d11764>] nmi_trigger_all_cpu_backtrace+0x4a4/0x550
[  722.181018]  [<ffffffff8141b993>] ? print_lock+0xab/0xae
[  722.181020]  [<ffffffff810b9a60>] ? irq_force_complete_move+0x3b0/0x3b0
[  722.181023]  [<ffffffff810b9b54>] arch_trigger_all_cpu_backtrace+0x14/0x20
[  722.181026]  [<ffffffff813695ca>] watchdog+0x6fa/0xae0
[  722.181028]  [<ffffffff81368f93>] ? watchdog+0xc3/0xae0
[  722.181031]  [<ffffffff81190b48>] kthread+0x268/0x300
[  722.181033]  [<ffffffff81368ed0>] ? reset_hung_task_detector+0x20/0x20
[  722.181036]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[  722.181039]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[  722.181042]  [<ffffffff83779d95>] ret_from_fork+0x55/0x80
[  722.181044]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[  722.181051] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 2b 33 17 00 4c 89 e7 57 9d 0f 1f 
[  722.181053] NMI backtrace for cpu 1
[  722.181056] CPU: 1 PID: 12865 Comm: modprobe Not tainted 4.4.125-g38f41ec #63
[  722.181059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  722.181062] task: ffff8801d6b1c800 task.stack: ffff8801c8ed0000
[  722.181065] RIP: 0010:[<ffffffff811a6eae>]  [<ffffffff811a6eae>] preempt_count_add+0x2e/0x170
[  722.181068] RSP: 0018:ffff8801c8ed7580  EFLAGS: 00000206
[  722.181071] RAX: 0000000000000003 RBX: 0000000000000001 RCX: 0000000000000000
[  722.181074] RDX: 0000000000000004 RSI: ffffffff814fdaf3 RDI: ffffffff85702600
[  722.181077] RBP: ffff8801c8ed7590 R08: ffff8801c8ed76c8 R09: 0000000000000000
[  722.181080] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801c8ed78e8
[  722.181082] R13: ffffffffffff8000 R14: ffff8801c8ed76d8 R15: ffff880100000000
[  722.181085] FS:  00007f31b3487700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
[  722.181088] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  722.181091] CR2: 00007f8b815c0db8 CR3: 00000001cdd92000 CR4: 0000000000160670
[  722.181094] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  722.181097] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  722.181098] Stack:
[  722.181101]  ffff880100000000 ffff8801c8ed78e8 ffff8801c8ed75a8 ffffffff812f9602
[  722.181104]  ffff880100000000 ffff8801c8ed75c0 ffffffff8118bf0b 0000000000000000
[  722.181107]  ffff8801c8ed7618 ffffffff81017998 ffff8801c8ed0000 ffff8801c8ed78e8
[  722.181109] Call Trace:
[  722.181111]  [<ffffffff812f9602>] is_module_text_address+0x12/0x50
[  722.181114]  [<ffffffff8118bf0b>] __kernel_text_address+0x6b/0xa0
[  722.181117]  [<ffffffff81017998>] print_context_stack+0x48/0xc0
[  722.181119]  [<ffffffff81016b75>] dump_trace+0x145/0x350
[  722.181122]  [<ffffffff81035d76>] save_stack_trace+0x26/0x50
[  722.181124]  [<ffffffff814fdaf3>] save_stack+0x43/0xd0
[  722.181127]  [<ffffffff81035d76>] ? save_stack_trace+0x26/0x50
[  722.181129]  [<ffffffff814fdaf3>] ? save_stack+0x43/0xd0
[  722.181131]  [<ffffffff81230631>] ? __lock_is_held+0xa1/0xf0
[  722.181134]  [<ffffffff814f973d>] ? ___slab_alloc.constprop.76+0x35d/0x530
[  722.181137]  [<ffffffff83778e2c>] ? _raw_spin_unlock+0x2c/0x50
[  722.181140]  [<ffffffff814f973d>] ? ___slab_alloc.constprop.76+0x35d/0x530
[  722.181142]  [<ffffffff816675f8>] ? proc_reg_open+0x78/0x2a0
[  722.181145]  [<ffffffff816675f8>] ? proc_reg_open+0x78/0x2a0
[  722.181148]  [<ffffffff814f9971>] ? __slab_alloc.isra.72.constprop.75+0x61/0xa0
[  722.181151]  [<ffffffff814fdc45>] ? kasan_unpoison_shadow+0x35/0x50
[  722.181153]  [<ffffffff814fddbd>] kasan_kmalloc+0xad/0xe0
[  722.181156]  [<ffffffff816675f8>] ? proc_reg_open+0x78/0x2a0
[  722.181158]  [<ffffffff814fe392>] kasan_slab_alloc+0x12/0x20
[  722.181167]  [<ffffffff814f9cfe>] kmem_cache_alloc_trace+0xbe/0x2b0
[  722.181170]  [<ffffffff816675f8>] proc_reg_open+0x78/0x2a0
[  722.181172]  [<ffffffff8151881b>] do_dentry_open+0x59b/0xba0
[  722.181175]  [<ffffffff8153cfab>] ? __inode_permission2+0x9b/0x240
[  722.181178]  [<ffffffff81667580>] ? proc_reg_release+0x170/0x170
[  722.181180]  [<ffffffff8151c0e0>] vfs_open+0x110/0x210
[  722.181183]  [<ffffffff8153d59e>] ? may_open+0x1ae/0x280
[  722.181185]  [<ffffffff8154d373>] path_openat+0x923/0x3940
[  722.181188]  [<ffffffff81daf873>] ? depot_save_stack+0x1c3/0x640
[  722.181190]  [<ffffffff8154ca50>] ? path_mountpoint+0x830/0x830
[  722.181193]  [<ffffffff815508cb>] ? getname_flags+0xcb/0x580
[  722.181195]  [<ffffffff81550d01>] ? getname_flags+0x501/0x580
[  722.181198]  [<ffffffff8151c96f>] ? do_sys_open+0x21f/0x660
[  722.181201]  [<ffffffff8151cddd>] ? SyS_open+0x2d/0x40
[  722.181203]  [<ffffffff83779965>] ? entry_SYSCALL_64_fastpath+0x22/0x9e
[  722.181206]  [<ffffffff81daf873>] ? depot_save_stack+0x1c3/0x640
[  722.181209]  [<ffffffff812378f0>] ? debug_check_no_locks_freed+0x2c0/0x2c0
[  722.181211]  [<ffffffff814fdb53>] ? save_stack+0xa3/0xd0
[  722.181214]  [<ffffffff81230631>] ? __lock_is_held+0xa1/0xf0
[  722.181217]  [<ffffffff81553017>] do_filp_open+0x197/0x290
[  722.181220]  [<ffffffff81552e80>] ? user_path_mountpoint_at+0x40/0x40
[  722.181223]  [<ffffffff83778e2c>] ? _raw_spin_unlock+0x2c/0x50
[  722.181225]  [<ffffffff8157a573>] ? __alloc_fd+0x1e3/0x500
[  722.181228]  [<ffffffff8151cab9>] do_sys_open+0x369/0x660
[  722.181231]  [<ffffffff8151c750>] ? filp_open+0x70/0x70
[  722.181233]  [<ffffffff814ae7dd>] ? vm_munmap+0x6d/0x80
[  722.181236]  [<ffffffff8122c8da>] ? up_write+0x1a/0x60
[  722.181238]  [<ffffffff8151cddd>] SyS_open+0x2d/0x40
[  722.181241]  [<ffffffff83779965>] entry_SYSCALL_64_fastpath+0x22/0x9e
[  722.181247] Code: 00 00 00 00 fc ff df 55 48 89 e5 41 54 53 89 fb 48 c7 c7 00 26 70 85 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 <38> d0 7c 08 84 d2 0f 85 1b 01 00 00 8b 15 40 b7 55 04 65 01 1d 
[  722.181413] Kernel panic - not syncing: hung_task: blocked tasks
[  722.181420] CPU: 0 PID: 486 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #63
[  722.181424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  722.181433]  0000000000000000 b09135547b624ff5 ffff8800bad1fca8 ffffffff81d067bd
[  722.181441]  ffffffff838831a0 ffff8800bad1fd80 dffffc0000000000 7fffffffffffffff
[  722.181449]  ffff8800adc19c48 ffff8800bad1fd70 ffffffff8141b46a 0000000041b58ab3
[  722.181450] Call Trace:
[  722.181461]  [<ffffffff81d067bd>] dump_stack+0xc1/0x124
[  722.181468]  [<ffffffff8141b46a>] panic+0x1aa/0x388
[  722.181475]  [<ffffffff8141b2c0>] ? percpu_up_read.constprop.45+0xe1/0xe1
[  722.181482]  [<ffffffff81d116b8>] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550
[  722.181488]  [<ffffffff81d116b8>] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550
[  722.181496]  [<ffffffff813695db>] watchdog+0x70b/0xae0
[  722.181502]  [<ffffffff81368f93>] ? watchdog+0xc3/0xae0
[  722.181511]  [<ffffffff81190b48>] kthread+0x268/0x300
[  722.181517]  [<ffffffff81368ed0>] ? reset_hung_task_detector+0x20/0x20
[  722.181524]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[  722.181532]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[  722.181539]  [<ffffffff83779d95>] ret_from_fork+0x55/0x80
[  722.181546]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[  722.182087] Dumping ftrace buffer:
[  722.182124]    (ftrace buffer empty)
[  722.182127] Kernel Offset: disabled
[  745.378856] Rebooting in 86400 seconds..