x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 1:
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1418.591511] binder: undelivered TRANSACTION_ERROR: 29189
[ 1418.607412] binder: undelivered TRANSACTION_ERROR: 29201
[ 1418.611011] binder: undelivered TRANSACTION_ERROR: 29189
[ 1418.763939] binder: 30998:31001 ioctl 8010aa01 20000180 returned -22
[ 1418.765023] binder: 30998:31001 ioctl c0086420 20000080 returned -22
[ 1418.765106] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:00:58 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 20 printk messages dropped ** [ 1418.783779] binder: 30995:31009 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1418.783875] binder: 30995:31009 transaction failed 29201/-22, size 40-16 line 3197
[ 1418.802981] binder: BINDER_SET_CONTEXT_MGR already set
[ 1418.802989] binder: 31006:31010 ioctl 40046207 0 returned -16
[ 1418.803961] binder: 31006:31010 got transaction with invalid offset (40, min 24 max 40) or object.
2018/03/31 13:00:58 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1418.804049] binder: 31006:31010 transaction failed 29201/-22, size 40-16 line 3197
** 3 printk messages dropped ** [ 1418.830267] binder: unexpected work type, 4, not freed
** 24 printk messages dropped ** [ 1418.930138] binder: 31018:31023 transaction failed 29201/-22, size 40-16 line 3197
[ 1418.930373] binder: 31019:31021 got transaction with invalid offset (40, min 24 max 40) or object.
** 3 printk messages dropped ** [ 1418.936302] binder: 31020:31022 ioctl 40046207 0 returned -16
[ 1418.937255] binder: 31020:31022 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1418.937346] binder: 31020:31022 transaction failed 29201/-22, size 40-16 line 3197
[ 1418.941572] binder: BINDER_SET_CONTEXT_MGR already set
[ 1418.941579] binder: 31024:31025 ioctl 40046207 0 returned -16
[ 1418.949201] binder: undelivered TRANSACTION_ERROR: 29201
[ 1418.960195] binder: release 31024:31025 transaction 46510 out, still active
2018/03/31 13:00:59 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:00:59 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1418.960199] binder: unexpected work type, 4, not freed
[ 1418.960202] binder: undelivered TRANSACTION_COMPLETE
[ 1418.987464] binder: undelivered TRANSACTION_ERROR: 29201
[ 1418.987515] binder: send failed reply for transaction 46510, target dead
[ 1418.988045] binder: undelivered TRANSACTION_ERROR: 29201
[ 1419.113092] binder: 31036:31038 ioctl 8010aa01 20000180 returned -22
[ 1419.113158] binder: 31036:31038 ioctl c0086420 20000080 returned -22
[ 1419.114871] binder: 31036:31038 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1419.114967] binder: 31036:31038 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:00:59 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 14 printk messages dropped ** [ 1419.126561] binder: 31029:31040 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:00:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 10 printk messages dropped ** [ 1419.158712] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:00:59 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 18 printk messages dropped ** [ 1419.251752] binder: 31049:31056 ioctl 40046207 0 returned -16
** 15 printk messages dropped ** [ 1419.272161] binder: BINDER_SET_CONTEXT_MGR already set
** 13 printk messages dropped ** [ 1419.496176] binder: 31068:31070 ioctl c0086420 20000080 returned -22
[ 1419.496245] binder: 31062:31067 ioctl c0086420 20000080 returned -22
[ 1419.496322] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.496328] binder: 31068:31070 ioctl 40046207 0 returned -16
[ 1419.496403] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.496409] binder: 31062:31067 ioctl 40046207 0 returned -16
[ 1419.497211] binder_alloc: 31069: binder_alloc_buf, no vma
[ 1419.497248] binder: 31068:31070 transaction failed 29189/-3, size 40-16 line 3134
[ 1419.497964] binder_alloc: 31069: binder_alloc_buf, no vma
[ 1419.498008] binder: 31062:31067 transaction failed 29189/-3, size 40-16 line 3134
[ 1419.498870] binder: 31064:31066 ioctl 8010aa01 20000180 returned -22
[ 1419.498928] binder: 31064:31066 ioctl c0086420 20000080 returned -22
[ 1419.499911] binder_alloc: 31069: binder_alloc_buf, no vma
[ 1419.499950] binder: 31064:31066 transaction failed 29189/-3, size 40-16 line 3134
[ 1419.535615] binder: undelivered TRANSACTION_ERROR: 29189
[ 1419.541410] binder: 31063:31065 ioctl 8010aa01 20000180 returned -22
[ 1419.544534] binder: 31063:31065 ioctl c0086420 20000080 returned -22
2018/03/31 13:00:59 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:00:59 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1419.544609] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.544615] binder: 31063:31065 ioctl 40046207 0 returned -16
[ 1419.545382] binder_alloc: 31069: binder_alloc_buf, no vma
[ 1419.545422] binder: 31063:31065 transaction failed 29189/-3, size 40-16 line 3134
2018/03/31 13:00:59 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 19 printk messages dropped ** [ 1419.841856] binder: 31079:31088 ioctl c0086420 20000080 returned -22
** 3 printk messages dropped ** [ 1419.842845] binder: 31079:31088 transaction failed 29189/-3, size 40-16 line 3134
2018/03/31 13:00:59 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:00:59 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1419.844888] binder: 31075:31087 ioctl 8010aa01 20000180 returned -22
** 4 printk messages dropped ** [ 1419.845927] binder: 31075:31087 transaction failed 29189/-3, size 40-16 line 3134
[ 1419.850165] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:00:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 4 printk messages dropped ** [ 1419.871858] binder: undelivered TRANSACTION_ERROR: 29189
[ 1419.891370] binder: undelivered TRANSACTION_ERROR: 29189
[ 1419.892335] binder: undelivered TRANSACTION_ERROR: 29189
[ 1419.898710] binder: undelivered TRANSACTION_ERROR: 29189
** 2 printk messages dropped ** [ 1419.981124] binder: 31094:31099 ioctl c0086420 20000080 returned -22
[ 1419.985587] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.985595] binder: 31093:31102 ioctl 40046207 0 returned -16
2018/03/31 13:00:59 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1419.986929] binder: 31093:31102 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1419.987028] binder: 31093:31102 transaction failed 29201/-22, size 40-16 line 3197
[ 1419.987579] binder: 31092:31100 ioctl 8010aa01 20000180 returned -22
[ 1419.987956] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.987962] binder: 31095:31101 ioctl 40046207 0 returned -16
[ 1419.987994] binder: 31092:31100 ioctl c0086420 20000080 returned -22
[ 1419.989685] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.989691] binder: 31092:31100 ioctl 40046207 0 returned -16
[ 1419.990642] binder: 31096:31103 ioctl 8010aa01 20000180 returned -22
[ 1419.990647] binder: 31098:31104 ioctl c0086420 20000080 returned -22
[ 1419.990882] binder: 31092:31100 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1419.990976] binder: 31092:31100 transaction failed 29201/-22, size 40-16 line 3197
** 12 printk messages dropped ** [ 1419.995646] binder: 31096:31103 transaction failed 29201/-22, size 40-16 line 3197
** 1 printk messages dropped ** [ 1420.032907] binder: undelivered TRANSACTION_COMPLETE
[ 1420.032920] binder: undelivered TRANSACTION_ERROR: 29189
[ 1420.041948] binder: undelivered TRANSACTION_ERROR: 29201
[ 1420.042243] binder: undelivered TRANSACTION_ERROR: 29201
[ 1420.042534] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:00 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1420.074692] binder: undelivered TRANSACTION_ERROR: 29201
[ 1420.090939] binder: 31109:31112 ioctl 8010aa01 20000180 returned -22
[ 1420.092051] binder: 31109:31112 ioctl c0086420 20000080 returned -22
[ 1420.093010] binder: 31109:31112 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1420.093235] binder: 31109:31112 transaction failed 29201/-22, size 40-16 line 3197
[ 1420.106734] binder: 31113:31117 ioctl c0086420 20000080 returned -22
[ 1420.107050] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:01:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 3:
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1420.107056] binder: 31113:31117 ioctl 40046207 0 returned -16
** 25 printk messages dropped ** [ 1420.186245] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:01:00 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 4 printk messages dropped ** [ 1420.195487] binder: unexpected work type, 4, not freed
** 5 printk messages dropped ** [ 1420.322875] binder: 31131:31132 ioctl c0086420 20000080 returned -22
** 29 printk messages dropped ** [ 1420.389124] binder: undelivered TRANSACTION_ERROR: 29201
** 10 printk messages dropped ** [ 1420.452589] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.452595] binder: 31144:31148 ioctl 40046207 0 returned -16
2018/03/31 13:01:00 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 3:
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1420.453035] binder: 31151:31153 ioctl 8010aa01 20000180 returned -22
[ 1420.453216] binder: 31151:31153 ioctl c0086420 20000080 returned -22
[ 1420.453282] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.453287] binder: 31151:31153 ioctl 40046207 0 returned -16
[ 1420.453409] binder_alloc: 31141: binder_alloc_buf, no vma
[ 1420.453449] binder: 31144:31148 transaction failed 29189/-3, size 40-16 line 3134
[ 1420.458611] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/31 13:01:00 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 3:
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1420.483068] binder: 31147:31154 ioctl 8010aa01 20000180 returned -22
** 18 printk messages dropped ** [ 1420.557869] binder: 31159:31162 ioctl c0086420 20000080 returned -22
2018/03/31 13:01:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 13 printk messages dropped ** [ 1420.710819] binder: 31166:31169 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:01:00 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 14 printk messages dropped ** [ 1420.747352] binder: 31172:31178 ioctl 8010aa01 20000180 returned -22
[ 1420.747681] binder: 31172:31178 ioctl c0086420 20000080 returned -22
** 14 printk messages dropped ** [ 1420.781146] binder: 31182:31183 transaction failed 29201/-22, size 0-16 line 3197
** 9 printk messages dropped ** [ 1420.852598] binder: 31184:31185 transaction failed 29201/-22, size 40-16 line 3197
[ 1420.858050] binder: 31187:31188 ioctl 8010aa01 20000180 returned -22
[ 1420.858110] binder: 31187:31188 ioctl c0086420 20000080 returned -22
[ 1420.858434] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.858440] binder: 31187:31188 ioctl 40046207 0 returned -16
[ 1420.859362] binder: 31187:31188 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1420.859452] binder: 31187:31188 transaction failed 29201/-22, size 40-16 line 3197
[ 1420.871017] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:00 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:00 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1420.886936] binder: undelivered TRANSACTION_ERROR: 29201
[ 1420.889159] binder_alloc: 31189: binder_alloc_buf, no vma
[ 1420.889202] binder: 31189:31190 transaction failed 29189/-3, size 40-16 line 3134
[ 1420.900693] binder: 31193:31197 ioctl 8010aa01 20000180 returned -22
[ 1420.900812] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.900817] binder: 31193:31197 ioctl 40046207 0 returned -16
2018/03/31 13:01:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 4 printk messages dropped ** [ 1420.902058] binder_alloc: 31189: binder_alloc_buf, no vma
** 18 printk messages dropped ** [ 1420.962662] binder: 31201:31203 transaction failed 29189/-3, size 40-8 line 3134
[ 1420.962750] binder: 31200:31202 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:00 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 7 printk messages dropped ** [ 1420.996856] binder: undelivered TRANSACTION_ERROR: 29189
** 1 printk messages dropped ** [ 1420.998084] binder: 31204:31205 ioctl c0086420 20000080 returned -22
2018/03/31 13:01:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 4 printk messages dropped ** [ 1421.160151] binder: 31208:31218 ioctl c0086420 20000080 returned -22
** 27 printk messages dropped ** [ 1421.191884] binder: 31215:31222 transaction failed 29201/-22, size 40-16 line 3197
** 1 printk messages dropped ** [ 1421.223571] binder: undelivered TRANSACTION_ERROR: 29201
[ 1421.226118] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.226126] binder: 31225:31226 ioctl 40046207 0 returned -16
[ 1421.246319] binder: undelivered TRANSACTION_ERROR: 29201
[ 1421.246375] binder: send failed reply for transaction 46668 to 31225:31226
** 2 printk messages dropped ** [ 1421.275637] binder: undelivered TRANSACTION_COMPLETE
[ 1421.275651] binder: undelivered TRANSACTION_ERROR: 29189
[ 1421.289801] binder: 31230:31232 ioctl 8010aa01 20000180 returned -22
[ 1421.289862] binder: 31230:31232 ioctl c0086420 20000080 returned -22
[ 1421.291323] binder: 31230:31232 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1421.291407] binder: 31230:31232 transaction failed 29201/-22, size 40-16 line 3197
[ 1421.298981] binder: 31227:31231 ioctl 8010aa01 20000180 returned -22
[ 1421.299141] binder: 31227:31231 ioctl c0086420 20000080 returned -22
[ 1421.302014] binder: 31236:31238 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1421.302112] binder: 31236:31238 transaction failed 29201/-22, size 40-16 line 3197
[ 1421.303178] binder: 31234:31237 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:01 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:01 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1421.303296] binder: 31234:31237 ioctl c0086420 20000080 returned -22
[ 1421.304094] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.304101] binder: 31234:31237 ioctl 40046207 0 returned -16
[ 1421.305485] binder: 31234:31237 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1421.305582] binder: 31234:31237 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:01:01 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 14 printk messages dropped ** [ 1421.346183] binder: undelivered TRANSACTION_ERROR: 29201
** 1 printk messages dropped ** [ 1421.375840] binder: 31243:31244 ioctl 8010aa01 20000180 returned -22
[ 1421.375891] binder: 31243:31244 ioctl c0086420 20000080 returned -22
[ 1421.376854] binder: 31243:31244 got transaction with invalid offset (40, min 24 max 40) or object.
2018/03/31 13:01:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1421.376989] binder: 31243:31244 transaction failed 29201/-22, size 40-16 line 3197
** 2 printk messages dropped ** [ 1421.378567] binder: undelivered TRANSACTION_ERROR: 29201
[ 1421.378837] binder: BINDER_SET_CONTEXT_MGR already set
** 29 printk messages dropped ** [ 1421.557303] binder: 31249:31257 ioctl 40046207 0 returned -16
[ 1421.558867] binder: 31250:31258 ioctl c0086420 20000080 returned -22
** 1 printk messages dropped ** [ 1421.560196] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.560203] binder: 31250:31258 ioctl 40046207 0 returned -16
[ 1421.560309] binder: 31249:31257 got transaction with invalid offset (40, min 0 max 40) or object.
[ 1421.560342] binder: 31253:31262 transaction failed 29201/-22, size 40-16 line 3197
[ 1421.560364] binder: 31249:31257 transaction failed 29201/-22, size 40-8 line 3197
[ 1421.567667] binder: 31250:31258 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1421.567796] binder: 31250:31258 transaction failed 29201/-22, size 40-16 line 3197
[ 1421.589713] binder: undelivered TRANSACTION_ERROR: 29201
[ 1421.603853] binder: undelivered TRANSACTION_ERROR: 29201
[ 1421.604827] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:01 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:01 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1421.605153] binder: undelivered TRANSACTION_ERROR: 29201
[ 1421.634880] binder: undelivered TRANSACTION_ERROR: 29201
[ 1421.645433] binder: 31264:31265 ioctl 8010aa01 20000180 returned -22
[ 1421.645488] binder: 31264:31265 ioctl c0086420 20000080 returned -22
[ 1421.646441] binder: 31264:31265 got transaction with invalid offset (40, min 24 max 40) or object.
2018/03/31 13:01:01 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x0, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 15 printk messages dropped ** [ 1421.711159] binder: 31269:31271 transaction failed 29201/-22, size 40-16 line 3197
** 1 printk messages dropped ** [ 1421.719323] binder: 31268:31272 ioctl c0086420 20000080 returned -22
** 1 printk messages dropped ** [ 1421.719393] binder: 31268:31272 ioctl 40046207 0 returned -16
2018/03/31 13:01:01 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 10 printk messages dropped ** [ 1421.776519] binder: 31277:31281 transaction failed 29201/-22, size 40-16 line 3197
** 12 printk messages dropped ** [ 1421.946029] binder: 31286:31290 ioctl c0086420 20000080 returned -22
** 11 printk messages dropped ** [ 1421.957627] binder: 31292:31296 ioctl c0086420 20000080 returned -22
[ 1421.958509] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.958517] binder: 31292:31296 ioctl 40046207 0 returned -16
[ 1421.962502] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.962509] binder: 31294:31299 ioctl 40046207 0 returned -16
[ 1421.963341] binder: 31294:31299 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1421.963430] binder: 31294:31299 transaction failed 29201/-22, size 40-16 line 3197
[ 1421.963702] binder: 31289:31297 ioctl 8010aa01 20000180 returned -22
[ 1421.964131] binder: 31292:31296 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1421.964219] binder: 31292:31296 transaction failed 29201/-22, size 40-16 line 3197
[ 1421.964257] binder: 31289:31297 ioctl c0086420 20000080 returned -22
[ 1421.964330] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.964336] binder: 31289:31297 ioctl 40046207 0 returned -16
[ 1421.965412] binder: 31289:31297 got transaction with invalid offset (40, min 24 max 40) or object.
2018/03/31 13:01:01 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x0, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1421.965502] binder: 31289:31297 transaction failed 29201/-22, size 40-16 line 3197
[ 1421.966589] binder: 31285:31298 ioctl 8010aa01 20000180 returned -22
[ 1421.966651] binder: 31285:31298 ioctl c0086420 20000080 returned -22
[ 1421.967128] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.967133] binder: 31285:31298 ioctl 40046207 0 returned -16
[ 1421.972663] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.011910] binder: release 31285:31298 transaction 46747 out, still active
2018/03/31 13:01:01 executing program 7:
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1422.011914] binder: unexpected work type, 4, not freed
2018/03/31 13:01:01 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 16 printk messages dropped ** [ 1422.064898] binder: 31302:31308 ioctl 8010aa01 20000180 returned -22
[ 1422.064952] binder: 31302:31308 ioctl c0086420 20000080 returned -22
[ 1422.065018] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.065023] binder: 31302:31308 ioctl 40046207 0 returned -16
[ 1422.070999] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:01 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x0, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:01 executing program 7:
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 2 printk messages dropped ** [ 1422.092666] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 7 printk messages dropped ** [ 1422.189298] binder: undelivered TRANSACTION_ERROR: 29189
** 18 printk messages dropped ** [ 1422.265166] binder: 31318:31322 got transaction with invalid offset (40, min 24 max 40) or object.
** 3 printk messages dropped ** [ 1422.266541] binder: 31317:31326 ioctl 8010aa01 20000180 returned -22
** 3 printk messages dropped ** [ 1422.267521] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.267526] binder: 31317:31326 ioctl 40046207 0 returned -16
[ 1422.268771] binder: 31317:31326 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1422.272416] binder: 31317:31326 transaction failed 29201/-22, size 40-16 line 3197
[ 1422.296286] binder: release 31315:31319 transaction 46763 out, still active
[ 1422.296290] binder: unexpected work type, 4, not freed
[ 1422.296292] binder: undelivered TRANSACTION_COMPLETE
2018/03/31 13:01:02 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:02 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1422.296416] binder: send failed reply for transaction 46763, target dead
[ 1422.296591] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.303908] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.322067] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.322964] binder: 31323:31329 ioctl 8010aa01 20000180 returned -22
[ 1422.323022] binder: 31323:31329 ioctl c0086420 20000080 returned -22
[ 1422.334478] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.351710] binder: 31330:31335 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 7:
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1422.351760] binder: 31330:31335 ioctl c0086420 20000080 returned -22
[ 1422.351819] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:01:02 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 15 printk messages dropped ** [ 1422.389308] binder: undelivered TRANSACTION_ERROR: 29201
** 6 printk messages dropped ** [ 1422.400577] binder: 31339:31340 ioctl 40046207 0 returned -16
2018/03/31 13:01:02 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 2 printk messages dropped ** [ 1422.416078] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.421260] binder: 31342:31343 ioctl 8010aa01 20000180 returned -22
** 8 printk messages dropped ** [ 1422.511218] binder: undelivered TRANSACTION_ERROR: 29189
** 13 printk messages dropped ** [ 1422.605841] binder: 31349:31352 transaction failed 29201/-22, size 40-16 line 3197
** 16 printk messages dropped ** [ 1422.626801] binder: 31348:31360 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1422.626893] binder: 31348:31360 transaction failed 29201/-22, size 40-16 line 3197
[ 1422.641125] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.654065] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.654141] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.684662] binder_alloc: 31361: binder_alloc_buf, no vma
[ 1422.684703] binder: 31361:31363 transaction failed 29189/-3, size 40-16 line 3134
[ 1422.694559] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.706403] binder: 31366:31368 ioctl 8010aa01 20000180 returned -22
[ 1422.706465] binder: 31366:31368 ioctl c0086420 20000080 returned -22
[ 1422.706533] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.706539] binder: 31366:31368 ioctl 40046207 0 returned -16
[ 1422.707383] binder_alloc: 31361: binder_alloc_buf, no vma
2018/03/31 13:01:02 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1422.707425] binder: 31366:31368 transaction failed 29189/-3, size 40-16 line 3134
[ 1422.713873] binder: 31365:31367 ioctl 8010aa01 20000180 returned -22
[ 1422.714050] binder: 31365:31367 ioctl c0086420 20000080 returned -22
[ 1422.714160] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.714166] binder: 31365:31367 ioctl 40046207 0 returned -16
[ 1422.723798] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.737700] binder: undelivered TRANSACTION_ERROR: 29189
[ 1422.740606] binder: 31370:31372 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:02 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 2 printk messages dropped ** [ 1422.740725] binder: 31370:31372 ioctl 40046207 0 returned -16
** 13 printk messages dropped ** [ 1422.782450] binder: undelivered TRANSACTION_ERROR: 29201
[ 1422.790168] binder: 31376:31378 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:02 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1422.790290] binder_alloc: 31377: binder_alloc_buf, no vma
** 7 printk messages dropped ** [ 1422.819362] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/31 13:01:02 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 6 printk messages dropped ** [ 1422.950841] binder: 31384:31388 ioctl 8010aa01 20000180 returned -22
** 2 printk messages dropped ** [ 1422.951902] binder: 31384:31388 transaction failed 29201/-22, size 40-16 line 3197
[ 1422.962896] binder: 31385:31389 ioctl 8010aa01 20000180 returned -22
[ 1422.962971] binder: 31385:31389 ioctl c0086420 20000080 returned -22
[ 1422.963048] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.963054] binder: 31385:31389 ioctl 40046207 0 returned -16
** 2 printk messages dropped ** [ 1422.964563] binder: 31386:31391 ioctl 8010aa01 20000180 returned -22
** 10 printk messages dropped ** [ 1422.967085] binder: 31390:31392 transaction failed 29201/-22, size 40-16 line 3197
[ 1422.975600] binder: 31383:31395 ioctl 8010aa01 20000180 returned -22
[ 1422.975665] binder: 31383:31395 ioctl c0086420 20000080 returned -22
[ 1422.975735] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.975740] binder: 31383:31395 ioctl 40046207 0 returned -16
** 1 printk messages dropped ** [ 1422.977597] binder: 31383:31395 transaction failed 29201/-22, size 40-16 line 3197
[ 1422.978294] binder: 31387:31393 ioctl 8010aa01 20000180 returned -22
[ 1422.978418] binder: 31387:31393 ioctl c0086420 20000080 returned -22
[ 1422.979087] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.979092] binder: 31387:31393 ioctl 40046207 0 returned -16
[ 1422.982512] binder: undelivered TRANSACTION_ERROR: 29201
[ 1423.001553] binder: undelivered TRANSACTION_ERROR: 29201
[ 1423.002991] binder_alloc: 31394: binder_alloc_buf, no vma
[ 1423.003031] binder: 31394:31397 transaction failed 29189/-3, size 40-16 line 3134
[ 1423.009997] binder: undelivered TRANSACTION_ERROR: 29201
[ 1423.025869] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:02 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:02 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:02 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1423.026391] binder: undelivered TRANSACTION_ERROR: 29189
[ 1423.026695] binder: undelivered TRANSACTION_ERROR: 29201
[ 1423.032518] binder: 31400:31401 ioctl 8010aa01 20000180 returned -22
[ 1423.032570] binder: 31400:31401 ioctl c0086420 20000080 returned -22
[ 1423.033542] binder: 31400:31401 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1423.033640] binder: 31400:31401 transaction failed 29201/-22, size 40-16 line 3197
[ 1423.042216] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:02 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1423.073261] binder: 31403:31405 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:02 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x0)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 1 printk messages dropped ** [ 1423.074335] binder: 31403:31405 got transaction with invalid offset (40, min 24 max 40) or object.
** 9 printk messages dropped ** [ 1423.102481] binder: BINDER_SET_CONTEXT_MGR already set
** 1 printk messages dropped ** [ 1423.103414] binder: 31404:31409 got transaction with invalid offset (40, min 24 max 40) or object.
2018/03/31 13:01:03 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 9 printk messages dropped ** [ 1423.114522] binder: 31408:31413 ioctl 8010aa01 20000180 returned -22
[ 1423.115865] binder: 31408:31413 ioctl c0086420 20000080 returned -22
[ 1423.132873] binder: 31411:31414 ioctl 8010aa01 20000180 returned -22
[ 1423.132937] binder: 31411:31414 ioctl c0086420 20000080 returned -22
** 12 printk messages dropped ** [ 1423.174029] binder: 31417:31419 got transaction with invalid offset (40, min 24 max 40) or object.
** 9 printk messages dropped ** [ 1423.277474] binder_alloc: 31425: binder_alloc_buf, no vma
** 7 printk messages dropped ** [ 1423.280091] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.280096] binder: 31426:31431 ioctl 40046207 0 returned -16
[ 1423.280230] binder_alloc: 31425: binder_alloc_buf, no vma
[ 1423.280266] binder: 31423:31429 transaction failed 29189/-3, size 40-16 line 3134
[ 1423.280779] binder_alloc: 31425: binder_alloc_buf, no vma
[ 1423.280866] binder: 31426:31431 transaction failed 29189/-3, size 40-16 line 3134
[ 1423.293251] binder: 31427:31430 ioctl 8010aa01 20000180 returned -22
[ 1423.293484] binder: 31427:31430 ioctl c0086420 20000080 returned -22
[ 1423.293544] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.293549] binder: 31427:31430 ioctl 40046207 0 returned -16
[ 1423.305106] binder: undelivered TRANSACTION_ERROR: 29189
[ 1423.312040] binder: undelivered TRANSACTION_ERROR: 29189
[ 1423.319521] binder: 31428:31435 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:03 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:03 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1423.319568] binder: 31428:31435 ioctl c0086420 20000080 returned -22
[ 1423.320652] binder: 31428:31435 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1423.320747] binder: 31428:31435 transaction failed 29201/-22, size 40-16 line 3197
[ 1423.326589] binder: 31424:31434 ioctl 8010aa01 20000180 returned -22
[ 1423.327011] binder: 31424:31434 ioctl c0086420 20000080 returned -22
2018/03/31 13:01:03 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 13 printk messages dropped ** [ 1423.400076] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.400082] binder: 31440:31445 ioctl 40046207 0 returned -16
[ 1423.400890] binder: 31440:31445 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1423.400979] binder: 31440:31445 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:01:03 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 9 printk messages dropped ** [ 1423.416884] binder: 31442:31446 transaction failed 29201/-22, size 40-16 line 3197
[ 1423.417215] binder: 31443:31449 transaction failed 29201/-22, size 40-16 line 3197
[ 1423.422382] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.422390] binder: 31444:31448 ioctl 40046207 0 returned -16
** 8 printk messages dropped ** [ 1423.449352] binder: 31447:31451 ioctl c0086420 20000080 returned -22
** 4 printk messages dropped ** [ 1423.451729] binder: undelivered TRANSACTION_ERROR: 29201
** 4 printk messages dropped ** [ 1423.488047] binder: 31453:31454 ioctl c0086420 20000080 returned -22
[ 1423.489631] binder: 31453:31454 got transaction with invalid offset (40, min 24 max 40) or object.
** 2 printk messages dropped ** [ 1423.647615] binder: 31458:31463 ioctl 8010aa01 20000180 returned -22
[ 1423.647677] binder: 31458:31463 ioctl c0086420 20000080 returned -22
[ 1423.648707] binder: 31458:31463 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1423.648801] binder: 31458:31463 transaction failed 29201/-22, size 40-16 line 3197
[ 1423.657258] binder: 31461:31465 ioctl 8010aa01 20000180 returned -22
[ 1423.657308] binder: 31461:31465 ioctl c0086420 20000080 returned -22
[ 1423.657374] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.657380] binder: 31461:31465 ioctl 40046207 0 returned -16
[ 1423.658655] binder: 31461:31465 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1423.658787] binder: 31461:31465 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:01:03 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r1 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r2 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r3 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={<r4=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x0, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1423.664400] binder: 31459:31466 ioctl 8010aa01 20000180 returned -22
[ 1423.664488] binder: 31462:31467 ioctl 8010aa01 20000180 returned -22
[ 1423.664554] binder: 31459:31466 ioctl c0086420 20000080 returned -22
[ 1423.664623] binder: 31462:31467 ioctl c0086420 20000080 returned -22
[ 1423.664777] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.664783] binder: 31462:31467 ioctl 40046207 0 returned -16
[ 1423.665481] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.665487] binder: 31459:31466 ioctl 40046207 0 returned -16
2018/03/31 13:01:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1423.666366] binder: 31459:31466 got transaction with invalid offset (40, min 24 max 40) or object.
** 8 printk messages dropped ** [ 1423.684910] binder: 31457:31471 ioctl 8010aa01 20000180 returned -22
[ 1423.685068] binder: 31457:31471 ioctl c0086420 20000080 returned -22
2018/03/31 13:01:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1423.685433] binder: 31464:31470 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1423.685523] binder: 31464:31470 transaction failed 29201/-22, size 40-16 line 3197
** 1 printk messages dropped ** [ 1423.685797] binder: 31457:31471 ioctl 40046207 0 returned -16
2018/03/31 13:01:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x0, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 4 printk messages dropped ** [ 1423.730039] binder: 31473:31474 ioctl 8010aa01 20000180 returned -22
** 1 printk messages dropped ** [ 1423.730125] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.730129] binder: 31473:31474 ioctl 40046207 0 returned -16
** 12 printk messages dropped ** [ 1423.784078] binder: BINDER_SET_CONTEXT_MGR already set
** 8 printk messages dropped ** [ 1423.793193] binder: 31477:31479 ioctl c0086420 20000080 returned -22
[ 1423.794239] binder: 31477:31479 got transaction with invalid offset (40, min 24 max 40) or object.
** 1 printk messages dropped ** [ 1423.819797] binder: undelivered TRANSACTION_ERROR: 29201
[ 1423.830354] binder: 31485:31487 ioctl 8010aa01 20000180 returned -22
[ 1423.830466] binder: 31485:31487 ioctl c0086420 20000080 returned -22
[ 1423.831670] binder: 31485:31487 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1423.831761] binder: 31485:31487 transaction failed 29201/-22, size 40-16 line 3197
[ 1423.840553] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/31 13:01:03 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:03 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x0, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1423.859454] binder: 31484:31488 ioctl 8010aa01 20000180 returned -22
[ 1423.859631] binder: 31484:31488 ioctl c0086420 20000080 returned -22
[ 1423.859687] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.859691] binder: 31484:31488 ioctl 40046207 0 returned -16
[ 1423.860452] binder: 31490:31491 ioctl 8010aa01 20000180 returned -22
[ 1423.860682] binder: 31484:31488 got transaction with invalid offset (40, min 24 max 40) or object.
2018/03/31 13:01:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f000026c000), &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 10 printk messages dropped ** [ 1423.869501] binder: 31489:31492 ioctl 8010aa01 20000180 returned -22
** 6 printk messages dropped ** [ 1423.887191] binder: 31494:31496 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x0, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 1 printk messages dropped ** [ 1423.889610] binder: 31494:31496 got transaction with invalid offset (40, min 24 max 40) or object.
** 21 printk messages dropped ** [ 1424.062434] binder: 31505:31509 transaction failed 29201/-22, size 40-16 line 3197
** 21 printk messages dropped ** [ 1424.169073] binder: 31516:31518 ioctl 8010aa01 20000180 returned -22
** 2 printk messages dropped ** [ 1424.174548] binder: 31517:31520 ioctl c0086420 20000080 returned -22
[ 1424.174595] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.174599] binder: 31517:31520 ioctl 40046207 0 returned -16
[ 1424.175549] binder: 31517:31520 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1424.175624] binder: 31517:31520 transaction failed 29201/-22, size 40-16 line 3197
[ 1424.195856] binder: 31522:31525 ioctl 8010aa01 20000180 returned -22
[ 1424.195910] binder: 31522:31525 ioctl c0086420 20000080 returned -22
[ 1424.196977] binder: 31522:31525 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1424.197072] binder: 31522:31525 transaction failed 29201/-22, size 40-16 line 3197
[ 1424.204792] binder: 31521:31523 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:04 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x0, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1424.204914] binder: 31521:31523 ioctl c0086420 20000080 returned -22
[ 1424.205046] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.205053] binder: 31521:31523 ioctl 40046207 0 returned -16
[ 1424.205853] binder: 31519:31524 ioctl 8010aa01 20000180 returned -22
[ 1424.205919] binder: 31519:31524 ioctl c0086420 20000080 returned -22
[ 1424.205986] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.205991] binder: 31519:31524 ioctl 40046207 0 returned -16
[ 1424.206387] binder: 31521:31523 got transaction with invalid offset (40, min 24 max 40) or object.
2018/03/31 13:01:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1424.206473] binder: 31521:31523 transaction failed 29201/-22, size 40-16 line 3197
** 16 printk messages dropped ** [ 1424.391504] binder: 31533:31536 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:01:04 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1424.399580] binder: 31532:31543 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:04 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x0, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1424.399894] binder: 31532:31543 ioctl c0086420 20000080 returned -22
2018/03/31 13:01:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 16 printk messages dropped ** [ 1424.413868] binder: 31538:31544 ioctl 8010aa01 20000180 returned -22
** 13 printk messages dropped ** [ 1424.468842] binder: undelivered TRANSACTION_ERROR: 29201
** 6 printk messages dropped ** [ 1424.504112] binder: 31549:31556 ioctl c0086420 20000080 returned -22
** 4 printk messages dropped ** [ 1424.508868] binder: 31551:31553 ioctl c0086420 20000080 returned -22
** 1 printk messages dropped ** [ 1424.508954] binder: 31551:31553 ioctl 40046207 0 returned -16
[ 1424.509930] binder: 31551:31553 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1424.510025] binder: 31551:31553 transaction failed 29201/-22, size 40-16 line 3197
[ 1424.520730] binder: 31548:31555 ioctl 8010aa01 20000180 returned -22
[ 1424.520786] binder: 31548:31555 ioctl c0086420 20000080 returned -22
[ 1424.520849] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.520855] binder: 31548:31555 ioctl 40046207 0 returned -16
[ 1424.521689] binder: 31548:31555 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1424.521986] binder: 31548:31555 transaction failed 29201/-22, size 40-16 line 3197
[ 1424.543513] binder: undelivered TRANSACTION_ERROR: 29201
[ 1424.546313] binder: undelivered TRANSACTION_ERROR: 29201
[ 1424.552535] binder: undelivered TRANSACTION_ERROR: 29201
[ 1424.560374] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:04 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:04 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1424.560864] binder: 31557:31559 ioctl 8010aa01 20000180 returned -22
[ 1424.560915] binder: 31557:31559 ioctl c0086420 20000080 returned -22
[ 1424.561936] binder: 31557:31559 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1424.562027] binder: 31557:31559 transaction failed 29201/-22, size 40-16 line 3197
[ 1424.575736] binder: undelivered TRANSACTION_ERROR: 29201
[ 1424.585626] binder: 31563:31564 ioctl 8010aa01 20000180 returned -22
2018/03/31 13:01:04 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 14 printk messages dropped ** [ 1424.747420] binder: 31573:31577 ioctl 8010aa01 20000180 returned -22
** 3 printk messages dropped ** [ 1424.753856] binder: 31568:31579 ioctl 8010aa01 20000180 returned -22
** 1 printk messages dropped ** [ 1424.753980] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:01:04 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1424.753985] binder: 31568:31579 ioctl 40046207 0 returned -16
[ 1424.754951] binder_alloc: 31567: binder_alloc_buf, no vma
[ 1424.754989] binder: 31568:31579 transaction failed 29189/-3, size 40-16 line 3134
[ 1424.757083] binder: 31570:31578 ioctl 8010aa01 20000180 returned -22
[ 1424.757135] binder: 31570:31578 ioctl c0086420 20000080 returned -22
[ 1424.757197] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:01:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 9 printk messages dropped ** [ 1424.780353] binder: 31575:31582 ioctl 8010aa01 20000180 returned -22
** 8 printk messages dropped ** [ 1424.809301] binder: undelivered TRANSACTION_ERROR: 29189
** 6 printk messages dropped ** [ 1424.843523] binder: undelivered TRANSACTION_ERROR: 29189
[ 1424.847852] binder: 31586:31587 ioctl 8010aa01 20000180 returned -22
[ 1424.847896] binder: 31586:31587 ioctl c0086420 20000080 returned -22
** 5 printk messages dropped ** [ 1424.870543] binder: 31589:31591 ioctl 40046207 0 returned -16
[ 1424.871687] binder: 31589:31591 got transaction with invalid offset (40, min 24 max 40) or object.
** 3 printk messages dropped ** [ 1424.892248] binder: 31590:31592 ioctl c0086420 20000080 returned -22
[ 1424.893553] binder: 31590:31592 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1424.893646] binder: 31590:31592 transaction failed 29201/-22, size 40-16 line 3197
[ 1424.898812] binder: undelivered TRANSACTION_ERROR: 29201
[ 1425.068411] binder: undelivered TRANSACTION_ERROR: 29201
[ 1425.098863] binder_alloc: 31593: binder_alloc_buf, no vma
[ 1425.098905] binder: 31593:31594 transaction failed 29189/-3, size 40-16 line 3134
[ 1425.146674] binder: undelivered TRANSACTION_ERROR: 29189
[ 1425.341605] binder: 31598:31600 ioctl 8010aa01 20000180 returned -22
[ 1425.341766] binder: 31598:31600 ioctl c0086420 20000080 returned -22
[ 1425.343610] binder: 31598:31600 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1425.343697] binder: 31598:31600 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:01:05 executing program 2:
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:05 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1425.349492] binder: 31599:31601 ioctl 8010aa01 20000180 returned -22
[ 1425.349995] binder: 31599:31601 ioctl c0086420 20000080 returned -22
[ 1425.350062] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.350069] binder: 31599:31601 ioctl 40046207 0 returned -16
[ 1425.350493] binder: 31602:31607 ioctl 8010aa01 20000180 returned -22
[ 1425.350569] binder: 31602:31607 ioctl c0086420 20000080 returned -22
2018/03/31 13:01:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 16 printk messages dropped ** [ 1425.369972] binder: 31604:31612 transaction failed 29189/-3, size 40-16 line 3134
[ 1425.371261] binder_alloc: 31604: binder_alloc_buf, no vma
[ 1425.371301] binder: 31597:31609 transaction failed 29189/-3, size 40-16 line 3134
[ 1425.372099] binder: undelivered TRANSACTION_ERROR: 29201
2018/03/31 13:01:05 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1425.396564] binder: 31603:31611 ioctl 8010aa01 20000180 returned -22
[ 1425.396622] binder: 31603:31611 ioctl c0086420 20000080 returned -22
[ 1425.396681] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.396687] binder: 31603:31611 ioctl 40046207 0 returned -16
[ 1425.397419] binder_alloc: 31604: binder_alloc_buf, no vma
2018/03/31 13:01:05 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1425.397460] binder: 31603:31611 transaction failed 29189/-3, size 40-16 line 3134
[ 1425.408885] binder: undelivered TRANSACTION_ERROR: 29189
[ 1425.411981] binder: undelivered TRANSACTION_ERROR: 29189
[ 1425.427542] binder: 31614:31615 ioctl 8010aa01 20000180 returned -22
[ 1425.427593] binder: 31614:31615 ioctl c0086420 20000080 returned -22
[ 1425.427654] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.427659] binder: 31614:31615 ioctl 40046207 0 returned -16
[ 1425.430598] binder: undelivered TRANSACTION_ERROR: 29189
[ 1425.433399] binder: 31614:31615 transaction failed 29189/-22, size 40-16 line 3011
[ 1425.438138] binder: undelivered TRANSACTION_ERROR: 29201
[ 1425.451887] binder: 31616:31617 ioctl 8010aa01 20000180 returned -22
[ 1425.451949] binder: 31616:31617 ioctl c0086420 20000080 returned -22
[ 1425.452877] binder: 31616:31617 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1425.453020] binder: 31616:31617 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:01:05 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x0, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1425.458855] binder: undelivered TRANSACTION_ERROR: 29189
[ 1425.479517] binder: undelivered TRANSACTION_ERROR: 29201
[ 1425.483015] binder: 31619:31623 ioctl 8010aa01 20000180 returned -22
[ 1425.483068] binder: 31619:31623 ioctl c0086420 20000080 returned -22
[ 1425.484041] binder: 31621:31624 ioctl 8010aa01 20000180 returned -22
** 3 printk messages dropped ** [ 1425.484842] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.484848] binder: 31621:31624 ioctl 40046207 0 returned -16
[ 1425.492720] binder: 31618:31622 ioctl 8010aa01 20000180 returned -22
** 2 printk messages dropped ** [ 1425.492844] binder: 31618:31622 ioctl 40046207 0 returned -16
** 4 printk messages dropped ** [ 1425.494389] binder: BINDER_SET_CONTEXT_MGR already set
** 1 printk messages dropped ** [ 1425.496402] binder: 31620:31627 got transaction with invalid offset (40, min 24 max 40) or object.
** 1 printk messages dropped ** [ 1425.520723] binder: undelivered TRANSACTION_ERROR: 29201
[ 1425.532119] binder: undelivered TRANSACTION_ERROR: 29201
[ 1425.534690] binder_alloc: 31629: binder_alloc_buf, no vma
[ 1425.534739] binder: 31629:31631 transaction failed 29189/-3, size 40-16 line 3134
[ 1425.536378] binder: 31625:31628 ioctl 8010aa01 20000180 returned -22
[ 1425.536428] binder: 31625:31628 ioctl c0086420 20000080 returned -22
[ 1425.536487] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.536492] binder: 31625:31628 ioctl 40046207 0 returned -16
[ 1425.537316] binder_alloc: 31629: binder_alloc_buf, no vma
[ 1425.537355] binder: 31625:31628 transaction failed 29189/-3, size 40-16 line 3134
2018/03/31 13:01:05 executing program 2:
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x0, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1425.537358] binder: undelivered TRANSACTION_ERROR: 29201
[ 1425.556371] binder: 31632:31633 ioctl 8010aa01 20000180 returned -22
[ 1425.556420] binder: 31632:31633 ioctl c0086420 20000080 returned -22
[ 1425.556481] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:01:05 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 5 printk messages dropped ** [ 1425.579642] binder: undelivered TRANSACTION_ERROR: 29189
2018/03/31 13:01:05 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x0, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 20 printk messages dropped ** [ 1425.631752] binder: 31641:31645 transaction failed 29201/-22, size 40-16 line 3197
2018/03/31 13:01:05 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

** 15 printk messages dropped ** [ 1425.705986] binder: 31649:31651 ioctl c0086420 20000080 returned -22
** 21 printk messages dropped ** [ 1425.728962] binder: 31652:31657 transaction failed 29201/-22, size 40-16 line 3197
** 14 printk messages dropped ** [ 1425.816389] binder: 31662:31665 ioctl c0086420 20000080 returned -22
[ 1425.817384] binder: 31662:31665 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1425.817474] binder: 31662:31665 transaction failed 29201/-22, size 40-16 line 3197
[ 1425.831800] binder: undelivered TRANSACTION_ERROR: 29201
[ 1425.882378] binder: 31667:31670 ioctl 8010aa01 20000180 returned -22
[ 1425.882430] binder: 31667:31670 ioctl c0086420 20000080 returned -22
[ 1425.883225] binder: 31668:31672 ioctl 8010aa01 20000180 returned -22
[ 1425.883283] binder: 31668:31672 ioctl c0086420 20000080 returned -22
[ 1425.883347] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.883352] binder: 31668:31672 ioctl 40046207 0 returned -16
[ 1425.883565] binder: 31667:31670 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1425.883652] binder: 31667:31670 transaction failed 29201/-22, size 40-16 line 3197
[ 1425.890678] binder: 31669:31676 ioctl 8010aa01 20000180 returned -22
[ 1425.890739] binder: 31669:31676 ioctl c0086420 20000080 returned -22
[ 1425.890926] binder: BINDER_SET_CONTEXT_MGR already set
2018/03/31 13:01:06 executing program 2:
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00002b8ff6), 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x9}, 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x0)
r2 = socket$inet6(0xa, 0x8000000000000802, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2}, @in6={0xa, 0x0, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x0, @multicast1=0xe0000001}]}, &(0x7f0000000500)=0x10)
sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x5, &(0x7f0000000300))
readahead(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x500, 0x0, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r3 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x9519})
close(r3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x0, "d8f50facf0fb9003e1fe3c8d3a542913246fead31e9d65610c2c5a70ee688231"})
r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={<r5=>0x0, 0xba}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x101}}, [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x667]}, &(0x7f0000000340)=0x100)

2018/03/31 13:01:06 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x0, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:06 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0xff, 0xc78, 0x40, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0x0, 0x1}, 0x8, 0x5})
sysinfo(&(0x7f00000005c0)=""/23)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x0, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:06 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x0, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:06 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x0, 0x0, 0x7ff})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x0, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

2018/03/31 13:01:06 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x200300)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6})
timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000bc0))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @rand_addr}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8)
clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x5f, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78})
r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)})
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff})
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20}, 0x8, 0x5, 0x78})
sysinfo(&(0x7f00000005c0)=""/23)
setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000006c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50)
gettid()

[ 1425.890932] binder: 31669:31676 ioctl 40046207 0 returned -16
[ 1425.891832] binder: 31669:31676 got transaction with invalid offset (40, min 24 max 40) or object.
** 122 printk messages dropped ** [ 1426.272584] binder: 31717:31721 transaction failed 29189/-3, size 40-16 line 3134
[ 1426.280892] binder: undelivered TRANSACTION_ERROR: 29189
[ 1426.300445] binder: 31724:31727 ioctl 8010aa01 20000180 returned -22
[ 1426.300555] binder: 31724:31727 ioctl c0086420 20000080 returned -22
[ 1426.300631] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.300637] binder: 31724:31727 ioctl 40046207 0 returned -16
[ 1426.301628] binder_alloc: 31717: binder_alloc_buf, no vma
[ 1426.301675] binder: 31724:31727 transaction failed 29189/-3, size 40-16 line 3134
[ 1426.304355] binder: 31726:31730 ioctl 8010aa01 20000180 returned -22
[ 1426.305777] binder: 31726:31730 ioctl c0086420 20000080 returned -22
[ 1426.306436] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.306444] binder: 31726:31730 ioctl 40046207 0 returned -16
[ 1426.307585] binder_alloc: 31717: binder_alloc_buf, no vma
[ 1426.307625] binder: 31726:31730 transaction failed 29189/-3, size 40-16 line 3134
[ 1426.307911] binder: 31728:31731 ioctl 8010aa01 20000180 returned -22
[ 1426.307968] binder: 31728:31731 ioctl c0086420 20000080 returned -22
[ 1426.307998] binder: 31725:31729 ioctl 8010aa01 20000180 returned -22
[ 1426.308032] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.308038] binder: 31728:31731 ioctl 40046207 0 returned -16
[ 1426.308051] binder: 31725:31729 ioctl c0086420 20000080 returned -22
[ 1426.308112] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.308119] binder: 31725:31729 ioctl 40046207 0 returned -16
[ 1426.308801] binder_alloc: 31717: binder_alloc_buf, no vma
[ 1426.308838] binder: 31728:31731 transaction failed 29189/-3, size 40-16 line 3134
[ 1426.309793] binder_alloc: 31717: binder_alloc_buf, no vma
[ 1426.309828] binder: 31725:31729 transaction failed 29189/-3, size 40-16 line 3134
[ 1426.326250] binder: undelivered TRANSACTION_ERROR: 29189
[ 1426.331124] binder: undelivered TRANSACTION_ERROR: 29189
[ 1426.338725] binder: undelivered TRANSACTION_ERROR: 29189
[ 1426.340461] binder: 31732:31733 ioctl 8010aa01 20000180 returned -22
[ 1426.340511] binder: 31732:31733 ioctl c0086420 20000080 returned -22
[ 1426.352368] binder: 31734:31735 ioctl 8010aa01 20000180 returned -22
[ 1426.352420] binder: 31734:31735 ioctl c0086420 20000080 returned -22
[ 1426.352482] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.352488] binder: 31734:31735 ioctl 40046207 0 returned -16
[ 1426.353272] binder_alloc: 31732: binder_alloc_buf failed to map pages in userspace, no vma
[ 1426.353311] binder: 31734:31735 transaction failed 29189/-3, size 40-16 line 3134
[ 1426.355674] binder: undelivered TRANSACTION_ERROR: 29189
[ 1426.356014] binder: undelivered TRANSACTION_ERROR: 29189
[ 1426.368034] binder: undelivered TRANSACTION_ERROR: 29189
[ 1426.509010] binder: 31739:31744 ioctl 8010aa01 20000180 returned -22
[ 1426.509081] binder: 31739:31744 ioctl c0086420 20000080 returned -22
[ 1426.509854] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.509861] binder: 31741:31747 ioctl 40046207 0 returned -16
[ 1426.510068] binder: 31739:31744 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.510165] binder: 31739:31744 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.510490] binder: 31740:31743 ioctl 8010aa01 20000180 returned -22
[ 1426.510550] binder: 31740:31743 ioctl c0086420 20000080 returned -22
[ 1426.510617] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.510623] binder: 31740:31743 ioctl 40046207 0 returned -16
[ 1426.510960] binder: 31741:31747 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.511095] binder: 31741:31747 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.512770] binder: 31740:31743 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.512861] binder: 31740:31743 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.521725] binder: 31745:31749 ioctl 8010aa01 20000180 returned -22
[ 1426.521955] binder: 31745:31749 ioctl c0086420 20000080 returned -22
[ 1426.524038] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.524046] binder: 31745:31749 ioctl 40046207 0 returned -16
[ 1426.525703] binder: 31745:31749 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.525795] binder: 31745:31749 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.526996] binder: 31746:31752 ioctl 8010aa01 20000180 returned -22
[ 1426.527217] binder: 31746:31752 ioctl c0086420 20000080 returned -22
[ 1426.527536] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.527542] binder: 31746:31752 ioctl 40046207 0 returned -16
[ 1426.530761] binder: 31742:31751 ioctl 8010aa01 20000180 returned -22
[ 1426.530852] binder: 31742:31751 ioctl c0086420 20000080 returned -22
[ 1426.531439] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.531446] binder: 31742:31751 ioctl 40046207 0 returned -16
[ 1426.531832] binder: 31738:31750 ioctl 8010aa01 20000180 returned -22
[ 1426.531950] binder: 31738:31750 ioctl c0086420 20000080 returned -22
[ 1426.532068] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.532074] binder: 31738:31750 ioctl 40046207 0 returned -16
[ 1426.532402] binder: 31742:31751 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.533318] binder: 31738:31750 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.533409] binder: 31738:31750 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.533664] binder: 31742:31751 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.544266] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.545946] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.563809] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.579676] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.589906] binder: 31755:31756 ioctl 8010aa01 20000180 returned -22
[ 1426.589957] binder: 31755:31756 ioctl c0086420 20000080 returned -22
[ 1426.590954] binder: 31755:31756 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.591051] binder: 31755:31756 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.611110] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.615530] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.620566] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.623351] binder: 31757:31759 ioctl 8010aa01 20000180 returned -22
[ 1426.623471] binder: 31757:31759 ioctl c0086420 20000080 returned -22
[ 1426.624539] binder: 31757:31759 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.624634] binder: 31757:31759 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.634728] binder: 31758:31761 ioctl 8010aa01 20000180 returned -22
[ 1426.634778] binder: 31758:31761 ioctl c0086420 20000080 returned -22
[ 1426.634840] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.634845] binder: 31758:31761 ioctl 40046207 0 returned -16
[ 1426.635779] binder: 31758:31761 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.635857] binder: 31758:31761 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.651867] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.659732] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.675279] binder: 31760:31763 ioctl 8010aa01 20000180 returned -22
[ 1426.675367] binder: 31760:31763 ioctl c0086420 20000080 returned -22
[ 1426.676787] binder: 31760:31763 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.676881] binder: 31760:31763 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.680093] binder: 31766:31767 ioctl 8010aa01 20000180 returned -22
[ 1426.680149] binder: 31766:31767 ioctl c0086420 20000080 returned -22
[ 1426.680212] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.680218] binder: 31766:31767 ioctl 40046207 0 returned -16
[ 1426.681195] binder: 31766:31767 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.681289] binder: 31766:31767 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.686150] binder: 31762:31764 ioctl 8010aa01 20000180 returned -22
[ 1426.686200] binder: 31762:31764 ioctl c0086420 20000080 returned -22
[ 1426.686309] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.686315] binder: 31762:31764 ioctl 40046207 0 returned -16
[ 1426.696867] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.702042] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.706271] binder: 31765:31770 ioctl 8010aa01 20000180 returned -22
[ 1426.706311] binder: 31765:31770 ioctl c0086420 20000080 returned -22
[ 1426.707283] binder: 31765:31770 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.707376] binder: 31765:31770 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.731578] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.752280] binder_alloc: 31769: binder_alloc_buf, no vma
[ 1426.752320] binder: 31769:31771 transaction failed 29189/-3, size 40-16 line 3134
[ 1426.774525] binder: undelivered TRANSACTION_ERROR: 29189
[ 1426.853627] binder: 31780:31782 ioctl 8010aa01 20000180 returned -22
[ 1426.853713] binder: 31774:31777 ioctl 8010aa01 20000180 returned -22
[ 1426.853771] binder: 31780:31782 ioctl c0086420 20000080 returned -22
[ 1426.853855] binder: 31774:31777 ioctl c0086420 20000080 returned -22
[ 1426.856363] binder: 31775:31778 ioctl 8010aa01 20000180 returned -22
[ 1426.856418] binder: 31775:31778 ioctl c0086420 20000080 returned -22
[ 1426.856454] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.856459] binder: 31780:31782 ioctl 40046207 0 returned -16
[ 1426.856785] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.856791] binder: 31775:31778 ioctl 40046207 0 returned -16
[ 1426.857708] binder: 31774:31777 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.857803] binder: 31774:31777 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.857961] binder: 31775:31778 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.858051] binder: 31775:31778 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.858928] binder: 31780:31782 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.859814] binder: 31780:31782 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.861924] binder: 31776:31783 ioctl 8010aa01 20000180 returned -22
[ 1426.861993] binder: 31776:31783 ioctl c0086420 20000080 returned -22
[ 1426.862070] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.862075] binder: 31776:31783 ioctl 40046207 0 returned -16
[ 1426.862631] binder: 31773:31784 ioctl 8010aa01 20000180 returned -22
[ 1426.862915] binder: 31776:31783 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.863007] binder: 31776:31783 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.866066] binder: 31773:31784 ioctl c0086420 20000080 returned -22
[ 1426.866564] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.866571] binder: 31773:31784 ioctl 40046207 0 returned -16
[ 1426.867516] binder: 31773:31784 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.868326] binder: 31773:31784 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.873248] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.873584] binder: 31779:31786 ioctl 8010aa01 20000180 returned -22
[ 1426.873646] binder: 31779:31786 ioctl c0086420 20000080 returned -22
[ 1426.873718] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.873724] binder: 31779:31786 ioctl 40046207 0 returned -16
[ 1426.882435] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.914611] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.914619] binder: 31787:31788 ioctl 40046207 0 returned -16
[ 1426.915528] binder: 31787:31788 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.915616] binder: 31787:31788 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.926126] binder: 31789:31790 ioctl 8010aa01 20000180 returned -22
[ 1426.926178] binder: 31789:31790 ioctl c0086420 20000080 returned -22
[ 1426.926237] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.926242] binder: 31789:31790 ioctl 40046207 0 returned -16
[ 1426.927037] binder: 31789:31790 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.927137] binder: 31789:31790 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.932817] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.939578] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.948784] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.950842] binder: 31791:31793 ioctl 8010aa01 20000180 returned -22
[ 1426.950898] binder: 31791:31793 ioctl c0086420 20000080 returned -22
[ 1426.952688] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.956769] binder: 31792:31794 ioctl 8010aa01 20000180 returned -22
[ 1426.956823] binder: 31792:31794 ioctl c0086420 20000080 returned -22
[ 1426.956887] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.956892] binder: 31792:31794 ioctl 40046207 0 returned -16
[ 1426.957721] binder: 31792:31794 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1426.957814] binder: 31792:31794 transaction failed 29201/-22, size 40-16 line 3197
[ 1426.975950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1426.989608] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.032376] binder: 31797:31802 ioctl 8010aa01 20000180 returned -22
[ 1427.033477] binder: 31797:31802 ioctl c0086420 20000080 returned -22
[ 1427.034508] binder: 31798:31805 ioctl 8010aa01 20000180 returned -22
[ 1427.034573] binder: 31798:31805 ioctl c0086420 20000080 returned -22
[ 1427.034650] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.034656] binder: 31798:31805 ioctl 40046207 0 returned -16
[ 1427.034997] binder: 31797:31802 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.035399] binder: 31800:31806 ioctl 8010aa01 20000180 returned -22
[ 1427.035563] binder: 31800:31806 ioctl c0086420 20000080 returned -22
[ 1427.035634] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.035639] binder: 31800:31806 ioctl 40046207 0 returned -16
[ 1427.035801] binder: 31797:31802 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.037080] binder: 31798:31805 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.037176] binder: 31798:31805 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.037590] binder: 31800:31806 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.037677] binder: 31800:31806 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.041968] binder: 31801:31803 ioctl 8010aa01 20000180 returned -22
[ 1427.042253] binder: 31801:31803 ioctl c0086420 20000080 returned -22
[ 1427.042319] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.042325] binder: 31801:31803 ioctl 40046207 0 returned -16
[ 1427.043410] binder: 31801:31803 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.043502] binder: 31801:31803 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.044262] binder: 31799:31804 ioctl 8010aa01 20000180 returned -22
[ 1427.044327] binder: 31799:31804 ioctl c0086420 20000080 returned -22
[ 1427.044390] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.044395] binder: 31799:31804 ioctl 40046207 0 returned -16
[ 1427.045967] binder: 31799:31804 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.046052] binder: 31799:31804 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.053751] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.057686] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.057693] binder: 31807:31809 ioctl 40046207 0 returned -16
[ 1427.058799] binder: 31807:31809 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.058877] binder: 31807:31809 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.063772] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.090819] binder: 31810:31811 ioctl 8010aa01 20000180 returned -22
[ 1427.090871] binder: 31810:31811 ioctl c0086420 20000080 returned -22
[ 1427.090935] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.090941] binder: 31810:31811 ioctl 40046207 0 returned -16
[ 1427.091776] binder: 31810:31811 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.091867] binder: 31810:31811 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.098988] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.102750] binder: 31808:31812 ioctl 8010aa01 20000180 returned -22
[ 1427.102812] binder: 31808:31812 ioctl c0086420 20000080 returned -22
[ 1427.110811] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.111261] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.122545] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.122630] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.145731] binder: 31813:31814 ioctl 8010aa01 20000180 returned -22
[ 1427.145780] binder: 31813:31814 ioctl c0086420 20000080 returned -22
[ 1427.146646] binder: 31813:31814 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.146738] binder: 31813:31814 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.161385] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.276676] binder_alloc: 31818: binder_alloc_buf, no vma
[ 1427.276717] binder: 31818:31821 transaction failed 29189/-3, size 40-16 line 3134
[ 1427.287634] binder: 31819:31822 ioctl 8010aa01 20000180 returned -22
[ 1427.287697] binder: 31819:31822 ioctl c0086420 20000080 returned -22
[ 1427.287771] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.287776] binder: 31819:31822 ioctl 40046207 0 returned -16
[ 1427.288568] binder_alloc: 31818: binder_alloc_buf, no vma
[ 1427.288608] binder: 31819:31822 transaction failed 29189/-3, size 40-16 line 3134
[ 1427.294783] binder: 31824:31826 ioctl 8010aa01 20000180 returned -22
[ 1427.295319] binder: 31824:31826 ioctl c0086420 20000080 returned -22
[ 1427.295369] binder: 31820:31829 ioctl 8010aa01 20000180 returned -22
[ 1427.295604] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.295741] binder: 31824:31826 ioctl 40046207 0 returned -16
[ 1427.295767] binder: 31820:31829 ioctl c0086420 20000080 returned -22
[ 1427.295850] binder: 31825:31828 ioctl 8010aa01 20000180 returned -22
[ 1427.295930] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.295935] binder: 31820:31829 ioctl 40046207 0 returned -16
[ 1427.297073] binder: 31825:31828 ioctl c0086420 20000080 returned -22
[ 1427.297090] binder: undelivered TRANSACTION_ERROR: 29189
[ 1427.297279] binder_alloc: 31818: binder_alloc_buf, no vma
[ 1427.297316] binder: 31820:31829 transaction failed 29189/-3, size 40-16 line 3134
[ 1427.297553] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.297558] binder: 31825:31828 ioctl 40046207 0 returned -16
[ 1427.308301] binder: 31817:31830 ioctl 8010aa01 20000180 returned -22
[ 1427.310805] binder_alloc: 31818: binder_alloc_buf, no vma
[ 1427.310847] binder: 31824:31826 transaction failed 29189/-3, size 40-16 line 3134
[ 1427.312267] binder: 31817:31830 ioctl c0086420 20000080 returned -22
[ 1427.312340] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.312347] binder: 31817:31830 ioctl 40046207 0 returned -16
[ 1427.331488] binder: undelivered TRANSACTION_ERROR: 29189
[ 1427.338708] binder: 31833:31834 ioctl 8010aa01 20000180 returned -22
[ 1427.338760] binder: 31833:31834 ioctl c0086420 20000080 returned -22
[ 1427.339323] binder: undelivered TRANSACTION_ERROR: 29189
[ 1427.339731] binder: 31833:31834 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.339831] binder: 31833:31834 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.343744] binder: 31823:31831 ioctl 8010aa01 20000180 returned -22
[ 1427.343817] binder: 31823:31831 ioctl c0086420 20000080 returned -22
[ 1427.343884] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.343890] binder: 31823:31831 ioctl 40046207 0 returned -16
[ 1427.344768] binder: 31823:31831 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.344859] binder: 31823:31831 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.380922] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.381061] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.392407] binder: 31836:31839 ioctl 8010aa01 20000180 returned -22
[ 1427.392445] binder: 31836:31839 ioctl c0086420 20000080 returned -22
[ 1427.393447] binder: 31836:31839 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.393542] binder: 31836:31839 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.397936] binder: undelivered TRANSACTION_ERROR: 29189
[ 1427.405585] binder: 31838:31840 ioctl 8010aa01 20000180 returned -22
[ 1427.405644] binder: 31838:31840 ioctl c0086420 20000080 returned -22
[ 1427.405706] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.405712] binder: 31838:31840 ioctl 40046207 0 returned -16
[ 1427.416772] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.416780] binder: 31837:31843 ioctl 40046207 0 returned -16
[ 1427.417722] binder: 31837:31843 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.417817] binder: 31837:31843 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.428039] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.442916] binder: 31842:31844 ioctl 8010aa01 20000180 returned -22
[ 1427.442981] binder: 31842:31844 ioctl c0086420 20000080 returned -22
[ 1427.444142] binder: 31842:31844 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.444239] binder: 31842:31844 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.445322] binder: 31845:31846 ioctl 8010aa01 20000180 returned -22
[ 1427.445374] binder: 31845:31846 ioctl c0086420 20000080 returned -22
[ 1427.445437] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.445442] binder: 31845:31846 ioctl 40046207 0 returned -16
[ 1427.453718] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.469712] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.548913] binder: 31849:31853 ioctl 8010aa01 20000180 returned -22
[ 1427.549072] binder: 31849:31853 ioctl c0086420 20000080 returned -22
[ 1427.550726] binder: 31849:31853 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.550821] binder: 31849:31853 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.556045] binder: 31848:31856 ioctl 8010aa01 20000180 returned -22
[ 1427.556407] binder: 31848:31856 ioctl c0086420 20000080 returned -22
[ 1427.556487] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.556494] binder: 31848:31856 ioctl 40046207 0 returned -16
[ 1427.556720] binder: 31851:31854 ioctl 8010aa01 20000180 returned -22
[ 1427.557178] binder: 31851:31854 ioctl c0086420 20000080 returned -22
[ 1427.557247] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.557252] binder: 31851:31854 ioctl 40046207 0 returned -16
[ 1427.557495] binder: 31848:31856 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.557578] binder: 31848:31856 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.558080] binder: 31851:31854 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.559001] binder: 31851:31854 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.562747] binder: 31852:31859 ioctl 8010aa01 20000180 returned -22
[ 1427.562815] binder: 31852:31859 ioctl c0086420 20000080 returned -22
[ 1427.562890] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.562896] binder: 31852:31859 ioctl 40046207 0 returned -16
[ 1427.563853] binder: 31852:31859 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.563949] binder: 31852:31859 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.566010] binder: 31850:31857 ioctl 8010aa01 20000180 returned -22
[ 1427.566070] binder: 31850:31857 ioctl c0086420 20000080 returned -22
[ 1427.566134] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.566140] binder: 31850:31857 ioctl 40046207 0 returned -16
[ 1427.588078] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.588086] binder: 31858:31861 ioctl 40046207 0 returned -16
[ 1427.596173] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.596283] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.606083] binder: 31858:31861 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.606177] binder: 31858:31861 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.611644] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.624496] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.647179] binder: 31863:31864 ioctl 8010aa01 20000180 returned -22
[ 1427.647240] binder: 31863:31864 ioctl c0086420 20000080 returned -22
[ 1427.648577] binder: 31863:31864 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.649820] binder: 31863:31864 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.650426] binder: 31865:31869 ioctl 8010aa01 20000180 returned -22
[ 1427.650478] binder: 31865:31869 ioctl c0086420 20000080 returned -22
[ 1427.650541] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.650547] binder: 31865:31869 ioctl 40046207 0 returned -16
[ 1427.660655] binder: 31868:31871 ioctl 8010aa01 20000180 returned -22
[ 1427.660727] binder: 31868:31871 ioctl c0086420 20000080 returned -22
[ 1427.660803] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.660810] binder: 31868:31871 ioctl 40046207 0 returned -16
[ 1427.661854] binder: 31868:31871 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.662953] binder: 31868:31871 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.665640] binder: 31866:31873 ioctl 8010aa01 20000180 returned -22
[ 1427.666059] binder: 31866:31873 ioctl c0086420 20000080 returned -22
[ 1427.666356] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.666362] binder: 31866:31873 ioctl 40046207 0 returned -16
[ 1427.666413] binder: 31867:31872 ioctl 8010aa01 20000180 returned -22
[ 1427.666466] binder: 31867:31872 ioctl c0086420 20000080 returned -22
[ 1427.666530] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.666536] binder: 31867:31872 ioctl 40046207 0 returned -16
[ 1427.667592] binder: 31867:31872 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.667972] binder: 31866:31873 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.668066] binder: 31866:31873 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.668102] binder: 31867:31872 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.678459] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.680108] binder: 31870:31874 ioctl 8010aa01 20000180 returned -22
[ 1427.680175] binder: 31870:31874 ioctl c0086420 20000080 returned -22
[ 1427.680268] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.680274] binder: 31870:31874 ioctl 40046207 0 returned -16
[ 1427.701500] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.702590] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.712020] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.713016] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.736719] binder: 31876:31877 ioctl 8010aa01 20000180 returned -22
[ 1427.736773] binder: 31876:31877 ioctl c0086420 20000080 returned -22
[ 1427.737450] binder: 31876:31877 transaction failed 29189/-22, size 40-16 line 3011
[ 1427.749734] binder: undelivered TRANSACTION_ERROR: 29189
[ 1427.765024] binder_alloc: 31879: binder_alloc_buf, no vma
[ 1427.765062] binder: 31879:31880 transaction failed 29189/-3, size 40-16 line 3134
[ 1427.790701] binder: undelivered TRANSACTION_ERROR: 29189
[ 1427.890661] binder: 31885:31892 ioctl 8010aa01 20000180 returned -22
[ 1427.892080] binder: 31885:31892 ioctl c0086420 20000080 returned -22
[ 1427.893409] binder: 31885:31892 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.893414] binder: 31886:31888 ioctl 8010aa01 20000180 returned -22
[ 1427.893505] binder: 31885:31892 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.893527] binder: 31886:31888 ioctl c0086420 20000080 returned -22
[ 1427.893815] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.893822] binder: 31886:31888 ioctl 40046207 0 returned -16
[ 1427.895669] binder: 31886:31888 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.895757] binder: 31886:31888 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.897126] binder: 31882:31889 ioctl 8010aa01 20000180 returned -22
[ 1427.899017] binder: 31882:31889 ioctl c0086420 20000080 returned -22
[ 1427.900987] binder: 31881:31893 ioctl 8010aa01 20000180 returned -22
[ 1427.901044] binder: 31881:31893 ioctl c0086420 20000080 returned -22
[ 1427.901361] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.901367] binder: 31881:31893 ioctl 40046207 0 returned -16
[ 1427.901805] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.901812] binder: 31884:31890 ioctl 40046207 0 returned -16
[ 1427.902887] binder: 31881:31893 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.902941] binder: 31882:31889 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.902964] binder: 31881:31893 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.903053] binder: 31882:31889 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.903396] binder: 31887:31895 ioctl 8010aa01 20000180 returned -22
[ 1427.903460] binder: 31887:31895 ioctl c0086420 20000080 returned -22
[ 1427.903502] binder: 31884:31890 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.903539] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.903544] binder: 31887:31895 ioctl 40046207 0 returned -16
[ 1427.903595] binder: 31884:31890 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.919541] binder: 31883:31891 ioctl 8010aa01 20000180 returned -22
[ 1427.920618] binder: 31883:31891 ioctl c0086420 20000080 returned -22
[ 1427.921729] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.921736] binder: 31883:31891 ioctl 40046207 0 returned -16
[ 1427.922598] binder: 31883:31891 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1427.922813] binder: 31883:31891 transaction failed 29201/-22, size 40-16 line 3197
[ 1427.933914] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.938527] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.944088] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.946488] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.964749] binder: undelivered TRANSACTION_ERROR: 29201
[ 1427.988453] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.002086] binder: 31898:31900 ioctl 8010aa01 20000180 returned -22
[ 1428.002150] binder: 31898:31900 ioctl c0086420 20000080 returned -22
[ 1428.002651] binder: 31899:31903 ioctl 8010aa01 20000180 returned -22
[ 1428.002725] binder: 31899:31903 ioctl c0086420 20000080 returned -22
[ 1428.002801] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.002807] binder: 31899:31903 ioctl 40046207 0 returned -16
[ 1428.003374] binder: 31898:31900 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.003460] binder: 31898:31900 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.004026] binder: 31899:31903 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.004123] binder: 31901:31904 ioctl 8010aa01 20000180 returned -22
[ 1428.004191] binder: 31901:31904 ioctl c0086420 20000080 returned -22
[ 1428.004314] binder: 31899:31903 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.004573] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.004579] binder: 31901:31904 ioctl 40046207 0 returned -16
[ 1428.005413] binder: 31901:31904 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.005488] binder: 31901:31904 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.013346] binder: 31902:31905 ioctl 8010aa01 20000180 returned -22
[ 1428.013405] binder: 31902:31905 ioctl c0086420 20000080 returned -22
[ 1428.014440] binder: 31902:31905 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.014532] binder: 31902:31905 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.032450] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.041581] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.041728] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.057275] binder: 31907:31908 ioctl 8010aa01 20000180 returned -22
[ 1428.057326] binder: 31907:31908 ioctl c0086420 20000080 returned -22
[ 1428.058518] binder: 31907:31908 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.058608] binder: 31907:31908 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.065702] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.068225] binder: 31906:31910 ioctl 8010aa01 20000180 returned -22
[ 1428.068281] binder: 31906:31910 ioctl c0086420 20000080 returned -22
[ 1428.068345] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.068351] binder: 31906:31910 ioctl 40046207 0 returned -16
[ 1428.085948] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.085957] binder: 31912:31914 ioctl 40046207 0 returned -16
[ 1428.086854] binder: 31912:31914 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.086948] binder: 31912:31914 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.097070] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.112374] binder: 31915:31916 ioctl 8010aa01 20000180 returned -22
[ 1428.112581] binder: 31915:31916 ioctl c0086420 20000080 returned -22
[ 1428.113549] binder: 31915:31916 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.113892] binder: 31915:31916 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.115822] binder: 31911:31913 ioctl 8010aa01 20000180 returned -22
[ 1428.116914] binder: 31911:31913 ioctl c0086420 20000080 returned -22
[ 1428.118034] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.118040] binder: 31911:31913 ioctl 40046207 0 returned -16
[ 1428.119177] binder: 31911:31913 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.119269] binder: 31911:31913 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.132537] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.141282] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.142107] binder: 31917:31919 ioctl 8010aa01 20000180 returned -22
[ 1428.142168] binder: 31917:31919 ioctl c0086420 20000080 returned -22
[ 1428.150644] binder: 31917:31919 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.151930] binder: 31917:31919 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.156564] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.176417] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.307611] binder: 31923:31928 ioctl 8010aa01 20000180 returned -22
[ 1428.307673] binder: 31923:31928 ioctl c0086420 20000080 returned -22
[ 1428.308697] binder: 31923:31928 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.308792] binder: 31923:31928 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.315202] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.315209] binder: 31922:31925 ioctl 40046207 0 returned -16
[ 1428.316230] binder: 31922:31925 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.316320] binder: 31922:31925 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.320999] binder: 31926:31930 ioctl 8010aa01 20000180 returned -22
[ 1428.321449] binder: 31926:31930 ioctl c0086420 20000080 returned -22
[ 1428.321751] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.321757] binder: 31926:31930 ioctl 40046207 0 returned -16
[ 1428.322134] binder: 31927:31931 ioctl 8010aa01 20000180 returned -22
[ 1428.322204] binder: 31927:31931 ioctl c0086420 20000080 returned -22
[ 1428.322282] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.322287] binder: 31927:31931 ioctl 40046207 0 returned -16
[ 1428.323258] binder: 31927:31931 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.323344] binder: 31927:31931 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.330803] binder: 31924:31935 ioctl 8010aa01 20000180 returned -22
[ 1428.331393] binder: 31924:31935 ioctl c0086420 20000080 returned -22
[ 1428.332290] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.332297] binder: 31924:31935 ioctl 40046207 0 returned -16
[ 1428.334223] binder: 31924:31935 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.334317] binder: 31924:31935 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.337435] binder: 31929:31934 ioctl 8010aa01 20000180 returned -22
[ 1428.337507] binder: 31929:31934 ioctl c0086420 20000080 returned -22
[ 1428.337577] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.337582] binder: 31929:31934 ioctl 40046207 0 returned -16
[ 1428.339391] binder: 31921:31933 ioctl 8010aa01 20000180 returned -22
[ 1428.339977] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.339984] binder: 31921:31933 ioctl 40046207 0 returned -16
[ 1428.340232] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.341030] binder: 31929:31934 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.341278] binder: 31921:31933 transaction failed 29189/-22, size 40-16 line 3011
[ 1428.343698] binder: 31929:31934 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.361116] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.367811] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.382426] binder: 31937:31938 ioctl 8010aa01 20000180 returned -22
[ 1428.382477] binder: 31937:31938 ioctl c0086420 20000080 returned -22
[ 1428.383449] binder: 31937:31938 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.383538] binder: 31937:31938 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.394257] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.394620] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.420270] binder: undelivered TRANSACTION_ERROR: 29189
[ 1428.421012] binder: 31940:31941 ioctl 8010aa01 20000180 returned -22
[ 1428.421078] binder: 31940:31941 ioctl c0086420 20000080 returned -22
[ 1428.421528] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.422026] binder: 31940:31941 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.422123] binder: 31940:31941 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.442228] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.442533] binder: 31939:31943 ioctl 8010aa01 20000180 returned -22
[ 1428.442588] binder: 31939:31943 ioctl c0086420 20000080 returned -22
[ 1428.444040] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.444045] binder: 31945:31946 ioctl 40046207 0 returned -16
[ 1428.444885] binder: 31945:31946 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.444988] binder: 31945:31946 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.448486] binder: 31939:31943 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.448576] binder: 31939:31943 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.464100] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.484659] binder: 31944:31947 ioctl 8010aa01 20000180 returned -22
[ 1428.484808] binder: 31944:31947 ioctl c0086420 20000080 returned -22
[ 1428.491382] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.603825] binder: 31951:31955 ioctl 8010aa01 20000180 returned -22
[ 1428.603894] binder: 31951:31955 ioctl c0086420 20000080 returned -22
[ 1428.604481] binder: 31953:31958 ioctl 8010aa01 20000180 returned -22
[ 1428.604710] binder: 31953:31958 ioctl c0086420 20000080 returned -22
[ 1428.604782] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.604788] binder: 31953:31958 ioctl 40046207 0 returned -16
[ 1428.604920] binder: 31951:31955 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.605013] binder: 31951:31955 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.611379] binder: 31952:31959 ioctl 8010aa01 20000180 returned -22
[ 1428.611714] binder: 31952:31959 ioctl c0086420 20000080 returned -22
[ 1428.611853] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.611859] binder: 31952:31959 ioctl 40046207 0 returned -16
[ 1428.612764] binder: 31952:31959 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.612853] binder: 31952:31959 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.613305] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.613315] binder: 31956:31962 ioctl 40046207 0 returned -16
[ 1428.614357] binder: 31956:31962 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.615727] binder: 31956:31962 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.621912] binder: 31954:31961 ioctl 8010aa01 20000180 returned -22
[ 1428.622848] binder: 31954:31961 ioctl c0086420 20000080 returned -22
[ 1428.623393] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.623399] binder: 31954:31961 ioctl 40046207 0 returned -16
[ 1428.624616] binder: 31954:31961 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.624707] binder: 31954:31961 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.626262] binder: 31950:31963 ioctl 8010aa01 20000180 returned -22
[ 1428.626330] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.626336] binder: 31950:31963 ioctl 40046207 0 returned -16
[ 1428.627108] binder: 31950:31963 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.627200] binder: 31950:31963 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.632825] binder: 31957:31964 ioctl 8010aa01 20000180 returned -22
[ 1428.633021] binder: 31957:31964 ioctl c0086420 20000080 returned -22
[ 1428.633082] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.633088] binder: 31957:31964 ioctl 40046207 0 returned -16
[ 1428.634051] binder: 31957:31964 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.634137] binder: 31957:31964 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.647913] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.658924] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.659717] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.676414] binder: 31966:31967 ioctl 8010aa01 20000180 returned -22
[ 1428.676465] binder: 31966:31967 ioctl c0086420 20000080 returned -22
[ 1428.677458] binder: 31966:31967 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.677551] binder: 31966:31967 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.682900] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.701218] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.708160] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.711799] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.724855] binder: 31970:31971 ioctl 8010aa01 20000180 returned -22
[ 1428.725867] binder: 31970:31971 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.725967] binder: 31970:31971 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.736748] binder: 31969:31974 ioctl 8010aa01 20000180 returned -22
[ 1428.737390] binder: 31969:31974 ioctl c0086420 20000080 returned -22
[ 1428.737467] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.737472] binder: 31969:31974 ioctl 40046207 0 returned -16
[ 1428.739035] binder: 31969:31974 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.739124] binder: 31969:31974 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.747062] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.751122] binder: 31973:31980 ioctl 8010aa01 20000180 returned -22
[ 1428.751161] binder: 31973:31980 ioctl c0086420 20000080 returned -22
[ 1428.752105] binder: 31973:31980 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.752200] binder: 31973:31980 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.763771] binder: 31975:31977 ioctl 8010aa01 20000180 returned -22
[ 1428.764012] binder: 31975:31977 ioctl c0086420 20000080 returned -22
[ 1428.764194] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.764200] binder: 31975:31977 ioctl 40046207 0 returned -16
[ 1428.764927] binder: 31975:31977 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.765015] binder: 31975:31977 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.766538] binder: 31976:31978 ioctl 8010aa01 20000180 returned -22
[ 1428.766593] binder: 31976:31978 ioctl c0086420 20000080 returned -22
[ 1428.766660] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.766664] binder: 31976:31978 ioctl 40046207 0 returned -16
[ 1428.767713] binder: 31976:31978 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.767798] binder: 31976:31978 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.780074] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.781934] binder: 31972:31979 ioctl 8010aa01 20000180 returned -22
[ 1428.781995] binder: 31972:31979 ioctl c0086420 20000080 returned -22
[ 1428.794357] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.814214] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.814568] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.836328] binder: 31985:31986 ioctl c0086420 20000080 returned -22
[ 1428.837296] binder: 31985:31986 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.837386] binder: 31985:31986 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.846542] binder: undelivered TRANSACTION_ERROR: 29201
[ 1428.859408] binder_alloc: 31982: binder_alloc_buf, no vma
[ 1428.859452] binder: 31982:31984 transaction failed 29189/-3, size 40-16 line 3134
[ 1428.888979] binder: undelivered TRANSACTION_ERROR: 29189
[ 1428.992825] binder: 31989:31992 ioctl c0086420 20000080 returned -22
[ 1428.994963] binder: 31989:31992 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1428.995057] binder: 31989:31992 transaction failed 29201/-22, size 40-16 line 3197
[ 1428.996224] binder: 31993:31996 ioctl 8010aa01 20000180 returned -22
[ 1428.996491] binder: 31993:31996 ioctl c0086420 20000080 returned -22
[ 1428.996566] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.996572] binder: 31993:31996 ioctl 40046207 0 returned -16
[ 1428.998892] binder: 31990:31995 ioctl 8010aa01 20000180 returned -22
[ 1428.998967] binder: 31990:31995 ioctl c0086420 20000080 returned -22
[ 1428.999039] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.999045] binder: 31990:31995 ioctl 40046207 0 returned -16
[ 1428.999963] binder: 31990:31995 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.000057] binder: 31990:31995 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.006675] binder: 31991:32001 ioctl 8010aa01 20000180 returned -22
[ 1429.006744] binder: 31991:32001 ioctl c0086420 20000080 returned -22
[ 1429.007422] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.007429] binder: 31991:32001 ioctl 40046207 0 returned -16
[ 1429.009245] binder: 31991:32001 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.009342] binder: 31991:32001 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.009430] binder: 31994:31997 ioctl 8010aa01 20000180 returned -22
[ 1429.009492] binder: 31994:31997 ioctl c0086420 20000080 returned -22
[ 1429.009565] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.009571] binder: 31994:31997 ioctl 40046207 0 returned -16
[ 1429.010411] binder: 31994:31997 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.010502] binder: 31994:31997 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.012468] binder: 31988:32002 ioctl 8010aa01 20000180 returned -22
[ 1429.012924] binder: 31988:32002 ioctl c0086420 20000080 returned -22
[ 1429.013119] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.013129] binder: 31988:32002 ioctl 40046207 0 returned -16
[ 1429.014338] binder: 31988:32002 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.014423] binder: 31988:32002 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.022076] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.034591] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.034672] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.058691] binder_alloc: 32000: binder_alloc_buf, no vma
[ 1429.058731] binder: 32000:32003 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.091287] binder: 32005:32006 ioctl 8010aa01 20000180 returned -22
[ 1429.091338] binder: 32005:32006 ioctl c0086420 20000080 returned -22
[ 1429.091400] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.091406] binder: 32005:32006 ioctl 40046207 0 returned -16
[ 1429.092164] binder_alloc: 32000: binder_alloc_buf, no vma
[ 1429.092204] binder: 32005:32006 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.093357] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.103329] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.112732] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.134328] binder: 32010:32011 ioctl c0086420 20000080 returned -22
[ 1429.134394] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.134400] binder: 32010:32011 ioctl 40046207 0 returned -16
[ 1429.135189] binder_alloc: 32000: binder_alloc_buf, no vma
[ 1429.135220] binder: 32010:32011 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.142338] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.142348] binder: 32008:32009 ioctl 40046207 0 returned -16
[ 1429.143125] binder_alloc: 32000: binder_alloc_buf, no vma
[ 1429.143166] binder: 32008:32009 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.146981] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.156334] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.164836] binder: 32013:32016 ioctl 8010aa01 20000180 returned -22
[ 1429.164898] binder: 32013:32016 ioctl c0086420 20000080 returned -22
[ 1429.169013] binder: 32013:32016 transaction failed 29189/-22, size 40-16 line 3011
[ 1429.170908] binder: 32015:32018 ioctl 8010aa01 20000180 returned -22
[ 1429.171087] binder: 32015:32018 ioctl c0086420 20000080 returned -22
[ 1429.173247] binder: 32012:32014 ioctl 8010aa01 20000180 returned -22
[ 1429.173342] binder: 32012:32014 ioctl c0086420 20000080 returned -22
[ 1429.173416] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.173427] binder: 32012:32014 ioctl 40046207 0 returned -16
[ 1429.174359] binder: 32012:32014 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.174555] binder: 32012:32014 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.184412] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.205658] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.206141] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.206316] binder: 32017:32019 ioctl 8010aa01 20000180 returned -22
[ 1429.206370] binder: 32017:32019 ioctl c0086420 20000080 returned -22
[ 1429.216325] binder: 32017:32019 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.216424] binder: 32017:32019 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.230952] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.230959] binder: 32020:32022 ioctl 40046207 0 returned -16
[ 1429.231867] binder: 32020:32022 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.231961] binder: 32020:32022 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.237968] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.257718] binder: 32023:32025 ioctl 8010aa01 20000180 returned -22
[ 1429.257769] binder: 32023:32025 ioctl c0086420 20000080 returned -22
[ 1429.258717] binder: 32023:32025 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.258849] binder: 32023:32025 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.267567] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.272316] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.287196] binder_alloc: 32024: binder_alloc_buf, no vma
[ 1429.287235] binder: 32024:32026 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.338899] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.425675] binder: 32030:32031 ioctl 8010aa01 20000180 returned -22
[ 1429.425726] binder: 32030:32031 ioctl c0086420 20000080 returned -22
[ 1429.426653] binder: 32030:32031 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.426748] binder: 32030:32031 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.436425] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.439190] binder_alloc: 32032: binder_alloc_buf, no vma
[ 1429.439231] binder: 32032:32034 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.452522] binder: 32033:32038 ioctl 8010aa01 20000180 returned -22
[ 1429.452582] binder: 32033:32038 ioctl c0086420 20000080 returned -22
[ 1429.452655] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.452661] binder: 32033:32038 ioctl 40046207 0 returned -16
[ 1429.455877] binder: 32029:32041 ioctl 8010aa01 20000180 returned -22
[ 1429.455961] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.455967] binder: 32036:32042 ioctl 40046207 0 returned -16
[ 1429.457014] binder: 32029:32041 ioctl c0086420 20000080 returned -22
[ 1429.457317] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.457324] binder: 32039:32044 ioctl 40046207 0 returned -16
[ 1429.458573] binder: 32035:32040 ioctl 8010aa01 20000180 returned -22
[ 1429.458729] binder: 32035:32040 ioctl c0086420 20000080 returned -22
[ 1429.458794] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.458799] binder: 32035:32040 ioctl 40046207 0 returned -16
[ 1429.459732] binder_alloc: 32032: binder_alloc_buf, no vma
[ 1429.459785] binder: 32036:32042 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.460174] binder_alloc: 32032: binder_alloc_buf, no vma
[ 1429.460225] binder: 32039:32044 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.460326] binder_alloc: 32032: binder_alloc_buf, no vma
[ 1429.460376] binder: 32029:32041 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.460828] binder_alloc: 32032: binder_alloc_buf, no vma
[ 1429.460866] binder: 32035:32040 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.479795] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.485096] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.522448] binder: 32045:32047 ioctl 8010aa01 20000180 returned -22
[ 1429.522502] binder: 32045:32047 ioctl c0086420 20000080 returned -22
[ 1429.523526] binder: 32045:32047 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.523622] binder: 32045:32047 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.525047] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.528752] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.534896] binder: 32046:32048 ioctl 8010aa01 20000180 returned -22
[ 1429.534936] binder: 32046:32048 ioctl c0086420 20000080 returned -22
[ 1429.534987] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.534993] binder: 32046:32048 ioctl 40046207 0 returned -16
[ 1429.535787] binder: 32046:32048 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.535860] binder: 32046:32048 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.538529] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.554484] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.557608] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.572155] binder_alloc: 32050: binder_alloc_buf, no vma
[ 1429.572196] binder: 32050:32053 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.581902] binder: 32049:32051 ioctl 8010aa01 20000180 returned -22
[ 1429.581962] binder: 32049:32051 ioctl c0086420 20000080 returned -22
[ 1429.582032] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.582037] binder: 32049:32051 ioctl 40046207 0 returned -16
[ 1429.612154] binder: 32055:32057 ioctl 8010aa01 20000180 returned -22
[ 1429.612207] binder: 32055:32057 ioctl c0086420 20000080 returned -22
[ 1429.612952] binder_alloc: 32050: binder_alloc_buf, no vma
[ 1429.612991] binder: 32055:32057 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.616066] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.616073] binder: 32058:32059 ioctl 40046207 0 returned -16
[ 1429.616969] binder_alloc: 32050: binder_alloc_buf, no vma
[ 1429.617008] binder: 32058:32059 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.617887] binder: 32054:32056 ioctl 8010aa01 20000180 returned -22
[ 1429.617961] binder: 32054:32056 ioctl c0086420 20000080 returned -22
[ 1429.618045] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.618050] binder: 32054:32056 ioctl 40046207 0 returned -16
[ 1429.618979] binder_alloc: 32050: binder_alloc_buf, no vma
[ 1429.619017] binder: 32054:32056 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.619068] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.642906] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.659435] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.661051] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.671591] binder_alloc: 32061: binder_alloc_buf, no vma
[ 1429.671632] binder: 32061:32062 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.709106] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.807214] binder_alloc: 32069: binder_alloc_buf, no vma
[ 1429.807257] binder: 32069:32072 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.807317] binder: 32070:32074 ioctl 8010aa01 20000180 returned -22
[ 1429.807569] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.807575] binder: 32070:32074 ioctl 40046207 0 returned -16
[ 1429.809677] binder_alloc: 32069: binder_alloc_buf, no vma
[ 1429.809715] binder: 32070:32074 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.811587] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.811594] binder: 32068:32078 ioctl 40046207 0 returned -16
[ 1429.812513] binder_alloc: 32069: binder_alloc_buf, no vma
[ 1429.812552] binder: 32068:32078 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.823555] binder: 32066:32077 ioctl 8010aa01 20000180 returned -22
[ 1429.823612] binder: 32066:32077 ioctl c0086420 20000080 returned -22
[ 1429.823672] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.823677] binder: 32066:32077 ioctl 40046207 0 returned -16
[ 1429.828117] binder: 32065:32076 ioctl 8010aa01 20000180 returned -22
[ 1429.828399] binder: 32065:32076 ioctl c0086420 20000080 returned -22
[ 1429.828462] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.828468] binder: 32065:32076 ioctl 40046207 0 returned -16
[ 1429.829808] binder_alloc: 32069: binder_alloc_buf, no vma
[ 1429.829848] binder: 32065:32076 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.834857] binder: 32073:32080 ioctl 8010aa01 20000180 returned -22
[ 1429.835577] binder: 32073:32080 ioctl c0086420 20000080 returned -22
[ 1429.836725] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.836733] binder: 32073:32080 ioctl 40046207 0 returned -16
[ 1429.837889] binder_alloc: 32069: binder_alloc_buf, no vma
[ 1429.837932] binder: 32073:32080 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.854264] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.861728] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.879339] binder: 32081:32084 ioctl 8010aa01 20000180 returned -22
[ 1429.879441] binder: 32081:32084 ioctl c0086420 20000080 returned -22
[ 1429.879456] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.879605] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.879611] binder: 32081:32084 ioctl 40046207 0 returned -16
[ 1429.894126] binder: 32082:32086 ioctl 8010aa01 20000180 returned -22
[ 1429.902665] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.902674] binder: 32082:32086 ioctl 40046207 0 returned -16
[ 1429.903602] binder_alloc: 32069: binder_alloc_buf, no vma
[ 1429.903643] binder: 32082:32086 transaction failed 29189/-3, size 40-16 line 3134
[ 1429.914877] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.915062] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.919175] binder: undelivered TRANSACTION_ERROR: 29189
[ 1429.919339] binder: 32087:32088 ioctl 8010aa01 20000180 returned -22
[ 1429.919399] binder: 32087:32088 ioctl c0086420 20000080 returned -22
[ 1429.920406] binder: 32087:32088 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.920498] binder: 32087:32088 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.933686] binder: 32083:32085 ioctl 8010aa01 20000180 returned -22
[ 1429.933736] binder: 32083:32085 ioctl c0086420 20000080 returned -22
[ 1429.933796] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.933801] binder: 32083:32085 ioctl 40046207 0 returned -16
[ 1429.935787] binder: 32083:32085 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1429.935882] binder: 32083:32085 transaction failed 29201/-22, size 40-16 line 3197
[ 1429.944187] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.951120] binder: undelivered TRANSACTION_ERROR: 29201
[ 1429.969975] binder_alloc: 32091: binder_alloc_buf, no vma
[ 1429.970015] binder: 32091:32094 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.021070] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.045912] binder_alloc: 32095: binder_alloc_buf, no vma
[ 1430.045994] binder: 32095:32097 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.089193] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.123097] binder: 32098:32100 ioctl 8010aa01 20000180 returned -22
[ 1430.123191] binder: 32098:32100 ioctl c0086420 20000080 returned -22
[ 1430.124207] binder: 32098:32100 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.124299] binder: 32098:32100 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.126437] binder: 32101:32105 ioctl 8010aa01 20000180 returned -22
[ 1430.126505] binder: 32101:32105 ioctl c0086420 20000080 returned -22
[ 1430.126727] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.126733] binder: 32101:32105 ioctl 40046207 0 returned -16
[ 1430.137965] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.137975] binder: 32103:32110 ioctl 40046207 0 returned -16
[ 1430.139277] binder: 32103:32110 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.139370] binder: 32103:32110 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.140020] binder: 32099:32109 ioctl 8010aa01 20000180 returned -22
[ 1430.140162] binder: 32099:32109 ioctl c0086420 20000080 returned -22
[ 1430.140233] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.140238] binder: 32099:32109 ioctl 40046207 0 returned -16
[ 1430.140646] binder: 32104:32107 ioctl 8010aa01 20000180 returned -22
[ 1430.140724] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.140730] binder: 32104:32107 ioctl 40046207 0 returned -16
[ 1430.141519] binder: 32099:32109 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.141610] binder: 32099:32109 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.143899] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.143980] binder: 32104:32107 transaction failed 29189/-22, size 40-16 line 3011
[ 1430.168154] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.171272] binder_alloc: 32112: binder_alloc_buf, no vma
[ 1430.171314] binder: 32112:32113 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.215880] binder: 32115:32116 ioctl 8010aa01 20000180 returned -22
[ 1430.215932] binder: 32115:32116 ioctl c0086420 20000080 returned -22
[ 1430.215992] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.215998] binder: 32115:32116 ioctl 40046207 0 returned -16
[ 1430.216791] binder_alloc: 32112: binder_alloc_buf, no vma
[ 1430.216832] binder: 32115:32116 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.217442] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.226802] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.243435] binder: 32117:32119 ioctl 8010aa01 20000180 returned -22
[ 1430.243474] binder: 32117:32119 ioctl c0086420 20000080 returned -22
[ 1430.243521] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.243525] binder: 32117:32119 ioctl 40046207 0 returned -16
[ 1430.244240] binder_alloc: 32112: binder_alloc_buf, no vma
[ 1430.244311] binder: 32117:32119 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.249241] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.249278] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.255844] binder: 32120:32121 ioctl 8010aa01 20000180 returned -22
[ 1430.255883] binder: 32120:32121 ioctl c0086420 20000080 returned -22
[ 1430.268987] binder: 32118:32122 ioctl c0086420 20000080 returned -22
[ 1430.269318] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.269324] binder: 32118:32122 ioctl 40046207 0 returned -16
[ 1430.270197] binder_alloc: 32120: binder_alloc_buf failed to map pages in userspace, no vma
[ 1430.270237] binder: 32118:32122 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.271888] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.304331] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.310855] binder_alloc: 32126: binder_alloc_buf, no vma
[ 1430.310947] binder: 32126:32128 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.323636] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.323644] binder: 32127:32132 ioctl 40046207 0 returned -16
[ 1430.324432] binder_alloc: 32126: binder_alloc_buf, no vma
[ 1430.324473] binder: 32127:32132 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.458057] binder: 32124:32129 ioctl 8010aa01 20000180 returned -22
[ 1430.458116] binder: 32124:32129 ioctl c0086420 20000080 returned -22
[ 1430.458885] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.458892] binder: 32124:32129 ioctl 40046207 0 returned -16
[ 1430.459633] binder_alloc: 32126: binder_alloc_buf, no vma
[ 1430.459673] binder: 32124:32129 transaction failed 29189/-3, size 40-16 line 3134
[ 1430.459817] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.459851] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.468477] binder: undelivered TRANSACTION_ERROR: 29189
[ 1430.476387] binder: 32125:32130 ioctl 8010aa01 20000180 returned -22
[ 1430.476490] binder: 32125:32130 ioctl c0086420 20000080 returned -22
[ 1430.477668] binder: 32125:32130 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.477851] binder: 32125:32130 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.515050] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.758363] binder: 32138:32141 ioctl c0086420 20000080 returned -22
[ 1430.759415] binder: 32138:32141 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.759506] binder: 32138:32141 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.763303] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.763310] binder: 32137:32142 ioctl 40046207 0 returned -16
[ 1430.764044] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.764050] binder: 32135:32144 ioctl 40046207 0 returned -16
[ 1430.765003] binder: 32137:32142 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.765097] binder: 32137:32142 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.765634] binder: 32135:32144 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.765721] binder: 32135:32144 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.771322] binder: 32140:32143 ioctl 8010aa01 20000180 returned -22
[ 1430.771382] binder: 32140:32143 ioctl c0086420 20000080 returned -22
[ 1430.771453] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.771458] binder: 32140:32143 ioctl 40046207 0 returned -16
[ 1430.772364] binder: 32140:32143 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.772451] binder: 32140:32143 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.773216] binder: 32134:32147 ioctl 8010aa01 20000180 returned -22
[ 1430.773448] binder: 32134:32147 ioctl c0086420 20000080 returned -22
[ 1430.773525] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.773530] binder: 32134:32147 ioctl 40046207 0 returned -16
[ 1430.774802] binder: 32139:32148 ioctl 8010aa01 20000180 returned -22
[ 1430.774873] binder: 32139:32148 ioctl c0086420 20000080 returned -22
[ 1430.774948] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.774953] binder: 32139:32148 ioctl 40046207 0 returned -16
[ 1430.775813] binder: 32134:32147 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.775906] binder: 32134:32147 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.776323] binder: 32139:32148 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.776410] binder: 32139:32148 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.786661] binder: 32136:32146 ioctl 8010aa01 20000180 returned -22
[ 1430.787771] binder: 32136:32146 ioctl c0086420 20000080 returned -22
[ 1430.788412] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.788420] binder: 32136:32146 ioctl 40046207 0 returned -16
[ 1430.802490] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.804210] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.815578] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.833448] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.833585] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.853947] binder: 32151:32152 ioctl c0086420 20000080 returned -22
[ 1430.854757] binder: 32150:32153 ioctl 8010aa01 20000180 returned -22
[ 1430.854993] binder: 32151:32152 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.855086] binder: 32151:32152 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.855155] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.855340] binder: 32150:32153 ioctl c0086420 20000080 returned -22
[ 1430.855405] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.855411] binder: 32150:32153 ioctl 40046207 0 returned -16
[ 1430.856236] binder: 32150:32153 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.856332] binder: 32150:32153 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.879674] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.895002] binder: 32155:32159 ioctl 8010aa01 20000180 returned -22
[ 1430.895538] binder: 32155:32159 ioctl c0086420 20000080 returned -22
[ 1430.895935] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.897776] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.897782] binder: 32158:32162 ioctl 40046207 0 returned -16
[ 1430.898745] binder: 32158:32162 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.898842] binder: 32158:32162 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.905018] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.905025] binder: 32156:32163 ioctl 40046207 0 returned -16
[ 1430.905812] binder: 32156:32163 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.905902] binder: 32156:32163 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.906614] binder: 32155:32159 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.906704] binder: 32155:32159 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.924656] binder: 32157:32161 ioctl 8010aa01 20000180 returned -22
[ 1430.924716] binder: 32157:32161 ioctl c0086420 20000080 returned -22
[ 1430.924788] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.924794] binder: 32157:32161 ioctl 40046207 0 returned -16
[ 1430.930333] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.930623] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.934516] binder: 32164:32166 ioctl 8010aa01 20000180 returned -22
[ 1430.934570] binder: 32164:32166 ioctl c0086420 20000080 returned -22
[ 1430.935487] binder: 32164:32166 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.935585] binder: 32164:32166 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.954907] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.963318] binder: undelivered TRANSACTION_ERROR: 29201
[ 1430.972712] binder: 32165:32167 ioctl 8010aa01 20000180 returned -22
[ 1430.972775] binder: 32165:32167 ioctl c0086420 20000080 returned -22
[ 1430.973731] binder: 32165:32167 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1430.973826] binder: 32165:32167 transaction failed 29201/-22, size 40-16 line 3197
[ 1430.991780] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.025469] binder: 32168:32169 ioctl 8010aa01 20000180 returned -22
[ 1431.025522] binder: 32168:32169 ioctl c0086420 20000080 returned -22
[ 1431.026473] binder: 32168:32169 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.026564] binder: 32168:32169 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.039635] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.039645] binder: 32171:32177 ioctl 40046207 0 returned -16
[ 1431.043522] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.043530] binder: 32172:32174 ioctl 40046207 0 returned -16
[ 1431.045506] binder: 32171:32177 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.045599] binder: 32171:32177 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.046725] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.046810] binder: 32172:32174 transaction failed 29189/-22, size 40-16 line 3011
[ 1431.068507] binder: 32178:32182 ioctl 8010aa01 20000180 returned -22
[ 1431.068570] binder: 32178:32182 ioctl c0086420 20000080 returned -22
[ 1431.069563] binder: 32178:32182 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.069658] binder: 32178:32182 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.072948] binder: 32175:32179 ioctl 8010aa01 20000180 returned -22
[ 1431.073860] binder: 32175:32179 ioctl c0086420 20000080 returned -22
[ 1431.074100] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.074106] binder: 32175:32179 ioctl 40046207 0 returned -16
[ 1431.074824] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.084373] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.084381] binder: 32183:32185 ioctl 40046207 0 returned -16
[ 1431.085927] binder: 32183:32185 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.086025] binder: 32183:32185 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.087811] binder: 32176:32180 ioctl 8010aa01 20000180 returned -22
[ 1431.088242] binder: 32176:32180 ioctl c0086420 20000080 returned -22
[ 1431.088558] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.088564] binder: 32176:32180 ioctl 40046207 0 returned -16
[ 1431.089577] binder: 32176:32180 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.089851] binder: 32176:32180 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.091040] binder: 32184:32186 ioctl 8010aa01 20000180 returned -22
[ 1431.091103] binder: 32184:32186 ioctl c0086420 20000080 returned -22
[ 1431.092286] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.092294] binder: 32184:32186 ioctl 40046207 0 returned -16
[ 1431.092928] binder_alloc: 32178: binder_alloc_buf, no vma
[ 1431.092967] binder: 32184:32186 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.106408] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.115987] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.116101] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.146787] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.148770] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.167540] binder: 32190:32191 ioctl 8010aa01 20000180 returned -22
[ 1431.167756] binder: 32188:32192 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.167836] binder: 32188:32192 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.168087] binder: 32190:32191 ioctl c0086420 20000080 returned -22
[ 1431.170237] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.170250] binder: 32190:32191 ioctl 40046207 0 returned -16
[ 1431.172621] binder: 32190:32191 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.172715] binder: 32190:32191 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.186920] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.187468] binder: 32189:32195 ioctl 8010aa01 20000180 returned -22
[ 1431.187527] binder: 32189:32195 ioctl c0086420 20000080 returned -22
[ 1431.197936] binder: 32189:32195 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.198695] binder: 32189:32195 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.204725] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.204733] binder: 32193:32196 ioctl 40046207 0 returned -16
[ 1431.205230] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.208523] binder: 32194:32198 ioctl 8010aa01 20000180 returned -22
[ 1431.208564] binder: 32194:32198 ioctl c0086420 20000080 returned -22
[ 1431.208618] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.208622] binder: 32194:32198 ioctl 40046207 0 returned -16
[ 1431.209536] binder: 32194:32198 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.209630] binder: 32194:32198 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.213815] binder: 32193:32196 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.213910] binder: 32193:32196 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.218053] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.218061] binder: 32199:32200 ioctl 40046207 0 returned -16
[ 1431.219016] binder: 32199:32200 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.219112] binder: 32199:32200 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.234706] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.250624] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.252946] binder: 32197:32201 ioctl 8010aa01 20000180 returned -22
[ 1431.253199] binder: 32197:32201 ioctl c0086420 20000080 returned -22
[ 1431.288650] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.294932] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.336064] binder: 32205:32212 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.336149] binder: 32205:32212 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.337357] binder: 32203:32213 ioctl 8010aa01 20000180 returned -22
[ 1431.339988] binder: 32203:32213 ioctl c0086420 20000080 returned -22
[ 1431.340103] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.340110] binder: 32203:32213 ioctl 40046207 0 returned -16
[ 1431.340955] binder: 32203:32213 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.342004] binder: 32207:32215 ioctl 8010aa01 20000180 returned -22
[ 1431.342065] binder: 32207:32215 ioctl c0086420 20000080 returned -22
[ 1431.342139] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.342145] binder: 32207:32215 ioctl 40046207 0 returned -16
[ 1431.342673] binder: 32203:32213 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.343155] binder: 32207:32215 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.343245] binder: 32207:32215 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.345625] binder: 32204:32214 ioctl 8010aa01 20000180 returned -22
[ 1431.345689] binder: 32204:32214 ioctl c0086420 20000080 returned -22
[ 1431.345764] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.345769] binder: 32204:32214 ioctl 40046207 0 returned -16
[ 1431.349616] binder: 32204:32214 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.349706] binder: 32204:32214 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.357262] binder: 32209:32216 ioctl 8010aa01 20000180 returned -22
[ 1431.357428] binder: 32209:32216 ioctl c0086420 20000080 returned -22
[ 1431.357501] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.357506] binder: 32208:32217 ioctl 40046207 0 returned -16
[ 1431.358884] binder: 32208:32217 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.358974] binder: 32208:32217 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.359588] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.359595] binder: 32209:32216 ioctl 40046207 0 returned -16
[ 1431.379604] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.379612] binder: 32218:32219 ioctl 40046207 0 returned -16
[ 1431.380353] binder_alloc: 32205: binder_alloc_buf, no vma
[ 1431.380395] binder: 32218:32219 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.382102] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.392306] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.392863] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.417962] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.440123] binder_alloc: 32221: binder_alloc_buf, no vma
[ 1431.440163] binder: 32221:32223 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.445334] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.450996] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.477220] binder: 32222:32225 ioctl 8010aa01 20000180 returned -22
[ 1431.477686] binder: 32222:32225 ioctl c0086420 20000080 returned -22
[ 1431.478053] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.478058] binder: 32222:32225 ioctl 40046207 0 returned -16
[ 1431.479744] binder_alloc: 32221: binder_alloc_buf, no vma
[ 1431.479785] binder: 32222:32225 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.481795] binder: 32224:32226 ioctl 8010aa01 20000180 returned -22
[ 1431.481946] binder: 32227:32229 ioctl 8010aa01 20000180 returned -22
[ 1431.482011] binder: 32224:32226 ioctl c0086420 20000080 returned -22
[ 1431.482074] binder: 32227:32229 ioctl c0086420 20000080 returned -22
[ 1431.482902] binder_alloc: 32221: binder_alloc_buf, no vma
[ 1431.482942] binder: 32224:32226 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.483033] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.483039] binder: 32227:32229 ioctl 40046207 0 returned -16
[ 1431.500266] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.523429] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.524827] binder: 32228:32232 ioctl 8010aa01 20000180 returned -22
[ 1431.524881] binder: 32228:32232 ioctl c0086420 20000080 returned -22
[ 1431.524943] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.524949] binder: 32228:32232 ioctl 40046207 0 returned -16
[ 1431.525769] binder_alloc: 32221: binder_alloc_buf, no vma
[ 1431.525809] binder: 32228:32232 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.531517] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.531524] binder: 32230:32235 ioctl 40046207 0 returned -16
[ 1431.532307] binder_alloc: 32221: binder_alloc_buf, no vma
[ 1431.532346] binder: 32230:32235 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.535955] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.539332] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.557191] binder_alloc: 32236: binder_alloc_buf, no vma
[ 1431.557230] binder: 32236:32237 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.568825] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.614989] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.663686] binder: 32242:32245 ioctl 8010aa01 20000180 returned -22
[ 1431.663857] binder: 32242:32245 ioctl c0086420 20000080 returned -22
[ 1431.664770] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.664776] binder: 32242:32245 ioctl 40046207 0 returned -16
[ 1431.665525] binder_alloc: 32240: binder_alloc_buf, no vma
[ 1431.666759] binder: 32240:32246 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.669122] binder: 32244:32250 ioctl 8010aa01 20000180 returned -22
[ 1431.669187] binder: 32244:32250 ioctl c0086420 20000080 returned -22
[ 1431.669298] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.669304] binder: 32244:32250 ioctl 40046207 0 returned -16
[ 1431.670036] binder_alloc: 32240: binder_alloc_buf, no vma
[ 1431.670299] binder: 32244:32250 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.672489] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.672496] binder: 32243:32247 ioctl 40046207 0 returned -16
[ 1431.673198] binder_alloc: 32240: binder_alloc_buf, no vma
[ 1431.673238] binder: 32243:32247 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.680043] binder: 32241:32251 ioctl 8010aa01 20000180 returned -22
[ 1431.680285] binder: 32241:32251 ioctl c0086420 20000080 returned -22
[ 1431.680348] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.680354] binder: 32241:32251 ioctl 40046207 0 returned -16
[ 1431.681025] binder_alloc: 32240: binder_alloc_buf, no vma
[ 1431.683349] binder: 32241:32251 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.686649] binder: 32239:32252 ioctl 8010aa01 20000180 returned -22
[ 1431.686899] binder: 32239:32252 ioctl c0086420 20000080 returned -22
[ 1431.687794] binder_alloc: 32240: binder_alloc_buf, no vma
[ 1431.687831] binder: 32239:32252 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.704772] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.704779] binder: 32254:32255 ioctl 40046207 0 returned -16
[ 1431.705571] binder_alloc: 32240: binder_alloc_buf, no vma
[ 1431.705610] binder: 32254:32255 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.727734] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.728376] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.735989] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.741289] binder: 32256:32257 ioctl 8010aa01 20000180 returned -22
[ 1431.741343] binder: 32256:32257 ioctl c0086420 20000080 returned -22
[ 1431.741407] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.741413] binder: 32256:32257 ioctl 40046207 0 returned -16
[ 1431.750011] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.764417] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.769916] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.784740] binder: 32260:32261 ioctl 8010aa01 20000180 returned -22
[ 1431.784799] binder: 32260:32261 ioctl c0086420 20000080 returned -22
[ 1431.785515] binder: 32260:32261 transaction failed 29189/-22, size 40-16 line 3011
[ 1431.797275] binder: 32258:32263 ioctl 8010aa01 20000180 returned -22
[ 1431.797815] binder: 32258:32263 ioctl c0086420 20000080 returned -22
[ 1431.800378] binder: 32258:32263 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.800468] binder: 32258:32263 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.813594] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.813601] binder: 32259:32266 ioctl 40046207 0 returned -16
[ 1431.814600] binder: 32259:32266 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.814685] binder: 32259:32266 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.815200] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.821727] binder: 32265:32267 ioctl 8010aa01 20000180 returned -22
[ 1431.821876] binder: 32265:32267 ioctl c0086420 20000080 returned -22
[ 1431.821982] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.821988] binder: 32265:32267 ioctl 40046207 0 returned -16
[ 1431.826147] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.826154] binder: 32264:32269 ioctl 40046207 0 returned -16
[ 1431.827016] binder: 32264:32269 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1431.827324] binder: 32264:32269 transaction failed 29201/-22, size 40-16 line 3197
[ 1431.835903] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.856205] binder_alloc: 32272: binder_alloc_buf, no vma
[ 1431.856251] binder: 32272:32273 transaction failed 29189/-3, size 40-16 line 3134
[ 1431.864783] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.865014] binder: 32268:32271 ioctl 8010aa01 20000180 returned -22
[ 1431.871178] binder: undelivered TRANSACTION_ERROR: 29201
[ 1431.878266] binder: 32268:32271 ioctl c0086420 20000080 returned -22
[ 1431.883281] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.883293] binder: 32268:32271 ioctl 40046207 0 returned -16
[ 1431.888520] binder: undelivered TRANSACTION_ERROR: 29189
[ 1431.893264] binder: 32268:32271 transaction failed 29189/-22, size 40-16 line 3011
[ 1431.907116] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.012488] binder_alloc: 32277: binder_alloc_buf, no vma
[ 1432.012531] binder: 32277:32282 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.020729] binder: 32281:32286 ioctl 8010aa01 20000180 returned -22
[ 1432.020791] binder: 32281:32286 ioctl c0086420 20000080 returned -22
[ 1432.020863] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.020868] binder: 32281:32286 ioctl 40046207 0 returned -16
[ 1432.021662] binder_alloc: 32277: binder_alloc_buf, no vma
[ 1432.021708] binder: 32281:32286 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.021794] binder: 32280:32283 ioctl 8010aa01 20000180 returned -22
[ 1432.021884] binder: 32280:32283 ioctl c0086420 20000080 returned -22
[ 1432.022015] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.022021] binder: 32280:32283 ioctl 40046207 0 returned -16
[ 1432.023481] binder: 32278:32284 ioctl 8010aa01 20000180 returned -22
[ 1432.023728] binder: 32278:32284 ioctl c0086420 20000080 returned -22
[ 1432.024798] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.024805] binder: 32278:32284 ioctl 40046207 0 returned -16
[ 1432.025544] binder_alloc: 32277: binder_alloc_buf, no vma
[ 1432.025587] binder: 32278:32284 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.036006] binder: 32276:32290 ioctl 8010aa01 20000180 returned -22
[ 1432.036617] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.036624] binder: 32276:32290 ioctl 40046207 0 returned -16
[ 1432.037750] binder_alloc: 32277: binder_alloc_buf, no vma
[ 1432.037790] binder: 32276:32290 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.044413] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.044646] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.065841] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.065849] binder: 32288:32291 ioctl 40046207 0 returned -16
[ 1432.066598] binder_alloc: 32277: binder_alloc_buf, no vma
[ 1432.066638] binder: 32288:32291 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.093925] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.100948] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.103623] binder: 32292:32293 ioctl 8010aa01 20000180 returned -22
[ 1432.103684] binder: 32292:32293 ioctl c0086420 20000080 returned -22
[ 1432.104601] binder: 32292:32293 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.104751] binder: 32292:32293 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.113342] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.116499] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.141217] binder: 32295:32297 ioctl 8010aa01 20000180 returned -22
[ 1432.141276] binder: 32295:32297 ioctl c0086420 20000080 returned -22
[ 1432.150006] binder: 32296:32301 ioctl 8010aa01 20000180 returned -22
[ 1432.150066] binder: 32296:32301 ioctl c0086420 20000080 returned -22
[ 1432.150136] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.150141] binder: 32296:32301 ioctl 40046207 0 returned -16
[ 1432.152121] binder_alloc: 32295: binder_alloc_buf failed to map pages in userspace, no vma
[ 1432.152160] binder: 32296:32301 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.152794] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.152800] binder: 32300:32304 ioctl 40046207 0 returned -16
[ 1432.153714] binder_alloc: 32295: binder_alloc_buf failed to map pages in userspace, no vma
[ 1432.153751] binder: 32300:32304 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.155390] binder: 32299:32303 ioctl 8010aa01 20000180 returned -22
[ 1432.155461] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.155468] binder: 32299:32303 ioctl 40046207 0 returned -16
[ 1432.156416] binder_alloc: 32295: binder_alloc_buf failed to map pages in userspace, no vma
[ 1432.156454] binder: 32299:32303 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.192136] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.200732] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.223272] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.227998] binder_alloc: 32306: binder_alloc_buf, no vma
[ 1432.228081] binder: 32306:32308 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.287065] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.333320] binder_alloc: 32309: binder_alloc_buf, no vma
[ 1432.333360] binder: 32309:32312 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.344146] binder: 32311:32315 ioctl 8010aa01 20000180 returned -22
[ 1432.344202] binder: 32311:32315 ioctl c0086420 20000080 returned -22
[ 1432.344265] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.344271] binder: 32311:32315 ioctl 40046207 0 returned -16
[ 1432.345073] binder_alloc: 32309: binder_alloc_buf, no vma
[ 1432.345110] binder: 32311:32315 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.349565] binder: 32314:32320 ioctl 8010aa01 20000180 returned -22
[ 1432.350404] binder: 32314:32320 ioctl c0086420 20000080 returned -22
[ 1432.350477] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.350483] binder: 32314:32320 ioctl 40046207 0 returned -16
[ 1432.354507] binder: 32310:32321 ioctl 8010aa01 20000180 returned -22
[ 1432.354574] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.354579] binder: 32310:32321 ioctl 40046207 0 returned -16
[ 1432.355435] binder_alloc: 32309: binder_alloc_buf, no vma
[ 1432.355473] binder: 32310:32321 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.376302] binder: 32317:32323 ioctl 8010aa01 20000180 returned -22
[ 1432.376399] binder: 32317:32323 ioctl c0086420 20000080 returned -22
[ 1432.376789] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.376795] binder: 32317:32323 ioctl 40046207 0 returned -16
[ 1432.377669] binder_alloc: 32309: binder_alloc_buf, no vma
[ 1432.377708] binder: 32317:32323 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.380726] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.388619] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.398478] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.398484] binder: 32324:32325 ioctl 40046207 0 returned -16
[ 1432.399218] binder_alloc: 32309: binder_alloc_buf, no vma
[ 1432.399256] binder: 32324:32325 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.416438] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.419837] binder: 32326:32327 ioctl 8010aa01 20000180 returned -22
[ 1432.419891] binder: 32326:32327 ioctl c0086420 20000080 returned -22
[ 1432.420826] binder: 32326:32327 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.420973] binder: 32326:32327 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.439475] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.442295] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.461653] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.484331] binder: 32330:32335 ioctl 8010aa01 20000180 returned -22
[ 1432.484456] binder: 32330:32335 ioctl c0086420 20000080 returned -22
[ 1432.487108] binder: 32330:32335 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.487210] binder: 32330:32335 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.489032] binder: 32329:32339 ioctl c0086420 20000080 returned -22
[ 1432.489114] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.489120] binder: 32329:32339 ioctl 40046207 0 returned -16
[ 1432.489949] binder: 32329:32339 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.490037] binder: 32329:32339 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.490118] binder: 32334:32338 ioctl 8010aa01 20000180 returned -22
[ 1432.490182] binder: 32334:32338 ioctl c0086420 20000080 returned -22
[ 1432.490256] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.490262] binder: 32334:32338 ioctl 40046207 0 returned -16
[ 1432.491416] binder: 32334:32338 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.491507] binder: 32334:32338 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.495340] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.495347] binder: 32332:32336 ioctl 40046207 0 returned -16
[ 1432.497202] binder: 32332:32336 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.497296] binder: 32332:32336 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.502959] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.502967] binder: 32333:32341 ioctl 40046207 0 returned -16
[ 1432.503806] binder: 32333:32341 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.503975] binder: 32333:32341 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.504995] binder: 32328:32340 ioctl 8010aa01 20000180 returned -22
[ 1432.506003] binder: 32328:32340 ioctl c0086420 20000080 returned -22
[ 1432.506139] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.506145] binder: 32328:32340 ioctl 40046207 0 returned -16
[ 1432.509797] binder: 32328:32340 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.510039] binder: 32328:32340 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.529247] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.532651] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.532936] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.558633] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.567838] binder: 32342:32343 ioctl 8010aa01 20000180 returned -22
[ 1432.569365] binder: 32342:32343 ioctl c0086420 20000080 returned -22
[ 1432.571079] binder: 32342:32343 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.571185] binder: 32342:32343 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.571682] binder: 32344:32345 ioctl 8010aa01 20000180 returned -22
[ 1432.571734] binder: 32344:32345 ioctl c0086420 20000080 returned -22
[ 1432.571797] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.571803] binder: 32344:32345 ioctl 40046207 0 returned -16
[ 1432.572695] binder: 32344:32345 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.572786] binder: 32344:32345 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.578823] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.589332] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.600806] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.608314] binder: 32347:32351 ioctl c0086420 20000080 returned -22
[ 1432.609853] binder: 32347:32351 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.609946] binder: 32347:32351 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.611306] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.612968] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.612975] binder: 32346:32349 ioctl 40046207 0 returned -16
[ 1432.613860] binder: 32346:32349 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.613953] binder: 32346:32349 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.626495] binder: 32348:32352 ioctl 8010aa01 20000180 returned -22
[ 1432.626549] binder: 32348:32352 ioctl c0086420 20000080 returned -22
[ 1432.626611] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.626616] binder: 32348:32352 ioctl 40046207 0 returned -16
[ 1432.627641] binder: 32348:32352 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.627728] binder: 32348:32352 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.638800] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.645319] binder_alloc: 32353: binder_alloc_buf, no vma
[ 1432.645359] binder: 32353:32355 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.655629] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.659345] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.701187] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.780111] binder_alloc: 32357: binder_alloc_buf, no vma
[ 1432.780150] binder: 32357:32360 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.786045] binder: 32358:32361 ioctl 8010aa01 20000180 returned -22
[ 1432.786099] binder: 32358:32361 ioctl c0086420 20000080 returned -22
[ 1432.786160] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.786166] binder: 32358:32361 ioctl 40046207 0 returned -16
[ 1432.786956] binder_alloc: 32357: binder_alloc_buf, no vma
[ 1432.786992] binder: 32358:32361 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.788795] binder: 32362:32364 ioctl 8010aa01 20000180 returned -22
[ 1432.789049] binder: 32362:32364 ioctl c0086420 20000080 returned -22
[ 1432.789124] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.789130] binder: 32362:32364 ioctl 40046207 0 returned -16
[ 1432.789858] binder_alloc: 32357: binder_alloc_buf, no vma
[ 1432.789896] binder: 32362:32364 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.799618] binder: 32359:32366 ioctl 8010aa01 20000180 returned -22
[ 1432.800311] binder: 32359:32366 ioctl c0086420 20000080 returned -22
[ 1432.800632] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.800638] binder: 32359:32366 ioctl 40046207 0 returned -16
[ 1432.803102] binder: 32356:32368 ioctl 8010aa01 20000180 returned -22
[ 1432.803168] binder: 32356:32368 ioctl c0086420 20000080 returned -22
[ 1432.803227] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.803232] binder: 32356:32368 ioctl 40046207 0 returned -16
[ 1432.804086] binder_alloc: 32357: binder_alloc_buf, no vma
[ 1432.804335] binder: 32356:32368 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.808264] binder_alloc: 32357: binder_alloc_buf, no vma
[ 1432.808301] binder: 32359:32366 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.817506] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.823597] binder: 32363:32369 ioctl c0086420 20000080 returned -22
[ 1432.823662] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.823668] binder: 32363:32369 ioctl 40046207 0 returned -16
[ 1432.824625] binder_alloc: 32357: binder_alloc_buf, no vma
[ 1432.824665] binder: 32363:32369 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.835589] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.835597] binder: 32371:32372 ioctl 40046207 0 returned -16
[ 1432.836341] binder_alloc: 32357: binder_alloc_buf, no vma
[ 1432.836376] binder: 32371:32372 transaction failed 29189/-3, size 40-16 line 3134
[ 1432.838437] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.863119] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.869665] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.873313] binder: 32373:32374 ioctl 8010aa01 20000180 returned -22
[ 1432.873366] binder: 32373:32374 ioctl c0086420 20000080 returned -22
[ 1432.874402] binder: 32373:32374 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.874495] binder: 32373:32374 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.878949] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.879066] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.896247] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.896256] binder: 32375:32377 ioctl 40046207 0 returned -16
[ 1432.897266] binder: 32375:32377 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.897355] binder: 32375:32377 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.897802] binder: undelivered TRANSACTION_ERROR: 29189
[ 1432.922797] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.933137] binder: 32381:32385 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.933236] binder: 32381:32385 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.935442] binder: 32380:32386 ioctl 8010aa01 20000180 returned -22
[ 1432.935840] binder: 32380:32386 ioctl c0086420 20000080 returned -22
[ 1432.935914] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.935920] binder: 32380:32386 ioctl 40046207 0 returned -16
[ 1432.937041] binder: 32380:32386 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.937131] binder: 32380:32386 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.938559] binder: 32378:32384 ioctl 8010aa01 20000180 returned -22
[ 1432.938627] binder: 32378:32384 ioctl c0086420 20000080 returned -22
[ 1432.938704] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.938710] binder: 32378:32384 ioctl 40046207 0 returned -16
[ 1432.939626] binder: 32378:32384 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.939717] binder: 32378:32384 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.943707] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.943715] binder: 32383:32387 ioctl 40046207 0 returned -16
[ 1432.944708] binder: 32383:32387 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.944807] binder: 32383:32387 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.948092] binder: 32382:32388 ioctl 8010aa01 20000180 returned -22
[ 1432.949030] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.949286] binder: 32382:32388 ioctl c0086420 20000080 returned -22
[ 1432.949465] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.949471] binder: 32382:32388 ioctl 40046207 0 returned -16
[ 1432.962402] binder: 32382:32388 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1432.962497] binder: 32382:32388 transaction failed 29201/-22, size 40-16 line 3197
[ 1432.966940] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.981656] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.990255] binder: undelivered TRANSACTION_ERROR: 29201
[ 1432.994306] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.006737] binder: 32389:32390 ioctl 8010aa01 20000180 returned -22
[ 1433.006808] binder: 32389:32390 ioctl c0086420 20000080 returned -22
[ 1433.007353] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.008001] binder: 32389:32390 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.008097] binder: 32389:32390 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.027122] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.027130] binder: 32392:32394 ioctl 40046207 0 returned -16
[ 1433.028082] binder: 32392:32394 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.028205] binder: 32392:32394 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.031152] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.045583] binder: 32398:32399 ioctl 8010aa01 20000180 returned -22
[ 1433.045680] binder: 32398:32399 ioctl c0086420 20000080 returned -22
[ 1433.046939] binder: 32398:32399 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.047184] binder: 32398:32399 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.049097] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.049105] binder: 32391:32397 ioctl 40046207 0 returned -16
[ 1433.049932] binder: 32391:32397 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.050028] binder: 32391:32397 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.060886] binder: 32396:32401 ioctl 8010aa01 20000180 returned -22
[ 1433.061068] binder: 32396:32401 ioctl c0086420 20000080 returned -22
[ 1433.061134] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.061140] binder: 32396:32401 ioctl 40046207 0 returned -16
[ 1433.061476] binder: 32393:32402 ioctl 8010aa01 20000180 returned -22
[ 1433.061537] binder: 32393:32402 ioctl c0086420 20000080 returned -22
[ 1433.061600] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.061606] binder: 32393:32402 ioctl 40046207 0 returned -16
[ 1433.062160] binder: 32396:32401 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.062242] binder: 32396:32401 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.062456] binder: 32393:32402 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.062628] binder: 32393:32402 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.066939] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.076541] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.084873] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.084937] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.091335] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.193794] binder: 32404:32406 ioctl 8010aa01 20000180 returned -22
[ 1433.193846] binder: 32404:32406 ioctl c0086420 20000080 returned -22
[ 1433.194784] binder: 32404:32406 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.194876] binder: 32404:32406 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.207486] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.207493] binder: 32407:32410 ioctl 40046207 0 returned -16
[ 1433.208301] binder_alloc: 32404: binder_alloc_buf, no vma
[ 1433.208340] binder: 32407:32410 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.213614] binder: 32408:32413 ioctl 8010aa01 20000180 returned -22
[ 1433.213862] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.213868] binder: 32409:32414 ioctl 40046207 0 returned -16
[ 1433.214583] binder: 32408:32413 ioctl c0086420 20000080 returned -22
[ 1433.215062] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.215068] binder: 32405:32417 ioctl 40046207 0 returned -16
[ 1433.216013] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.216019] binder: 32408:32413 ioctl 40046207 0 returned -16
[ 1433.216965] binder: 32411:32416 ioctl 8010aa01 20000180 returned -22
[ 1433.217013] binder: 32411:32416 ioctl c0086420 20000080 returned -22
[ 1433.217339] binder_alloc: 32404: binder_alloc_buf, no vma
[ 1433.217377] binder: 32409:32414 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.217424] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.217429] binder: 32411:32416 ioctl 40046207 0 returned -16
[ 1433.220638] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.230532] binder: 32411:32416 transaction failed 29189/-22, size 40-16 line 3011
[ 1433.230926] binder: 32405:32417 transaction failed 29189/-22, size 40-16 line 3011
[ 1433.232770] binder: 32408:32413 transaction failed 29189/-22, size 40-16 line 3011
[ 1433.245005] binder: 32412:32418 ioctl 8010aa01 20000180 returned -22
[ 1433.245057] binder: 32412:32418 ioctl c0086420 20000080 returned -22
[ 1433.245977] binder: 32412:32418 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.246074] binder: 32412:32418 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.255900] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.258474] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.259052] binder: 32420:32421 ioctl 8010aa01 20000180 returned -22
[ 1433.259101] binder: 32420:32421 ioctl c0086420 20000080 returned -22
[ 1433.259996] binder: 32420:32421 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.260085] binder: 32420:32421 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.268466] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.305399] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.323326] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.329132] binder_alloc: 32423: binder_alloc_buf, no vma
[ 1433.329174] binder: 32423:32424 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.330476] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.330666] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.343287] binder: 32425:32427 ioctl 8010aa01 20000180 returned -22
[ 1433.343326] binder: 32425:32427 ioctl c0086420 20000080 returned -22
[ 1433.343372] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.343376] binder: 32425:32427 ioctl 40046207 0 returned -16
[ 1433.344147] binder_alloc: 32423: binder_alloc_buf, no vma
[ 1433.344187] binder: 32425:32427 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.366011] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.368081] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.368094] binder: 32429:32434 ioctl 40046207 0 returned -16
[ 1433.369091] binder_alloc: 32423: binder_alloc_buf, no vma
[ 1433.369126] binder: 32429:32434 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.373844] binder: 32432:32437 ioctl 8010aa01 20000180 returned -22
[ 1433.373890] binder: 32432:32437 ioctl c0086420 20000080 returned -22
[ 1433.373943] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.373950] binder: 32432:32437 ioctl 40046207 0 returned -16
[ 1433.374549] binder_alloc: 32423: binder_alloc_buf, no vma
[ 1433.374587] binder: 32432:32437 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.379798] binder: 32431:32435 ioctl 8010aa01 20000180 returned -22
[ 1433.379905] binder: 32431:32435 ioctl c0086420 20000080 returned -22
[ 1433.380154] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.380160] binder: 32431:32435 ioctl 40046207 0 returned -16
[ 1433.380875] binder_alloc: 32423: binder_alloc_buf, no vma
[ 1433.380955] binder: 32431:32435 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.385839] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.385846] binder: 32430:32436 ioctl 40046207 0 returned -16
[ 1433.387094] binder_alloc: 32423: binder_alloc_buf, no vma
[ 1433.387134] binder: 32430:32436 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.390005] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.392672] binder: 32428:32433 ioctl 8010aa01 20000180 returned -22
[ 1433.392725] binder: 32428:32433 ioctl c0086420 20000080 returned -22
[ 1433.393705] binder: 32428:32433 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.393799] binder: 32428:32433 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.412829] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.413094] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.416074] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.443241] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.458141] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.563332] binder: 32441:32447 ioctl 8010aa01 20000180 returned -22
[ 1433.563381] binder_alloc: 32440: binder_alloc_buf, no vma
[ 1433.563417] binder: 32444:32448 ioctl 8010aa01 20000180 returned -22
[ 1433.563424] binder: 32440:32452 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.563497] binder: 32443:32450 ioctl 8010aa01 20000180 returned -22
[ 1433.563560] binder: 32441:32447 ioctl c0086420 20000080 returned -22
[ 1433.563630] binder: 32444:32448 ioctl c0086420 20000080 returned -22
[ 1433.563734] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.563744] binder: 32441:32447 ioctl 40046207 0 returned -16
[ 1433.563817] binder: 32443:32450 ioctl c0086420 20000080 returned -22
[ 1433.563893] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.563899] binder: 32444:32448 ioctl 40046207 0 returned -16
[ 1433.564608] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.564614] binder: 32443:32450 ioctl 40046207 0 returned -16
[ 1433.566371] binder_alloc: 32440: binder_alloc_buf, no vma
[ 1433.566409] binder: 32444:32448 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.566677] binder_alloc: 32440: binder_alloc_buf, no vma
[ 1433.566712] binder: 32441:32447 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.567015] binder_alloc: 32440: binder_alloc_buf, no vma
[ 1433.567118] binder: 32443:32450 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.569446] binder: 32445:32453 ioctl 8010aa01 20000180 returned -22
[ 1433.569652] binder: 32445:32453 ioctl c0086420 20000080 returned -22
[ 1433.569767] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.569773] binder: 32445:32453 ioctl 40046207 0 returned -16
[ 1433.570732] binder_alloc: 32440: binder_alloc_buf, no vma
[ 1433.570771] binder: 32445:32453 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.576113] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.576120] binder: 32446:32454 ioctl 40046207 0 returned -16
[ 1433.577093] binder_alloc: 32440: binder_alloc_buf, no vma
[ 1433.577131] binder: 32446:32454 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.588563] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.588576] binder: 32442:32451 ioctl 40046207 0 returned -16
[ 1433.589594] binder_alloc: 32440: binder_alloc_buf, no vma
[ 1433.589634] binder: 32442:32451 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.599638] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.615177] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.619818] binder: 32456:32457 ioctl 8010aa01 20000180 returned -22
[ 1433.619856] binder: 32456:32457 ioctl c0086420 20000080 returned -22
[ 1433.619904] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.619908] binder: 32456:32457 ioctl 40046207 0 returned -16
[ 1433.620827] binder_alloc: 32440: binder_alloc_buf, no vma
[ 1433.620867] binder: 32456:32457 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.623580] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.633766] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.642139] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.642173] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.652143] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.654986] binder: 32458:32459 ioctl 8010aa01 20000180 returned -22
[ 1433.655025] binder: 32458:32459 ioctl c0086420 20000080 returned -22
[ 1433.655973] binder: 32458:32459 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1433.656068] binder: 32458:32459 transaction failed 29201/-22, size 40-16 line 3197
[ 1433.671569] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.679035] binder: undelivered TRANSACTION_ERROR: 29201
[ 1433.690699] binder_alloc: 32461: binder_alloc_buf, no vma
[ 1433.690794] binder: 32461:32462 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.695710] binder: 32460:32464 ioctl 8010aa01 20000180 returned -22
[ 1433.695857] binder: 32460:32464 ioctl c0086420 20000080 returned -22
[ 1433.695919] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.695924] binder: 32460:32464 ioctl 40046207 0 returned -16
[ 1433.696770] binder_alloc: 32461: binder_alloc_buf, no vma
[ 1433.696809] binder: 32460:32464 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.710145] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.710154] binder: 32463:32466 ioctl 40046207 0 returned -16
[ 1433.710943] binder_alloc: 32461: binder_alloc_buf, no vma
[ 1433.710983] binder: 32463:32466 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.712116] binder: 32465:32469 ioctl 8010aa01 20000180 returned -22
[ 1433.712164] binder: 32465:32469 ioctl c0086420 20000080 returned -22
[ 1433.712232] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.712237] binder: 32465:32469 ioctl 40046207 0 returned -16
[ 1433.713213] binder_alloc: 32461: binder_alloc_buf, no vma
[ 1433.713252] binder: 32465:32469 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.717269] binder: 32467:32468 ioctl 8010aa01 20000180 returned -22
[ 1433.717329] binder: 32467:32468 ioctl c0086420 20000080 returned -22
[ 1433.717393] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.717399] binder: 32467:32468 ioctl 40046207 0 returned -16
[ 1433.718095] binder_alloc: 32461: binder_alloc_buf, no vma
[ 1433.718132] binder: 32467:32468 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.718599] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.728408] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.736087] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.736171] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.749100] binder_alloc: 32470: binder_alloc_buf, no vma
[ 1433.749140] binder: 32470:32471 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.781724] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.793920] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.843913] binder_alloc: 32476: binder_alloc_buf, no vma
[ 1433.843954] binder: 32476:32484 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.844054] binder: 32474:32482 ioctl 8010aa01 20000180 returned -22
[ 1433.844120] binder: 32474:32482 ioctl c0086420 20000080 returned -22
[ 1433.844268] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.844274] binder: 32474:32482 ioctl 40046207 0 returned -16
[ 1433.845321] binder: 32479:32483 ioctl 8010aa01 20000180 returned -22
[ 1433.845577] binder_alloc: 32476: binder_alloc_buf, no vma
[ 1433.845615] binder: 32474:32482 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.845818] binder: 32479:32483 ioctl c0086420 20000080 returned -22
[ 1433.846096] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.846102] binder: 32479:32483 ioctl 40046207 0 returned -16
[ 1433.848088] binder_alloc: 32476: binder_alloc_buf, no vma
[ 1433.850130] binder: 32479:32483 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.855478] binder: 32478:32485 ioctl 8010aa01 20000180 returned -22
[ 1433.855538] binder: 32478:32485 ioctl c0086420 20000080 returned -22
[ 1433.855612] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.855617] binder: 32478:32485 ioctl 40046207 0 returned -16
[ 1433.856322] binder_alloc: 32476: binder_alloc_buf, no vma
[ 1433.856359] binder: 32478:32485 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.856561] binder: 32477:32488 ioctl 8010aa01 20000180 returned -22
[ 1433.856624] binder: 32477:32488 ioctl c0086420 20000080 returned -22
[ 1433.856694] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.856699] binder: 32477:32488 ioctl 40046207 0 returned -16
[ 1433.857628] binder_alloc: 32476: binder_alloc_buf, no vma
[ 1433.857666] binder: 32477:32488 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.875081] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.885848] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.893346] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.893428] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.912034] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.941305] binder_alloc: 32489: binder_alloc_buf, no vma
[ 1433.941347] binder: 32489:32496 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.945850] binder: 32490:32495 ioctl 8010aa01 20000180 returned -22
[ 1433.945902] binder: 32490:32495 ioctl c0086420 20000080 returned -22
[ 1433.945965] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.945971] binder: 32490:32495 ioctl 40046207 0 returned -16
[ 1433.947005] binder_alloc: 32489: binder_alloc_buf, no vma
[ 1433.947044] binder: 32490:32495 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.953176] binder: 32492:32498 ioctl 8010aa01 20000180 returned -22
[ 1433.953512] binder: 32492:32498 ioctl c0086420 20000080 returned -22
[ 1433.953576] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.953582] binder: 32492:32498 ioctl 40046207 0 returned -16
[ 1433.955497] binder_alloc: 32489: binder_alloc_buf, no vma
[ 1433.955566] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.955573] binder: 32493:32499 ioctl 40046207 0 returned -16
[ 1433.955588] binder: 32492:32498 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.956280] binder_alloc: 32489: binder_alloc_buf, no vma
[ 1433.956319] binder: 32493:32499 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.961204] binder: 32491:32500 ioctl 8010aa01 20000180 returned -22
[ 1433.962019] binder: 32491:32500 ioctl c0086420 20000080 returned -22
[ 1433.962102] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.962107] binder: 32491:32500 ioctl 40046207 0 returned -16
[ 1433.963184] binder_alloc: 32489: binder_alloc_buf, no vma
[ 1433.963221] binder: 32491:32500 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.973198] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.986901] binder: undelivered TRANSACTION_ERROR: 29189
[ 1433.991279] binder: 32501:32502 ioctl 8010aa01 20000180 returned -22
[ 1433.991318] binder: 32501:32502 ioctl c0086420 20000080 returned -22
[ 1433.991363] binder: BINDER_SET_CONTEXT_MGR already set
[ 1433.991367] binder: 32501:32502 ioctl 40046207 0 returned -16
[ 1433.992102] binder_alloc: 32489: binder_alloc_buf, no vma
[ 1433.992142] binder: 32501:32502 transaction failed 29189/-3, size 40-16 line 3134
[ 1433.996663] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.010736] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.019746] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.025158] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.041676] binder: 32505:32507 ioctl 8010aa01 20000180 returned -22
[ 1434.041729] binder: 32505:32507 ioctl c0086420 20000080 returned -22
[ 1434.042741] binder: 32505:32507 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.042834] binder: 32505:32507 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.052414] binder: 32504:32506 ioctl 8010aa01 20000180 returned -22
[ 1434.052473] binder: 32504:32506 ioctl c0086420 20000080 returned -22
[ 1434.052537] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.052543] binder: 32504:32506 ioctl 40046207 0 returned -16
[ 1434.053337] binder: 32504:32506 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.054642] binder: 32504:32506 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.071497] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.075800] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.182309] binder_alloc: 32509: binder_alloc_buf, no vma
[ 1434.182351] binder: 32509:32511 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.198037] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.198045] binder: 32513:32518 ioctl 40046207 0 returned -16
[ 1434.201311] binder: 32512:32515 ioctl 8010aa01 20000180 returned -22
[ 1434.201373] binder: 32512:32515 ioctl c0086420 20000080 returned -22
[ 1434.201448] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.201454] binder: 32512:32515 ioctl 40046207 0 returned -16
[ 1434.202267] binder_alloc: 32509: binder_alloc_buf, no vma
[ 1434.202309] binder: 32512:32515 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.203718] binder_alloc: 32509: binder_alloc_buf, no vma
[ 1434.203756] binder: 32513:32518 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.206369] binder: 32517:32522 ioctl 8010aa01 20000180 returned -22
[ 1434.206599] binder: 32517:32522 ioctl c0086420 20000080 returned -22
[ 1434.206761] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.206767] binder: 32517:32522 ioctl 40046207 0 returned -16
[ 1434.207948] binder_alloc: 32509: binder_alloc_buf, no vma
[ 1434.207988] binder: 32517:32522 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.208367] binder: 32510:32520 ioctl 8010aa01 20000180 returned -22
[ 1434.208421] binder: 32510:32520 ioctl c0086420 20000080 returned -22
[ 1434.208483] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.208488] binder: 32510:32520 ioctl 40046207 0 returned -16
[ 1434.209195] binder_alloc: 32509: binder_alloc_buf, no vma
[ 1434.209235] binder: 32510:32520 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.222234] binder: 32516:32523 ioctl 8010aa01 20000180 returned -22
[ 1434.222701] binder: 32516:32523 ioctl c0086420 20000080 returned -22
[ 1434.223037] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.223044] binder: 32516:32523 ioctl 40046207 0 returned -16
[ 1434.223848] binder_alloc: 32509: binder_alloc_buf, no vma
[ 1434.223886] binder: 32516:32523 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.230558] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.238444] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.240242] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.240323] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.259974] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.260165] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.306597] binder: 32525:32526 ioctl 8010aa01 20000180 returned -22
[ 1434.306668] binder: 32525:32526 ioctl c0086420 20000080 returned -22
[ 1434.307870] binder: 32525:32526 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.307963] binder: 32525:32526 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.317343] binder: 32528:32530 ioctl 8010aa01 20000180 returned -22
[ 1434.317392] binder: 32528:32530 ioctl c0086420 20000080 returned -22
[ 1434.317501] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.317507] binder: 32528:32530 ioctl 40046207 0 returned -16
[ 1434.319435] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.319442] binder: 32529:32531 ioctl 40046207 0 returned -16
[ 1434.320565] binder: 32529:32531 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.320656] binder: 32529:32531 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.320802] binder: 32528:32530 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.320891] binder: 32528:32530 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.321719] binder: 32532:32534 ioctl 8010aa01 20000180 returned -22
[ 1434.321865] binder: 32532:32534 ioctl c0086420 20000080 returned -22
[ 1434.321931] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.321936] binder: 32532:32534 ioctl 40046207 0 returned -16
[ 1434.322766] binder: 32532:32534 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.322955] binder: 32532:32534 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.331347] binder: 32533:32535 ioctl 8010aa01 20000180 returned -22
[ 1434.331399] binder: 32533:32535 ioctl c0086420 20000080 returned -22
[ 1434.331462] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.331468] binder: 32533:32535 ioctl 40046207 0 returned -16
[ 1434.332401] binder: 32533:32535 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.332483] binder: 32533:32535 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.339992] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.344561] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.349644] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.366854] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.377994] binder_alloc: 32536: binder_alloc_buf, no vma
[ 1434.378035] binder: 32536:32537 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.379126] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.379352] binder: 32538:32540 ioctl 8010aa01 20000180 returned -22
[ 1434.379402] binder: 32538:32540 ioctl c0086420 20000080 returned -22
[ 1434.379464] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.379469] binder: 32538:32540 ioctl 40046207 0 returned -16
[ 1434.380241] binder_alloc: 32536: binder_alloc_buf, no vma
[ 1434.380275] binder: 32538:32540 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.397869] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.415121] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.420822] binder: 32541:32542 ioctl 8010aa01 20000180 returned -22
[ 1434.420871] binder: 32541:32542 ioctl c0086420 20000080 returned -22
[ 1434.421838] binder: 32541:32542 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.421929] binder: 32541:32542 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.432665] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.563541] binder_alloc: 32546: binder_alloc_buf, no vma
[ 1434.563580] binder: 32546:32553 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.565480] binder: 32547:32551 ioctl 8010aa01 20000180 returned -22
[ 1434.566821] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.566828] binder: 32550:32555 ioctl 40046207 0 returned -16
[ 1434.567629] binder: 32547:32551 ioctl c0086420 20000080 returned -22
[ 1434.567632] binder_alloc: 32546: binder_alloc_buf, no vma
[ 1434.567675] binder: 32550:32555 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.567698] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.567703] binder: 32547:32551 ioctl 40046207 0 returned -16
[ 1434.568802] binder_alloc: 32546: binder_alloc_buf, no vma
[ 1434.568843] binder: 32547:32551 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.572325] binder: 32545:32556 ioctl 8010aa01 20000180 returned -22
[ 1434.572969] binder: 32545:32556 ioctl c0086420 20000080 returned -22
[ 1434.573156] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.573162] binder: 32545:32556 ioctl 40046207 0 returned -16
[ 1434.574948] binder: 32548:32552 ioctl 8010aa01 20000180 returned -22
[ 1434.575363] binder_alloc: 32546: binder_alloc_buf, no vma
[ 1434.575405] binder: 32545:32556 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.575442] binder: 32548:32552 ioctl c0086420 20000080 returned -22
[ 1434.575722] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.575728] binder: 32548:32552 ioctl 40046207 0 returned -16
[ 1434.576644] binder_alloc: 32546: binder_alloc_buf, no vma
[ 1434.576686] binder: 32548:32552 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.591623] binder: 32549:32557 ioctl 8010aa01 20000180 returned -22
[ 1434.591685] binder: 32549:32557 ioctl c0086420 20000080 returned -22
[ 1434.591904] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.591910] binder: 32549:32557 ioctl 40046207 0 returned -16
[ 1434.593211] binder_alloc: 32546: binder_alloc_buf, no vma
[ 1434.593249] binder: 32549:32557 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.609217] binder: 32559:32560 ioctl 8010aa01 20000180 returned -22
[ 1434.609269] binder: 32559:32560 ioctl c0086420 20000080 returned -22
[ 1434.609333] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.609338] binder: 32559:32560 ioctl 40046207 0 returned -16
[ 1434.610130] binder_alloc: 32546: binder_alloc_buf, no vma
[ 1434.610169] binder: 32559:32560 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.612615] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.623985] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.629748] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.642960] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.643337] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.681626] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.681987] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.698669] binder_alloc: 32562: binder_alloc_buf, no vma
[ 1434.698713] binder: 32562:32565 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.704652] binder: 32563:32566 ioctl 8010aa01 20000180 returned -22
[ 1434.704717] binder: 32563:32566 ioctl c0086420 20000080 returned -22
[ 1434.704838] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.704845] binder: 32563:32566 ioctl 40046207 0 returned -16
[ 1434.705997] binder_alloc: 32562: binder_alloc_buf, no vma
[ 1434.706039] binder: 32563:32566 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.716442] binder: 32567:32570 ioctl 8010aa01 20000180 returned -22
[ 1434.716516] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.716522] binder: 32569:32571 ioctl 40046207 0 returned -16
[ 1434.717487] binder: 32567:32570 ioctl c0086420 20000080 returned -22
[ 1434.717606] binder_alloc: 32562: binder_alloc_buf, no vma
[ 1434.717647] binder: 32569:32571 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.717741] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.717747] binder: 32567:32570 ioctl 40046207 0 returned -16
[ 1434.719341] binder_alloc: 32562: binder_alloc_buf, no vma
[ 1434.719381] binder: 32567:32570 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.732525] binder: 32573:32576 ioctl 8010aa01 20000180 returned -22
[ 1434.732585] binder: 32573:32576 ioctl c0086420 20000080 returned -22
[ 1434.732658] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.732664] binder: 32573:32576 ioctl 40046207 0 returned -16
[ 1434.733549] binder_alloc: 32562: binder_alloc_buf, no vma
[ 1434.733591] binder: 32573:32576 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.734735] binder: 32572:32574 ioctl 8010aa01 20000180 returned -22
[ 1434.734806] binder: 32572:32574 ioctl c0086420 20000080 returned -22
[ 1434.734872] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.734878] binder: 32572:32574 ioctl 40046207 0 returned -16
[ 1434.736110] binder_alloc: 32562: binder_alloc_buf, no vma
[ 1434.736150] binder: 32572:32574 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.740131] binder: 32568:32575 ioctl 8010aa01 20000180 returned -22
[ 1434.740259] binder: 32568:32575 ioctl c0086420 20000080 returned -22
[ 1434.740323] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.740329] binder: 32568:32575 ioctl 40046207 0 returned -16
[ 1434.741071] binder_alloc: 32562: binder_alloc_buf, no vma
[ 1434.741113] binder: 32568:32575 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.745142] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.757588] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.764065] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.768654] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.775577] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.795359] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.800351] binder: undelivered TRANSACTION_ERROR: 29189
[ 1434.827736] binder: 32577:32579 ioctl 8010aa01 20000180 returned -22
[ 1434.827798] binder: 32577:32579 ioctl c0086420 20000080 returned -22
[ 1434.830081] binder: 32577:32579 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.830178] binder: 32577:32579 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.839303] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.951984] binder: 32582:32587 ioctl 8010aa01 20000180 returned -22
[ 1434.952042] binder: 32582:32587 ioctl c0086420 20000080 returned -22
[ 1434.952974] binder: 32582:32587 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.953070] binder: 32582:32587 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.953722] binder: 32583:32590 ioctl 8010aa01 20000180 returned -22
[ 1434.954923] binder: 32583:32590 ioctl c0086420 20000080 returned -22
[ 1434.955102] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.955108] binder: 32583:32590 ioctl 40046207 0 returned -16
[ 1434.957515] binder: 32583:32590 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.957596] binder: 32583:32590 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.961782] binder: 32584:32589 ioctl 8010aa01 20000180 returned -22
[ 1434.961846] binder: 32584:32589 ioctl c0086420 20000080 returned -22
[ 1434.961920] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.961926] binder: 32584:32589 ioctl 40046207 0 returned -16
[ 1434.962015] binder: 32585:32591 ioctl 8010aa01 20000180 returned -22
[ 1434.962080] binder: 32585:32591 ioctl c0086420 20000080 returned -22
[ 1434.962156] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.962162] binder: 32585:32591 ioctl 40046207 0 returned -16
[ 1434.963110] binder: 32585:32591 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.963160] binder: 32584:32589 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1434.963187] binder: 32585:32591 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.963265] binder: 32584:32589 transaction failed 29201/-22, size 40-16 line 3197
[ 1434.974784] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.974791] binder: 32581:32595 ioctl 40046207 0 returned -16
[ 1434.975670] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.975680] binder: 32586:32594 ioctl 40046207 0 returned -16
[ 1434.975864] binder_alloc: 32582: binder_alloc_buf, no vma
[ 1434.975903] binder: 32581:32595 transaction failed 29189/-3, size 40-16 line 3134
[ 1434.983236] binder: undelivered TRANSACTION_ERROR: 29201
[ 1434.986891] binder: 32588:32592 ioctl 8010aa01 20000180 returned -22
[ 1434.986930] binder: 32588:32592 ioctl c0086420 20000080 returned -22
[ 1434.986985] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.986989] binder: 32588:32592 ioctl 40046207 0 returned -16
[ 1434.987722] binder_alloc: 32582: binder_alloc_buf, no vma
[ 1434.987763] binder: 32588:32592 transaction failed 29189/-3, size 40-16 line 3134
[ 1435.005900] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.018365] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.018519] binder: undelivered TRANSACTION_ERROR: 29189
[ 1435.043860] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.057525] binder: 32597:32599 ioctl 8010aa01 20000180 returned -22
[ 1435.057578] binder: 32597:32599 ioctl c0086420 20000080 returned -22
[ 1435.058571] binder: 32597:32599 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.058666] binder: 32597:32599 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.062341] binder: undelivered TRANSACTION_ERROR: 29189
[ 1435.068491] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.084258] binder: 32600:32603 ioctl 8010aa01 20000180 returned -22
[ 1435.084297] binder: 32600:32603 ioctl c0086420 20000080 returned -22
[ 1435.085232] binder: 32600:32603 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.085371] binder: 32600:32603 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.094610] binder: 32602:32604 ioctl 8010aa01 20000180 returned -22
[ 1435.094670] binder: 32602:32604 ioctl c0086420 20000080 returned -22
[ 1435.094733] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.094739] binder: 32602:32604 ioctl 40046207 0 returned -16
[ 1435.096241] binder: 32602:32604 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.096337] binder: 32602:32604 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.111007] binder: 32601:32607 ioctl 8010aa01 20000180 returned -22
[ 1435.111178] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.111184] binder: 32605:32608 ioctl 40046207 0 returned -16
[ 1435.111934] binder: 32601:32607 ioctl c0086420 20000080 returned -22
[ 1435.112017] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.112023] binder: 32601:32607 ioctl 40046207 0 returned -16
[ 1435.112765] binder_alloc: 32600: binder_alloc_buf, no vma
[ 1435.112808] binder: 32601:32607 transaction failed 29189/-3, size 40-16 line 3134
[ 1435.116460] binder: 32606:32609 ioctl 8010aa01 20000180 returned -22
[ 1435.116522] binder: 32606:32609 ioctl c0086420 20000080 returned -22
[ 1435.116591] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.116597] binder: 32606:32609 ioctl 40046207 0 returned -16
[ 1435.117498] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.117656] binder: 32606:32609 transaction failed 29189/-22, size 40-16 line 3011
[ 1435.124249] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.143576] binder: undelivered TRANSACTION_ERROR: 29189
[ 1435.155052] binder: 32611:32613 ioctl 8010aa01 20000180 returned -22
[ 1435.155191] binder: 32611:32613 ioctl c0086420 20000080 returned -22
[ 1435.156280] binder: 32611:32613 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.156372] binder: 32611:32613 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.160652] binder: undelivered TRANSACTION_ERROR: 29189
[ 1435.175884] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.205940] binder_alloc: 32612: binder_alloc_buf, no vma
[ 1435.205980] binder: 32612:32614 transaction failed 29189/-3, size 40-16 line 3134
[ 1435.249084] binder: undelivered TRANSACTION_ERROR: 29189
[ 1435.292829] binder: 32617:32619 ioctl 8010aa01 20000180 returned -22
[ 1435.292882] binder: 32617:32619 ioctl c0086420 20000080 returned -22
[ 1435.294661] binder: 32617:32619 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.295096] binder: 32617:32619 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.301127] binder: 32618:32622 ioctl 8010aa01 20000180 returned -22
[ 1435.301180] binder: 32618:32622 ioctl c0086420 20000080 returned -22
[ 1435.301279] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.301283] binder: 32618:32622 ioctl 40046207 0 returned -16
[ 1435.302123] binder: 32618:32622 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.302218] binder: 32618:32622 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.306323] binder: 32620:32624 ioctl 8010aa01 20000180 returned -22
[ 1435.306984] binder: 32620:32624 ioctl c0086420 20000080 returned -22
[ 1435.307052] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.307058] binder: 32620:32624 ioctl 40046207 0 returned -16
[ 1435.308074] binder: 32620:32624 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.308167] binder: 32620:32624 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.312897] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.312904] binder: 32623:32625 ioctl 40046207 0 returned -16
[ 1435.317724] binder: 32616:32628 ioctl 8010aa01 20000180 returned -22
[ 1435.317786] binder: 32616:32628 ioctl c0086420 20000080 returned -22
[ 1435.317859] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.317867] binder: 32616:32628 ioctl 40046207 0 returned -16
[ 1435.318995] binder: 32616:32628 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.319085] binder: 32616:32628 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.322938] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.339646] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.340979] binder: 32621:32629 ioctl 8010aa01 20000180 returned -22
[ 1435.341086] binder: 32621:32629 ioctl c0086420 20000080 returned -22
[ 1435.342186] binder: 32621:32629 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.343268] binder: 32621:32629 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.357190] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.357198] binder: 32631:32632 ioctl 40046207 0 returned -16
[ 1435.357325] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.358095] binder: 32631:32632 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.367175] binder: 32631:32632 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.371368] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.381749] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.387316] binder: 32633:32635 ioctl 8010aa01 20000180 returned -22
[ 1435.387380] binder: 32633:32635 ioctl c0086420 20000080 returned -22
[ 1435.390022] binder: 32634:32637 ioctl 8010aa01 20000180 returned -22
[ 1435.390060] binder: 32634:32637 ioctl c0086420 20000080 returned -22
[ 1435.391077] binder: 32634:32637 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.391151] binder: 32634:32637 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.401035] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.401045] binder: 32633:32635 ioctl 40046207 0 returned -16
[ 1435.401942] binder: 32633:32635 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.402123] binder: 32633:32635 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.417672] binder: 32636:32638 ioctl 8010aa01 20000180 returned -22
[ 1435.417807] binder: 32636:32638 ioctl c0086420 20000080 returned -22
[ 1435.417893] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.417899] binder: 32636:32638 ioctl 40046207 0 returned -16
[ 1435.419661] binder: 32636:32638 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.419755] binder: 32636:32638 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.425325] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.430565] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.445729] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.458668] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.461123] binder: 32641:32645 transaction failed 29189/-22, size 40-16 line 3011
[ 1435.465104] binder: 32640:32643 ioctl 8010aa01 20000180 returned -22
[ 1435.465393] binder: 32640:32643 ioctl c0086420 20000080 returned -22
[ 1435.466186] binder: 32642:32646 ioctl 8010aa01 20000180 returned -22
[ 1435.466247] binder: 32642:32646 ioctl c0086420 20000080 returned -22
[ 1435.466321] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.466329] binder: 32642:32646 ioctl 40046207 0 returned -16
[ 1435.466556] binder: 32640:32643 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.466639] binder: 32640:32643 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.467244] binder: 32642:32646 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.467336] binder: 32642:32646 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.485585] binder: 32644:32649 ioctl 8010aa01 20000180 returned -22
[ 1435.485635] binder: 32644:32649 ioctl c0086420 20000080 returned -22
[ 1435.485813] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.485818] binder: 32644:32649 ioctl 40046207 0 returned -16
[ 1435.486665] binder_alloc: 32640: binder_alloc_buf, no vma
[ 1435.486703] binder: 32644:32649 transaction failed 29189/-3, size 40-16 line 3134
[ 1435.490628] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.497905] binder: 32648:32650 ioctl 8010aa01 20000180 returned -22
[ 1435.497957] binder: 32648:32650 ioctl c0086420 20000080 returned -22
[ 1435.498447] binder: undelivered TRANSACTION_ERROR: 29189
[ 1435.503286] binder: 32648:32650 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.503381] binder: 32648:32650 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.507560] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.520658] binder: undelivered TRANSACTION_ERROR: 29189
[ 1435.523393] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.665158] binder: 32656:32659 ioctl 8010aa01 20000180 returned -22
[ 1435.665223] binder: 32656:32659 ioctl c0086420 20000080 returned -22
[ 1435.666657] binder: 32656:32659 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.666755] binder: 32656:32659 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.667352] binder: 32654:32661 ioctl 8010aa01 20000180 returned -22
[ 1435.667421] binder: 32654:32661 ioctl c0086420 20000080 returned -22
[ 1435.667627] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.667633] binder: 32654:32661 ioctl 40046207 0 returned -16
[ 1435.668009] binder: 32653:32662 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.668091] binder: 32653:32662 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.670270] binder: 32654:32661 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.670360] binder: 32654:32661 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.674493] binder: 32655:32664 ioctl 8010aa01 20000180 returned -22
[ 1435.674999] binder: 32655:32664 ioctl c0086420 20000080 returned -22
[ 1435.675070] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.675074] binder: 32655:32664 ioctl 40046207 0 returned -16
[ 1435.675995] binder: 32655:32664 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.676088] binder: 32655:32664 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.676683] binder: 32658:32663 ioctl 8010aa01 20000180 returned -22
[ 1435.676745] binder: 32658:32663 ioctl c0086420 20000080 returned -22
[ 1435.676816] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.676822] binder: 32658:32663 ioctl 40046207 0 returned -16
[ 1435.677839] binder: 32658:32663 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.677923] binder: 32658:32663 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.682125] binder: 32657:32665 ioctl 8010aa01 20000180 returned -22
[ 1435.682579] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.682586] binder: 32652:32666 ioctl 40046207 0 returned -16
[ 1435.683753] binder: 32652:32666 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.683850] binder: 32652:32666 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.683971] binder: 32657:32665 ioctl c0086420 20000080 returned -22
[ 1435.685669] binder: BINDER_SET_CONTEXT_MGR already set
[ 1435.685676] binder: 32657:32665 ioctl 40046207 0 returned -16
[ 1435.688271] binder: 32657:32665 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.688358] binder: 32657:32665 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.707554] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.712921] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.720833] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.728713] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.901414] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.901566] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.905438] binder: 32669:32670 ioctl 8010aa01 20000180 returned -22
[ 1435.905490] binder: 32669:32670 ioctl c0086420 20000080 returned -22
[ 1435.906498] binder: 32669:32670 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.906590] binder: 32669:32670 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.934535] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.944177] binder: 32671:32673 ioctl 8010aa01 20000180 returned -22
[ 1435.944254] binder: 32671:32673 ioctl c0086420 20000080 returned -22
[ 1435.945767] binder: 32671:32673 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.945860] binder: 32671:32673 transaction failed 29201/-22, size 40-16 line 3197
[ 1435.963963] binder: undelivered TRANSACTION_ERROR: 29201
[ 1435.977192] binder: 32672:32674 ioctl 8010aa01 20000180 returned -22
[ 1435.977244] binder: 32672:32674 ioctl c0086420 20000080 returned -22
[ 1435.978634] binder: 32672:32674 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1435.978724] binder: 32672:32674 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.011900] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.080177] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.124908] binder: 32675:32682 ioctl 8010aa01 20000180 returned -22
[ 1436.124969] binder: 32675:32682 ioctl c0086420 20000080 returned -22
[ 1436.126110] binder: 32675:32682 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.126203] binder: 32675:32682 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.131264] binder: 32678:32683 ioctl 8010aa01 20000180 returned -22
[ 1436.131329] binder: 32678:32683 ioctl c0086420 20000080 returned -22
[ 1436.132080] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.132087] binder: 32678:32683 ioctl 40046207 0 returned -16
[ 1436.132932] binder: 32678:32683 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.133027] binder: 32678:32683 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.138826] binder: 32680:32684 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.138918] binder: 32680:32684 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.141393] binder: 32679:32685 ioctl 8010aa01 20000180 returned -22
[ 1436.142308] binder: 32679:32685 ioctl c0086420 20000080 returned -22
[ 1436.142377] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.142383] binder: 32679:32685 ioctl 40046207 0 returned -16
[ 1436.143309] binder: 32679:32685 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.144090] binder: 32679:32685 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.150601] binder: 32681:32686 ioctl 8010aa01 20000180 returned -22
[ 1436.151157] binder: 32681:32686 ioctl c0086420 20000080 returned -22
[ 1436.151295] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.151300] binder: 32681:32686 ioctl 40046207 0 returned -16
[ 1436.152415] binder: 32681:32686 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.152502] binder: 32681:32686 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.167159] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.172301] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.180774] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.192796] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.193230] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.288379] binder_alloc: 32691: binder_alloc_buf, no vma
[ 1436.288423] binder: 32691:32695 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.291350] binder: 32689:32696 ioctl 8010aa01 20000180 returned -22
[ 1436.291417] binder: 32689:32696 ioctl c0086420 20000080 returned -22
[ 1436.291581] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.291586] binder: 32689:32696 ioctl 40046207 0 returned -16
[ 1436.292358] binder_alloc: 32691: binder_alloc_buf, no vma
[ 1436.292396] binder: 32689:32696 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.295398] binder: 32687:32697 ioctl 8010aa01 20000180 returned -22
[ 1436.295836] binder: 32687:32697 ioctl c0086420 20000080 returned -22
[ 1436.296105] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.296111] binder: 32687:32697 ioctl 40046207 0 returned -16
[ 1436.299267] binder_alloc: 32691: binder_alloc_buf, no vma
[ 1436.299378] binder: 32687:32697 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.300840] binder: 32694:32698 ioctl 8010aa01 20000180 returned -22
[ 1436.301437] binder: 32694:32698 ioctl c0086420 20000080 returned -22
[ 1436.301706] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.301713] binder: 32694:32698 ioctl 40046207 0 returned -16
[ 1436.302689] binder_alloc: 32691: binder_alloc_buf, no vma
[ 1436.302732] binder: 32694:32698 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.303839] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.303845] binder: 32690:32699 ioctl 40046207 0 returned -16
[ 1436.306867] binder_alloc: 32691: binder_alloc_buf, no vma
[ 1436.306906] binder: 32690:32699 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.307688] binder: 32692:32701 ioctl 8010aa01 20000180 returned -22
[ 1436.307970] binder: 32692:32701 ioctl c0086420 20000080 returned -22
[ 1436.308107] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.308113] binder: 32692:32701 ioctl 40046207 0 returned -16
[ 1436.308983] binder_alloc: 32691: binder_alloc_buf, no vma
[ 1436.309015] binder: 32688:32700 ioctl 8010aa01 20000180 returned -22
[ 1436.309082] binder: 32688:32700 ioctl c0086420 20000080 returned -22
[ 1436.309159] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.309165] binder: 32688:32700 ioctl 40046207 0 returned -16
[ 1436.309196] binder: 32692:32701 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.310153] binder_alloc: 32691: binder_alloc_buf, no vma
[ 1436.310194] binder: 32688:32700 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.332688] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.336454] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.341592] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.342967] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.369330] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.372311] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.377677] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.396607] binder: 32704:32705 ioctl 8010aa01 20000180 returned -22
[ 1436.396657] binder: 32704:32705 ioctl c0086420 20000080 returned -22
[ 1436.397708] binder: 32704:32705 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.397806] binder: 32704:32705 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.410368] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.416203] binder: 32706:32714 ioctl 8010aa01 20000180 returned -22
[ 1436.416253] binder: 32706:32714 ioctl c0086420 20000080 returned -22
[ 1436.417714] binder: 32706:32714 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.417806] binder: 32706:32714 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.429173] binder: 32713:32715 ioctl 8010aa01 20000180 returned -22
[ 1436.429231] binder: 32713:32715 ioctl c0086420 20000080 returned -22
[ 1436.429295] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.429301] binder: 32713:32715 ioctl 40046207 0 returned -16
[ 1436.431003] binder: 32713:32715 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.431095] binder: 32713:32715 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.432070] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.432077] binder: 32708:32711 ioctl 40046207 0 returned -16
[ 1436.432984] binder: 32708:32711 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.433079] binder: 32708:32711 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.437142] binder: 32707:32712 ioctl 8010aa01 20000180 returned -22
[ 1436.437214] binder: 32707:32712 ioctl c0086420 20000080 returned -22
[ 1436.437288] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.437293] binder: 32707:32712 ioctl 40046207 0 returned -16
[ 1436.439490] binder: 32707:32712 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.439582] binder: 32707:32712 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.443615] binder: 32709:32716 ioctl 8010aa01 20000180 returned -22
[ 1436.444850] binder: 32709:32716 ioctl c0086420 20000080 returned -22
[ 1436.444931] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.444936] binder: 32709:32716 ioctl 40046207 0 returned -16
[ 1436.445986] binder: 32709:32716 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.446079] binder: 32709:32716 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.453858] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.461690] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.470647] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.478857] binder: 32717:32719 ioctl 8010aa01 20000180 returned -22
[ 1436.478919] binder: 32717:32719 ioctl c0086420 20000080 returned -22
[ 1436.479933] binder: 32717:32719 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.479987] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.480027] binder: 32717:32719 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.489028] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.489037] binder: 32718:32720 ioctl 40046207 0 returned -16
[ 1436.489942] binder: 32718:32720 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.490161] binder: 32718:32720 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.493485] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.503178] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.538721] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.572241] binder: 32727:32728 ioctl 8010aa01 20000180 returned -22
[ 1436.572302] binder: 32727:32728 ioctl c0086420 20000080 returned -22
[ 1436.573308] binder: 32727:32728 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.573399] binder: 32727:32728 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.581308] binder: 32724:32730 ioctl 8010aa01 20000180 returned -22
[ 1436.581361] binder: 32724:32730 ioctl c0086420 20000080 returned -22
[ 1436.581423] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.581429] binder: 32724:32730 ioctl 40046207 0 returned -16
[ 1436.582539] binder: 32724:32730 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.582629] binder: 32724:32730 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.585872] binder: 32725:32731 ioctl 8010aa01 20000180 returned -22
[ 1436.585925] binder: 32725:32731 ioctl c0086420 20000080 returned -22
[ 1436.585985] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.585990] binder: 32725:32731 ioctl 40046207 0 returned -16
[ 1436.586673] binder: 32722:32729 ioctl 8010aa01 20000180 returned -22
[ 1436.586732] binder: 32722:32729 ioctl c0086420 20000080 returned -22
[ 1436.586802] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.586808] binder: 32722:32729 ioctl 40046207 0 returned -16
[ 1436.586844] binder: 32725:32731 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.587863] binder: 32722:32729 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.587955] binder: 32722:32729 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.588075] binder: 32725:32731 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.609068] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.617602] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.617610] binder: 32726:32733 ioctl 40046207 0 returned -16
[ 1436.618719] binder: 32726:32733 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1436.618813] binder: 32726:32733 transaction failed 29201/-22, size 40-16 line 3197
[ 1436.621940] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.624783] binder_alloc: 32736: binder_alloc_buf, no vma
[ 1436.624825] binder: 32736:32738 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.632528] binder: 32723:32735 ioctl 8010aa01 20000180 returned -22
[ 1436.632725] binder: 32723:32735 ioctl c0086420 20000080 returned -22
[ 1436.632810] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.632815] binder: 32723:32735 ioctl 40046207 0 returned -16
[ 1436.634649] binder_alloc: 32736: binder_alloc_buf, no vma
[ 1436.634690] binder: 32723:32735 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.641267] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.641418] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.646236] binder: 32740:32741 ioctl 8010aa01 20000180 returned -22
[ 1436.646287] binder: 32740:32741 ioctl c0086420 20000080 returned -22
[ 1436.646352] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.646357] binder: 32740:32741 ioctl 40046207 0 returned -16
[ 1436.647066] binder_alloc: 32736: binder_alloc_buf, no vma
[ 1436.647107] binder: 32740:32741 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.651060] binder: undelivered TRANSACTION_ERROR: 29201
[ 1436.671552] binder: 32739:32742 ioctl 8010aa01 20000180 returned -22
[ 1436.671605] binder: 32739:32742 ioctl c0086420 20000080 returned -22
[ 1436.671667] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.671673] binder: 32739:32742 ioctl 40046207 0 returned -16
[ 1436.672458] binder_alloc: 32736: binder_alloc_buf, no vma
[ 1436.672497] binder: 32739:32742 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.676303] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.681815] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.697165] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.713024] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.723356] binder_alloc: 32744: binder_alloc_buf, no vma
[ 1436.723398] binder: 32744:32746 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.727391] binder: 32748:32752 ioctl 8010aa01 20000180 returned -22
[ 1436.727443] binder: 32748:32752 ioctl c0086420 20000080 returned -22
[ 1436.727502] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.727507] binder: 32748:32752 ioctl 40046207 0 returned -16
[ 1436.728568] binder_alloc: 32744: binder_alloc_buf, no vma
[ 1436.728609] binder: 32748:32752 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.731711] binder: 32747:32750 ioctl 8010aa01 20000180 returned -22
[ 1436.731790] binder: 32747:32750 ioctl c0086420 20000080 returned -22
[ 1436.731888] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.731895] binder: 32747:32750 ioctl 40046207 0 returned -16
[ 1436.732717] binder_alloc: 32744: binder_alloc_buf, no vma
[ 1436.732757] binder: 32747:32750 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.737399] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.737407] binder: 32745:32751 ioctl 40046207 0 returned -16
[ 1436.739535] binder: 32749:32753 ioctl 8010aa01 20000180 returned -22
[ 1436.739584] binder: 32749:32753 ioctl c0086420 20000080 returned -22
[ 1436.739642] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.739647] binder: 32749:32753 ioctl 40046207 0 returned -16
[ 1436.740481] binder_alloc: 32744: binder_alloc_buf, no vma
[ 1436.740519] binder: 32749:32753 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.748761] binder_alloc: 32744: binder_alloc_buf, no vma
[ 1436.748799] binder: 32745:32751 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.753355] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.766702] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.776682] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.783222] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.798954] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.820168] binder_alloc: 32755: binder_alloc_buf, no vma
[ 1436.820207] binder: 32755:32757 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.858744] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.892624] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.892632] binder: 32759:32764 ioctl 40046207 0 returned -16
[ 1436.893522] binder_alloc: 32762: binder_alloc_buf, no vma
[ 1436.893558] binder: 32762:32766 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.893666] binder_alloc: 32762: binder_alloc_buf, no vma
[ 1436.893706] binder: 32759:32764 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.893944] binder: 32760:32765 ioctl 8010aa01 20000180 returned -22
[ 1436.894087] binder: 32760:32765 ioctl c0086420 20000080 returned -22
[ 1436.894196] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.894202] binder: 32760:32765 ioctl 40046207 0 returned -16
[ 1436.895083] binder_alloc: 32762: binder_alloc_buf, no vma
[ 1436.895118] binder: 32760:32765 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.910017] binder: 32761:300 ioctl 8010aa01 20000180 returned -22
[ 1436.910088] binder: 32761:300 ioctl c0086420 20000080 returned -22
[ 1436.910163] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.910170] binder: 32761:300 ioctl 40046207 0 returned -16
[ 1436.911689] binder_alloc: 32762: binder_alloc_buf, no vma
[ 1436.911728] binder: 32761:300 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.913309] binder: 32763:301 ioctl 8010aa01 20000180 returned -22
[ 1436.913656] binder: 32763:301 ioctl c0086420 20000080 returned -22
[ 1436.914975] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.914981] binder: 32763:301 ioctl 40046207 0 returned -16
[ 1436.915837] binder: 32758:302 ioctl 8010aa01 20000180 returned -22
[ 1436.915975] binder_alloc: 32762: binder_alloc_buf, no vma
[ 1436.916014] binder: 32763:301 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.916229] binder: 32758:302 ioctl c0086420 20000080 returned -22
[ 1436.916302] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.916307] binder: 32758:302 ioctl 40046207 0 returned -16
[ 1436.917180] binder_alloc: 32762: binder_alloc_buf, no vma
[ 1436.917217] binder: 32758:302 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.921304] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.937972] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.951326] binder: 304:305 ioctl 8010aa01 20000180 returned -22
[ 1436.951377] binder: 304:305 ioctl c0086420 20000080 returned -22
[ 1436.951441] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.951447] binder: 304:305 ioctl 40046207 0 returned -16
[ 1436.952249] binder_alloc: 32762: binder_alloc_buf, no vma
[ 1436.952289] binder: 304:305 transaction failed 29189/-3, size 40-16 line 3134
[ 1436.958621] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.966437] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.966945] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.980398] binder: undelivered TRANSACTION_ERROR: 29189
[ 1436.980480] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.010918] binder: 310:312 ioctl 8010aa01 20000180 returned -22
[ 1437.010982] binder: 310:312 ioctl c0086420 20000080 returned -22
[ 1437.012043] binder: 310:312 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.012135] binder: 310:312 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.025020] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.025028] binder: 308:311 ioctl 40046207 0 returned -16
[ 1437.025933] binder: 308:311 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.026030] binder: 308:311 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.032764] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.032770] binder: 307:316 ioctl 40046207 0 returned -16
[ 1437.033823] binder: 307:316 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.033915] binder: 307:316 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.037822] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.037829] binder: 313:320 ioctl 40046207 0 returned -16
[ 1437.038736] binder: 313:320 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.038833] binder: 313:320 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.043294] binder: 315:318 ioctl 8010aa01 20000180 returned -22
[ 1437.044105] binder: 314:321 ioctl 8010aa01 20000180 returned -22
[ 1437.044159] binder: 314:321 ioctl c0086420 20000080 returned -22
[ 1437.044205] binder: 315:318 ioctl c0086420 20000080 returned -22
[ 1437.044233] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.044238] binder: 314:321 ioctl 40046207 0 returned -16
[ 1437.044398] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.044404] binder: 315:318 ioctl 40046207 0 returned -16
[ 1437.045289] binder: 314:321 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.045386] binder: 314:321 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.046291] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.046629] binder: 315:318 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.049952] binder: 315:318 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.053815] binder: 317:319 ioctl 8010aa01 20000180 returned -22
[ 1437.054353] binder: 317:319 ioctl c0086420 20000080 returned -22
[ 1437.055611] binder: 317:319 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.056630] binder: 317:319 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.074766] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.082329] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.095066] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.099060] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.109419] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.121813] binder: 322:323 ioctl 8010aa01 20000180 returned -22
[ 1437.121865] binder: 322:323 ioctl c0086420 20000080 returned -22
[ 1437.122852] binder: 322:323 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.122945] binder: 322:323 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.127051] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.147217] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.267311] binder_alloc: 328: binder_alloc_buf, no vma
[ 1437.267353] binder: 328:334 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.267773] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.267788] binder: 327:329 ioctl 40046207 0 returned -16
[ 1437.268929] binder_alloc: 328: binder_alloc_buf, no vma
[ 1437.268970] binder: 327:329 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.269703] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.269712] binder: 331:336 ioctl 40046207 0 returned -16
[ 1437.270522] binder: 330:335 ioctl 8010aa01 20000180 returned -22
[ 1437.270983] binder_alloc: 328: binder_alloc_buf, no vma
[ 1437.271018] binder: 331:336 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.271093] binder: 330:335 ioctl c0086420 20000080 returned -22
[ 1437.271164] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.271169] binder: 330:335 ioctl 40046207 0 returned -16
[ 1437.271930] binder_alloc: 328: binder_alloc_buf, no vma
[ 1437.273106] binder: 330:335 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.280623] binder: 326:340 ioctl 8010aa01 20000180 returned -22
[ 1437.280690] binder: 326:340 ioctl c0086420 20000080 returned -22
[ 1437.280765] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.280771] binder: 326:340 ioctl 40046207 0 returned -16
[ 1437.280788] binder: 332:337 ioctl 8010aa01 20000180 returned -22
[ 1437.280850] binder: 332:337 ioctl c0086420 20000080 returned -22
[ 1437.280924] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.280929] binder: 332:337 ioctl 40046207 0 returned -16
[ 1437.281752] binder_alloc: 328: binder_alloc_buf, no vma
[ 1437.281791] binder: 332:337 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.281801] binder: 333:339 ioctl 8010aa01 20000180 returned -22
[ 1437.281929] binder_alloc: 328: binder_alloc_buf, no vma
[ 1437.281968] binder: 326:340 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.282173] binder: 333:339 ioctl c0086420 20000080 returned -22
[ 1437.283155] binder_alloc: 328: binder_alloc_buf, no vma
[ 1437.283194] binder: 333:339 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.297098] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.309849] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.313372] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.338643] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.339668] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.356091] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.357054] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.370770] binder_alloc: 345: binder_alloc_buf, no vma
[ 1437.370810] binder: 345:347 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.387011] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.401562] binder_alloc: 344: binder_alloc_buf, no vma
[ 1437.403004] binder: 344:350 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.403441] binder: 343:346 ioctl 8010aa01 20000180 returned -22
[ 1437.403533] binder: 343:346 ioctl c0086420 20000080 returned -22
[ 1437.403633] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.403639] binder: 343:346 ioctl 40046207 0 returned -16
[ 1437.404483] binder_alloc: 344: binder_alloc_buf, no vma
[ 1437.404519] binder: 343:346 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.410343] binder: 348:352 ioctl 8010aa01 20000180 returned -22
[ 1437.410589] binder: 348:352 ioctl c0086420 20000080 returned -22
[ 1437.410789] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.410795] binder: 348:352 ioctl 40046207 0 returned -16
[ 1437.411787] binder_alloc: 344: binder_alloc_buf, no vma
[ 1437.411867] binder: 348:352 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.416622] binder: 351:354 ioctl 8010aa01 20000180 returned -22
[ 1437.416680] binder: 351:354 ioctl c0086420 20000080 returned -22
[ 1437.416743] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.416749] binder: 351:354 ioctl 40046207 0 returned -16
[ 1437.417750] binder_alloc: 344: binder_alloc_buf, no vma
[ 1437.417787] binder: 351:354 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.422165] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.422172] binder: 356:358 ioctl 40046207 0 returned -16
[ 1437.423043] binder_alloc: 344: binder_alloc_buf, no vma
[ 1437.423082] binder: 356:358 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.429008] binder: 353:355 ioctl 8010aa01 20000180 returned -22
[ 1437.429059] binder: 353:355 ioctl c0086420 20000080 returned -22
[ 1437.429723] binder_alloc: 344: binder_alloc_buf, no vma
[ 1437.429837] binder: 353:355 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.432514] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.432521] binder: 357:359 ioctl 40046207 0 returned -16
[ 1437.433392] binder_alloc: 344: binder_alloc_buf, no vma
[ 1437.433433] binder: 357:359 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.434664] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.435209] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.453668] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.462196] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.462473] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.471522] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.492341] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.604781] binder_alloc: 365: binder_alloc_buf, no vma
[ 1437.604823] binder: 365:372 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.605012] binder: 366:371 ioctl 8010aa01 20000180 returned -22
[ 1437.605063] binder: 366:371 ioctl c0086420 20000080 returned -22
[ 1437.605124] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.605130] binder: 366:371 ioctl 40046207 0 returned -16
[ 1437.606075] binder_alloc: 365: binder_alloc_buf, no vma
[ 1437.606117] binder: 366:371 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.606231] binder: 367:374 ioctl 8010aa01 20000180 returned -22
[ 1437.606511] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.606517] binder: 367:374 ioctl 40046207 0 returned -16
[ 1437.607460] binder_alloc: 365: binder_alloc_buf, no vma
[ 1437.607497] binder: 367:374 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.608708] binder: 363:373 ioctl 8010aa01 20000180 returned -22
[ 1437.608759] binder: 363:373 ioctl c0086420 20000080 returned -22
[ 1437.608822] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.608828] binder: 363:373 ioctl 40046207 0 returned -16
[ 1437.609509] binder_alloc: 365: binder_alloc_buf, no vma
[ 1437.609595] binder: 363:373 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.610582] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.610588] binder: 369:375 ioctl 40046207 0 returned -16
[ 1437.611540] binder_alloc: 365: binder_alloc_buf, no vma
[ 1437.611581] binder: 369:375 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.617730] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.617737] binder: 364:377 ioctl 40046207 0 returned -16
[ 1437.619714] binder_alloc: 365: binder_alloc_buf, no vma
[ 1437.619758] binder: 364:377 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.621673] binder: 362:376 ioctl 8010aa01 20000180 returned -22
[ 1437.622749] binder: 362:376 ioctl c0086420 20000080 returned -22
[ 1437.623564] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.623571] binder: 362:376 ioctl 40046207 0 returned -16
[ 1437.624502] binder_alloc: 365: binder_alloc_buf, no vma
[ 1437.624540] binder: 362:376 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.643064] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.650131] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.656700] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.673063] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.673138] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.689431] binder: 379:380 ioctl 8010aa01 20000180 returned -22
[ 1437.689481] binder: 379:380 ioctl c0086420 20000080 returned -22
[ 1437.690470] binder: 379:380 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.690562] binder: 379:380 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.698004] binder: 382:386 ioctl 8010aa01 20000180 returned -22
[ 1437.698056] binder: 382:386 ioctl c0086420 20000080 returned -22
[ 1437.698116] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.698121] binder: 382:386 ioctl 40046207 0 returned -16
[ 1437.702766] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.702801] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.711643] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.724141] binder: 382:386 transaction failed 29189/-22, size 40-16 line 3011
[ 1437.731218] binder: 387:389 ioctl 8010aa01 20000180 returned -22
[ 1437.731286] binder: 387:389 ioctl c0086420 20000080 returned -22
[ 1437.732289] binder: 387:389 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.732387] binder: 387:389 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.732984] binder: 383:385 ioctl 8010aa01 20000180 returned -22
[ 1437.733055] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.733061] binder: 383:385 ioctl 40046207 0 returned -16
[ 1437.735195] binder: 383:385 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.735287] binder: 383:385 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.751795] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.752764] binder_alloc: 384: binder_alloc_buf, no vma
[ 1437.752803] binder: 384:388 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.767299] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.774568] binder: 391:393 ioctl 8010aa01 20000180 returned -22
[ 1437.774613] binder: 391:393 ioctl c0086420 20000080 returned -22
[ 1437.774678] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.774684] binder: 391:393 ioctl 40046207 0 returned -16
[ 1437.775509] binder_alloc: 384: binder_alloc_buf, no vma
[ 1437.775541] binder: 391:393 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.781870] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.783285] binder: 392:394 ioctl c0086420 20000080 returned -22
[ 1437.783353] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.783359] binder: 392:394 ioctl 40046207 0 returned -16
[ 1437.784334] binder_alloc: 384: binder_alloc_buf, no vma
[ 1437.784373] binder: 392:394 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.789693] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.794612] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.820980] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.823451] binder_alloc: 395: binder_alloc_buf, no vma
[ 1437.823492] binder: 395:397 transaction failed 29189/-3, size 40-16 line 3134
[ 1437.884782] binder: undelivered TRANSACTION_ERROR: 29189
[ 1437.961200] binder: 400:403 ioctl 8010aa01 20000180 returned -22
[ 1437.961268] binder: 400:403 ioctl c0086420 20000080 returned -22
[ 1437.962226] binder: 400:403 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.962322] binder: 400:403 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.966126] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.966134] binder: 401:405 ioctl 40046207 0 returned -16
[ 1437.966429] binder: 402:407 ioctl 8010aa01 20000180 returned -22
[ 1437.966480] binder: 402:407 ioctl c0086420 20000080 returned -22
[ 1437.966544] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.966549] binder: 402:407 ioctl 40046207 0 returned -16
[ 1437.967422] binder: 401:405 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.967473] binder: 402:407 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.967562] binder: 402:407 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.967774] binder: 401:405 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.974239] binder: 404:408 ioctl 8010aa01 20000180 returned -22
[ 1437.974469] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.974478] binder: 404:408 ioctl 40046207 0 returned -16
[ 1437.975568] binder: 404:408 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.975698] binder: 404:408 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.981967] binder: 406:409 ioctl c0086420 20000080 returned -22
[ 1437.982047] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.982054] binder: 406:409 ioctl 40046207 0 returned -16
[ 1437.983417] binder: 406:409 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.983507] binder: 406:409 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.986188] binder: 399:412 ioctl 8010aa01 20000180 returned -22
[ 1437.986253] binder: 399:412 ioctl c0086420 20000080 returned -22
[ 1437.986324] binder: BINDER_SET_CONTEXT_MGR already set
[ 1437.986330] binder: 399:412 ioctl 40046207 0 returned -16
[ 1437.987540] binder: 399:412 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1437.987982] binder: 399:412 transaction failed 29201/-22, size 40-16 line 3197
[ 1437.993417] binder: undelivered TRANSACTION_ERROR: 29201
[ 1437.997554] binder_alloc: 410: binder_alloc_buf, no vma
[ 1437.997596] binder: 410:413 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.005586] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.020640] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.041052] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.041195] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.052629] binder: 417:418 ioctl 8010aa01 20000180 returned -22
[ 1438.052753] binder: 417:418 ioctl c0086420 20000080 returned -22
[ 1438.053697] binder: 417:418 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.053874] binder: 417:418 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.073363] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.080519] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.085096] binder: 415:416 ioctl 8010aa01 20000180 returned -22
[ 1438.085179] binder: 415:416 ioctl c0086420 20000080 returned -22
[ 1438.086521] binder: 415:416 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.086618] binder: 415:416 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.097570] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.109530] binder: 420:422 ioctl c0086420 20000080 returned -22
[ 1438.110120] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.110127] binder: 420:422 ioctl 40046207 0 returned -16
[ 1438.110901] binder_alloc: 415: binder_alloc_buf, no vma
[ 1438.110941] binder: 420:422 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.112205] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.115006] binder: 424:425 ioctl 8010aa01 20000180 returned -22
[ 1438.115052] binder: 424:425 ioctl c0086420 20000080 returned -22
[ 1438.116461] binder: 424:425 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.116556] binder: 424:425 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.127649] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.127656] binder: 421:426 ioctl 40046207 0 returned -16
[ 1438.128691] binder: 421:426 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.128791] binder: 421:426 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.131744] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.131751] binder: 423:428 ioctl 40046207 0 returned -16
[ 1438.132648] binder: 423:428 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.132736] binder: 423:428 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.141031] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.155083] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.159824] binder: 427:431 ioctl c0086420 20000080 returned -22
[ 1438.160887] binder: 427:431 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.160981] binder: 427:431 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.171809] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.179885] binder: 430:432 ioctl 8010aa01 20000180 returned -22
[ 1438.179926] binder: 430:432 ioctl c0086420 20000080 returned -22
[ 1438.180821] binder: 430:432 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.181015] binder: 430:432 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.191223] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.200950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.212773] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.319530] binder: 439:441 ioctl 8010aa01 20000180 returned -22
[ 1438.319844] binder: 439:441 ioctl c0086420 20000080 returned -22
[ 1438.320574] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.320581] binder: 436:442 ioctl 40046207 0 returned -16
[ 1438.321537] binder: 436:442 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.322581] binder: 439:441 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.322663] binder: 439:441 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.322944] binder: 436:442 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.324995] binder: 437:443 ioctl c0086420 20000080 returned -22
[ 1438.325066] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.325072] binder: 437:443 ioctl 40046207 0 returned -16
[ 1438.325894] binder: 437:443 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.327186] binder: 437:443 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.332897] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.332905] binder: 440:446 ioctl 40046207 0 returned -16
[ 1438.333879] binder: 440:446 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.334694] binder: 440:446 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.336863] binder: 438:445 ioctl 8010aa01 20000180 returned -22
[ 1438.337521] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.337528] binder: 438:445 ioctl 40046207 0 returned -16
[ 1438.337588] binder: 435:447 ioctl 8010aa01 20000180 returned -22
[ 1438.337643] binder: 435:447 ioctl c0086420 20000080 returned -22
[ 1438.337707] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.337713] binder: 435:447 ioctl 40046207 0 returned -16
[ 1438.338854] binder: 435:447 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.338935] binder: 435:447 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.340345] binder: 438:445 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.340440] binder: 438:445 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.360202] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.360913] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.363530] binder: 449:450 ioctl 8010aa01 20000180 returned -22
[ 1438.363582] binder: 449:450 ioctl c0086420 20000080 returned -22
[ 1438.363643] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.363648] binder: 449:450 ioctl 40046207 0 returned -16
[ 1438.364475] binder_alloc: 439: binder_alloc_buf, no vma
[ 1438.364516] binder: 449:450 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.374167] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.387937] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.392163] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.398696] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.419001] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.424537] binder: 452:453 ioctl 8010aa01 20000180 returned -22
[ 1438.424589] binder: 452:453 ioctl c0086420 20000080 returned -22
[ 1438.425607] binder: 452:453 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.425745] binder: 452:453 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.444541] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.449594] binder: 451:457 ioctl c0086420 20000080 returned -22
[ 1438.451415] binder: 451:457 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.451507] binder: 451:457 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.461853] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.461860] binder: 458:460 ioctl 40046207 0 returned -16
[ 1438.463972] binder: 458:460 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.464062] binder: 458:460 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.470819] binder: 459:461 ioctl 8010aa01 20000180 returned -22
[ 1438.471958] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.471966] binder: 459:461 ioctl 40046207 0 returned -16
[ 1438.473013] binder: 459:461 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.473102] binder: 459:461 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.473933] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.473940] binder: 462:465 ioctl 40046207 0 returned -16
[ 1438.474814] binder: 462:465 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.474912] binder: 462:465 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.479936] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.492048] binder: 456:463 ioctl 8010aa01 20000180 returned -22
[ 1438.492088] binder: 456:463 ioctl c0086420 20000080 returned -22
[ 1438.493172] binder: 456:463 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.493265] binder: 456:463 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.501210] binder: 464:466 ioctl 8010aa01 20000180 returned -22
[ 1438.502127] binder: 464:466 ioctl c0086420 20000080 returned -22
[ 1438.502204] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.502210] binder: 464:466 ioctl 40046207 0 returned -16
[ 1438.503025] binder: 464:466 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.503113] binder: 464:466 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.510907] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.518387] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.519019] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.522493] binder: 467:468 ioctl 8010aa01 20000180 returned -22
[ 1438.522532] binder: 467:468 ioctl c0086420 20000080 returned -22
[ 1438.523424] binder: 467:468 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.523516] binder: 467:468 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.543789] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.559977] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.584490] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.684099] binder: 471:473 ioctl 8010aa01 20000180 returned -22
[ 1438.684174] binder: 472:474 ioctl 8010aa01 20000180 returned -22
[ 1438.684225] binder: 471:473 ioctl c0086420 20000080 returned -22
[ 1438.684272] binder: 472:474 ioctl c0086420 20000080 returned -22
[ 1438.685099] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.685104] binder: 472:474 ioctl 40046207 0 returned -16
[ 1438.685944] binder: 472:474 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.686031] binder: 472:474 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.686444] binder: 471:473 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.686530] binder: 471:473 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.699801] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.699808] binder: 478:483 ioctl 40046207 0 returned -16
[ 1438.700782] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.700788] binder: 470:482 ioctl 40046207 0 returned -16
[ 1438.701934] binder: 470:482 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.702026] binder: 470:482 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.703962] binder: 478:483 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.704056] binder: 478:483 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.704325] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.713887] binder_alloc: 477: binder_alloc_buf, no vma
[ 1438.713925] binder: 477:479 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.714710] binder: 475:480 ioctl 8010aa01 20000180 returned -22
[ 1438.714826] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.714831] binder: 475:480 ioctl 40046207 0 returned -16
[ 1438.715548] binder_alloc: 477: binder_alloc_buf, no vma
[ 1438.715586] binder: 475:480 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.716657] binder: 476:484 ioctl 8010aa01 20000180 returned -22
[ 1438.716778] binder: 476:484 ioctl c0086420 20000080 returned -22
[ 1438.716960] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.716966] binder: 476:484 ioctl 40046207 0 returned -16
[ 1438.719479] binder_alloc: 477: binder_alloc_buf, no vma
[ 1438.719519] binder: 476:484 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.728430] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.728536] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.762594] binder: 489:497 ioctl 8010aa01 20000180 returned -22
[ 1438.762646] binder: 489:497 ioctl c0086420 20000080 returned -22
[ 1438.763413] binder_alloc: 477: binder_alloc_buf, no vma
[ 1438.763453] binder: 489:497 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.772501] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.775532] binder: 495:498 ioctl 8010aa01 20000180 returned -22
[ 1438.775583] binder: 495:498 ioctl c0086420 20000080 returned -22
[ 1438.775636] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.775640] binder: 495:498 ioctl 40046207 0 returned -16
[ 1438.776347] binder_alloc: 477: binder_alloc_buf, no vma
[ 1438.776379] binder: 495:498 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.788393] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.796430] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.799280] binder: 499:500 ioctl 8010aa01 20000180 returned -22
[ 1438.799319] binder: 499:500 ioctl c0086420 20000080 returned -22
[ 1438.799372] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.799377] binder: 499:500 ioctl 40046207 0 returned -16
[ 1438.800100] binder_alloc: 477: binder_alloc_buf, no vma
[ 1438.800140] binder: 499:500 transaction failed 29189/-3, size 40-16 line 3134
[ 1438.808092] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.818850] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.818997] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.826043] binder: undelivered TRANSACTION_ERROR: 29189
[ 1438.848571] binder: 501:502 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.848667] binder: 501:502 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.857091] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.877265] binder: 507:508 ioctl 8010aa01 20000180 returned -22
[ 1438.877316] binder: 507:508 ioctl c0086420 20000080 returned -22
[ 1438.878967] binder: 507:508 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.879056] binder: 507:508 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.883055] binder: 506:509 ioctl 8010aa01 20000180 returned -22
[ 1438.883147] binder: 506:509 ioctl c0086420 20000080 returned -22
[ 1438.884559] binder: 506:509 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.884651] binder: 506:509 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.893305] binder: 504:510 ioctl 8010aa01 20000180 returned -22
[ 1438.893354] binder: 504:510 ioctl c0086420 20000080 returned -22
[ 1438.893427] binder: BINDER_SET_CONTEXT_MGR already set
[ 1438.893432] binder: 504:510 ioctl 40046207 0 returned -16
[ 1438.894220] binder: 504:510 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.894311] binder: 504:510 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.903184] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.912909] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.922891] binder: undelivered TRANSACTION_ERROR: 29201
[ 1438.932194] binder: 511:512 ioctl 8010aa01 20000180 returned -22
[ 1438.932508] binder: 511:512 ioctl c0086420 20000080 returned -22
[ 1438.933478] binder: 511:512 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1438.933567] binder: 511:512 transaction failed 29201/-22, size 40-16 line 3197
[ 1438.942073] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.074873] binder: 515:516 ioctl 8010aa01 20000180 returned -22
[ 1439.074943] binder: 515:516 ioctl c0086420 20000080 returned -22
[ 1439.075884] binder: 515:516 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.075969] binder: 515:516 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.082292] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.082299] binder: 517:519 ioctl 40046207 0 returned -16
[ 1439.083050] binder: 514:518 ioctl 8010aa01 20000180 returned -22
[ 1439.083136] binder: 517:519 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.083230] binder: 517:519 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.083573] binder: 514:518 ioctl c0086420 20000080 returned -22
[ 1439.083739] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.083745] binder: 514:518 ioctl 40046207 0 returned -16
[ 1439.085127] binder: 514:518 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.085211] binder: 514:518 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.085685] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.085691] binder: 520:523 ioctl 40046207 0 returned -16
[ 1439.090986] binder: 520:523 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.091069] binder: 520:523 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.094802] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.094808] binder: 513:526 ioctl 40046207 0 returned -16
[ 1439.095719] binder: 513:526 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.097370] binder: 513:526 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.102713] binder: 522:527 ioctl 8010aa01 20000180 returned -22
[ 1439.102948] binder: 522:527 ioctl c0086420 20000080 returned -22
[ 1439.103071] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.103076] binder: 522:527 ioctl 40046207 0 returned -16
[ 1439.104193] binder: 522:527 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.104278] binder: 522:527 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.107571] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.122119] binder: 521:524 ioctl 8010aa01 20000180 returned -22
[ 1439.122185] binder: 521:524 ioctl c0086420 20000080 returned -22
[ 1439.134822] binder: 521:524 transaction failed 29189/-22, size 40-16 line 3011
[ 1439.138634] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.138919] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.147646] binder: 529:530 ioctl 8010aa01 20000180 returned -22
[ 1439.147685] binder: 529:530 ioctl c0086420 20000080 returned -22
[ 1439.148779] binder: 529:530 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.148873] binder: 529:530 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.151972] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.152007] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.157909] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.190270] binder: 531:532 ioctl 8010aa01 20000180 returned -22
[ 1439.190361] binder: 531:532 ioctl c0086420 20000080 returned -22
[ 1439.192412] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.192678] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.200048] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.200055] binder: 535:536 ioctl 40046207 0 returned -16
[ 1439.200946] binder: 535:536 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.201041] binder: 535:536 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.213232] binder: 537:538 ioctl 8010aa01 20000180 returned -22
[ 1439.213284] binder: 537:538 ioctl c0086420 20000080 returned -22
[ 1439.213344] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.213350] binder: 537:538 ioctl 40046207 0 returned -16
[ 1439.214294] binder: 531:532 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.214387] binder: 531:532 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.214474] binder: 537:538 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.214564] binder: 537:538 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.235793] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.236264] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.246829] binder: 534:540 ioctl 8010aa01 20000180 returned -22
[ 1439.246877] binder: 534:540 ioctl c0086420 20000080 returned -22
[ 1439.249194] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.256882] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.256889] binder: 539:542 ioctl 40046207 0 returned -16
[ 1439.257652] binder_alloc: 534: binder_alloc_buf failed to map pages in userspace, no vma
[ 1439.257695] binder: 539:542 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.272880] binder: 545:546 ioctl 8010aa01 20000180 returned -22
[ 1439.272934] binder: 545:546 ioctl c0086420 20000080 returned -22
[ 1439.273850] binder: 545:546 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.273987] binder: 545:546 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.281513] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.281524] binder: 541:544 ioctl 40046207 0 returned -16
[ 1439.282500] binder: 541:544 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.282588] binder: 541:544 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.283255] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.294639] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.335452] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.405734] binder: 551:553 ioctl 8010aa01 20000180 returned -22
[ 1439.405801] binder: 551:553 ioctl c0086420 20000080 returned -22
[ 1439.407438] binder: 551:553 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.407532] binder: 551:553 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.413778] binder: 548:552 ioctl 8010aa01 20000180 returned -22
[ 1439.413828] binder: 548:552 ioctl c0086420 20000080 returned -22
[ 1439.413888] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.413897] binder: 548:552 ioctl 40046207 0 returned -16
[ 1439.414930] binder: 548:552 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.415126] binder: 548:552 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.424027] binder: 550:555 ioctl 8010aa01 20000180 returned -22
[ 1439.424096] binder: 550:555 ioctl c0086420 20000080 returned -22
[ 1439.424229] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.424234] binder: 550:555 ioctl 40046207 0 returned -16
[ 1439.426391] binder: 549:558 ioctl 8010aa01 20000180 returned -22
[ 1439.426443] binder: 549:558 ioctl c0086420 20000080 returned -22
[ 1439.426506] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.426512] binder: 549:558 ioctl 40046207 0 returned -16
[ 1439.427613] binder: 549:558 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.427705] binder: 549:558 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.431348] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.431354] binder: 554:556 ioctl 40046207 0 returned -16
[ 1439.432206] binder: 554:556 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.432299] binder: 554:556 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.442087] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.447508] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.447514] binder: 557:560 ioctl 40046207 0 returned -16
[ 1439.448337] binder_alloc: 551: binder_alloc_buf, no vma
[ 1439.448377] binder: 557:560 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.456793] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.485802] binder_alloc: 561: binder_alloc_buf, no vma
[ 1439.485842] binder: 561:563 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.490589] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.491750] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.491783] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.495514] binder: 564:565 ioctl 8010aa01 20000180 returned -22
[ 1439.495554] binder: 564:565 ioctl c0086420 20000080 returned -22
[ 1439.495600] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.495604] binder: 564:565 ioctl 40046207 0 returned -16
[ 1439.507406] binder: 566:567 ioctl 8010aa01 20000180 returned -22
[ 1439.507444] binder: 566:567 ioctl c0086420 20000080 returned -22
[ 1439.507490] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.507493] binder: 566:567 ioctl 40046207 0 returned -16
[ 1439.508262] binder_alloc: 561: binder_alloc_buf, no vma
[ 1439.508303] binder: 566:567 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.528049] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.551639] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.554016] binder_alloc: 571: binder_alloc_buf, no vma
[ 1439.554057] binder: 571:573 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.571858] binder: 575:576 ioctl 8010aa01 20000180 returned -22
[ 1439.571923] binder: 575:576 ioctl c0086420 20000080 returned -22
[ 1439.571998] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.572003] binder: 575:576 ioctl 40046207 0 returned -16
[ 1439.572944] binder_alloc: 571: binder_alloc_buf, no vma
[ 1439.572981] binder: 575:576 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.573167] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.573173] binder: 570:574 ioctl 40046207 0 returned -16
[ 1439.574247] binder_alloc: 571: binder_alloc_buf, no vma
[ 1439.574407] binder: 570:574 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.580162] binder: 568:572 ioctl 8010aa01 20000180 returned -22
[ 1439.580211] binder: 568:572 ioctl c0086420 20000080 returned -22
[ 1439.580270] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.580275] binder: 568:572 ioctl 40046207 0 returned -16
[ 1439.581216] binder_alloc: 571: binder_alloc_buf, no vma
[ 1439.581254] binder: 568:572 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.596697] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.601201] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.609671] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.610081] binder: 579:581 ioctl 8010aa01 20000180 returned -22
[ 1439.610149] binder: 579:581 ioctl c0086420 20000080 returned -22
[ 1439.632521] binder: 578:580 ioctl 8010aa01 20000180 returned -22
[ 1439.632592] binder: 578:580 ioctl c0086420 20000080 returned -22
[ 1439.633618] binder: 578:580 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.633711] binder: 578:580 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.646472] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.654964] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.783133] binder: 584:586 ioctl 8010aa01 20000180 returned -22
[ 1439.783208] binder: 584:586 ioctl c0086420 20000080 returned -22
[ 1439.787438] binder: 585:588 ioctl 8010aa01 20000180 returned -22
[ 1439.787498] binder: 585:588 ioctl c0086420 20000080 returned -22
[ 1439.787567] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.787591] binder: 585:588 ioctl 40046207 0 returned -16
[ 1439.788715] binder: 585:588 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.788805] binder: 585:588 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.805447] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.805457] binder: 583:596 ioctl 40046207 0 returned -16
[ 1439.806400] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.806407] binder: 591:595 ioctl 40046207 0 returned -16
[ 1439.806698] binder_alloc: 584: binder_alloc_buf, no vma
[ 1439.806963] binder: 583:596 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.809223] binder: 592:597 ioctl 8010aa01 20000180 returned -22
[ 1439.809512] binder: 592:597 ioctl c0086420 20000080 returned -22
[ 1439.809591] binder: 590:593 ioctl 8010aa01 20000180 returned -22
[ 1439.809597] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.809603] binder: 592:597 ioctl 40046207 0 returned -16
[ 1439.809650] binder: 590:593 ioctl c0086420 20000080 returned -22
[ 1439.809728] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.809733] binder: 590:593 ioctl 40046207 0 returned -16
[ 1439.810535] binder_alloc: 584: binder_alloc_buf, no vma
[ 1439.810571] binder: 590:593 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.811049] binder_alloc: 584: binder_alloc_buf, no vma
[ 1439.811091] binder: 592:597 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.814459] binder_alloc: 584: binder_alloc_buf, no vma
[ 1439.814499] binder: 591:595 transaction failed 29189/-3, size 40-16 line 3134
[ 1439.829812] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.861263] binder: 599:600 ioctl 8010aa01 20000180 returned -22
[ 1439.861302] binder: 599:600 ioctl c0086420 20000080 returned -22
[ 1439.862201] binder: 599:600 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.862294] binder: 599:600 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.869851] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.883977] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.884415] binder: 601:602 ioctl 8010aa01 20000180 returned -22
[ 1439.884479] binder: 601:602 ioctl c0086420 20000080 returned -22
[ 1439.884554] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.884560] binder: 601:602 ioctl 40046207 0 returned -16
[ 1439.887430] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.904380] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.904413] binder: undelivered TRANSACTION_ERROR: 29189
[ 1439.935667] binder: 606:609 ioctl 8010aa01 20000180 returned -22
[ 1439.935751] binder: 606:609 ioctl c0086420 20000080 returned -22
[ 1439.937106] binder: 606:609 got transaction with invalid offset (0, min 0 max 0) or object.
[ 1439.937165] binder: 606:609 transaction failed 29201/-22, size 0-16 line 3197
[ 1439.940947] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.940953] binder: 608:611 ioctl 40046207 0 returned -16
[ 1439.941851] binder: 608:611 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.941941] binder: 608:611 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.954351] binder: 605:610 ioctl 8010aa01 20000180 returned -22
[ 1439.954402] binder: 605:610 ioctl c0086420 20000080 returned -22
[ 1439.954463] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.954468] binder: 605:610 ioctl 40046207 0 returned -16
[ 1439.955430] binder: 605:610 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.955525] binder: 605:610 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.966956] binder: 612:614 ioctl 8010aa01 20000180 returned -22
[ 1439.967009] binder: 612:614 ioctl c0086420 20000080 returned -22
[ 1439.967078] binder: BINDER_SET_CONTEXT_MGR already set
[ 1439.967086] binder: 612:614 ioctl 40046207 0 returned -16
[ 1439.967964] binder: 612:614 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1439.968056] binder: 612:614 transaction failed 29201/-22, size 40-16 line 3197
[ 1439.970076] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.970185] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.987252] binder: undelivered TRANSACTION_ERROR: 29201
[ 1439.996627] binder_alloc: 615: binder_alloc_buf, no vma
[ 1439.996665] binder: 615:616 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.002220] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.020321] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.111549] binder: 617:622 ioctl 8010aa01 20000180 returned -22
[ 1440.111710] binder: 617:622 ioctl c0086420 20000080 returned -22
[ 1440.113361] binder: 617:622 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.113453] binder: 617:622 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.113931] binder: 619:623 ioctl 8010aa01 20000180 returned -22
[ 1440.114069] binder: 619:623 ioctl c0086420 20000080 returned -22
[ 1440.114247] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.114253] binder: 619:623 ioctl 40046207 0 returned -16
[ 1440.115151] binder: 625:627 ioctl 8010aa01 20000180 returned -22
[ 1440.115234] binder: 618:628 ioctl 8010aa01 20000180 returned -22
[ 1440.115298] binder: 625:627 ioctl c0086420 20000080 returned -22
[ 1440.115358] binder: 618:628 ioctl c0086420 20000080 returned -22
[ 1440.115543] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.115554] binder: 618:628 ioctl 40046207 0 returned -16
[ 1440.115876] binder: 619:623 got transaction with invalid offset (0, min 0 max 0) or object.
[ 1440.115927] binder: 619:623 transaction failed 29201/-22, size 0-16 line 3197
[ 1440.116274] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.116279] binder: 625:627 ioctl 40046207 0 returned -16
[ 1440.117262] binder: 618:628 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.117355] binder: 618:628 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.117871] binder: 625:627 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.117952] binder: 625:627 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.130818] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.130825] binder: 624:629 ioctl 40046207 0 returned -16
[ 1440.134258] binder: 624:629 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.134348] binder: 624:629 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.145986] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.152121] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.160176] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.160326] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.178798] binder_alloc: 631: binder_alloc_buf, no vma
[ 1440.178833] binder: 631:632 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.193935] binder: 633:636 ioctl 8010aa01 20000180 returned -22
[ 1440.195019] binder: 633:636 ioctl c0086420 20000080 returned -22
[ 1440.195088] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.195093] binder: 633:636 ioctl 40046207 0 returned -16
[ 1440.195203] binder_alloc: 631: binder_alloc_buf, no vma
[ 1440.195241] binder: 633:636 transaction failed 29189/-3, size 0-16 line 3134
[ 1440.206776] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.212317] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.220138] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.231211] binder: 638:642 ioctl 8010aa01 20000180 returned -22
[ 1440.231262] binder: 638:642 ioctl c0086420 20000080 returned -22
[ 1440.232446] binder: 638:642 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.232953] binder: 637:639 ioctl 8010aa01 20000180 returned -22
[ 1440.232996] binder: 637:639 ioctl c0086420 20000080 returned -22
[ 1440.233054] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.233058] binder: 637:639 ioctl 40046207 0 returned -16
[ 1440.233483] binder: 638:642 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.233966] binder: 637:639 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.234063] binder: 637:639 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.246076] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.246084] binder: 641:644 ioctl 40046207 0 returned -16
[ 1440.246884] binder: 641:644 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.248331] binder: 641:644 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.261619] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.262598] binder: 634:640 ioctl 8010aa01 20000180 returned -22
[ 1440.262851] binder: 634:640 ioctl c0086420 20000080 returned -22
[ 1440.262951] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.262957] binder: 634:640 ioctl 40046207 0 returned -16
[ 1440.264629] binder: 634:640 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.264722] binder: 634:640 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.272164] binder: 643:645 ioctl 8010aa01 20000180 returned -22
[ 1440.272974] binder: 643:645 ioctl c0086420 20000080 returned -22
[ 1440.273046] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.273051] binder: 643:645 ioctl 40046207 0 returned -16
[ 1440.273900] binder: 643:645 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.274120] binder: 643:645 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.275458] binder: 646:648 ioctl 8010aa01 20000180 returned -22
[ 1440.275514] binder: 646:648 ioctl c0086420 20000080 returned -22
[ 1440.275591] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.275597] binder: 646:648 ioctl 40046207 0 returned -16
[ 1440.276460] binder: 646:648 got transaction with invalid offset (40, min 0 max 40) or object.
[ 1440.276518] binder: 646:648 transaction failed 29201/-22, size 40-8 line 3197
[ 1440.287233] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.293196] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.302037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.303885] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.313773] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.315945] binder_alloc: 649: binder_alloc_buf, no vma
[ 1440.315985] binder: 649:651 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.342411] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.472747] binder_alloc: 654: binder_alloc_buf, no vma
[ 1440.472789] binder: 654:663 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.474153] binder: 656:662 ioctl 8010aa01 20000180 returned -22
[ 1440.474344] binder: 656:662 ioctl c0086420 20000080 returned -22
[ 1440.474679] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.474686] binder: 656:662 ioctl 40046207 0 returned -16
[ 1440.475719] binder_alloc: 654: binder_alloc_buf, no vma
[ 1440.475755] binder: 656:662 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.476273] binder: 658:664 ioctl 8010aa01 20000180 returned -22
[ 1440.476324] binder: 658:664 ioctl c0086420 20000080 returned -22
[ 1440.476436] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.476441] binder: 658:664 ioctl 40046207 0 returned -16
[ 1440.476621] binder: 655:661 ioctl 8010aa01 20000180 returned -22
[ 1440.476844] binder: 655:661 ioctl c0086420 20000080 returned -22
[ 1440.476970] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.476976] binder: 655:661 ioctl 40046207 0 returned -16
[ 1440.479579] binder_alloc: 654: binder_alloc_buf, no vma
[ 1440.479620] binder: 658:664 transaction failed 29189/-3, size 40-8 line 3134
[ 1440.480184] binder_alloc: 654: binder_alloc_buf, no vma
[ 1440.480221] binder: 655:661 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.484437] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.484443] binder: 657:666 ioctl 40046207 0 returned -16
[ 1440.485331] binder_alloc: 654: binder_alloc_buf, no vma
[ 1440.485367] binder: 657:666 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.485455] binder: 653:665 ioctl 8010aa01 20000180 returned -22
[ 1440.485514] binder: 653:665 ioctl c0086420 20000080 returned -22
[ 1440.486153] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.486159] binder: 653:665 ioctl 40046207 0 returned -16
[ 1440.487027] binder_alloc: 654: binder_alloc_buf, no vma
[ 1440.487063] binder: 653:665 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.498886] binder: 659:667 ioctl 8010aa01 20000180 returned -22
[ 1440.499976] binder: 659:667 ioctl c0086420 20000080 returned -22
[ 1440.501101] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.501108] binder: 659:667 ioctl 40046207 0 returned -16
[ 1440.502249] binder_alloc: 654: binder_alloc_buf, no vma
[ 1440.502291] binder: 659:667 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.507950] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.513343] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.528672] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.535527] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.548764] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.563082] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.568373] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.576254] binder: 670:673 ioctl 8010aa01 20000180 returned -22
[ 1440.576984] binder: 670:673 ioctl c0086420 20000080 returned -22
[ 1440.578534] binder: 670:673 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.578626] binder: 670:673 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.578926] binder: 671:674 ioctl 8010aa01 20000180 returned -22
[ 1440.578982] binder: 671:674 ioctl c0086420 20000080 returned -22
[ 1440.579043] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.579048] binder: 671:674 ioctl 40046207 0 returned -16
[ 1440.580107] binder: 671:674 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.580196] binder: 671:674 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.583001] binder: 669:672 ioctl 8010aa01 20000180 returned -22
[ 1440.583060] binder: 669:672 ioctl c0086420 20000080 returned -22
[ 1440.583123] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.583128] binder: 669:672 ioctl 40046207 0 returned -16
[ 1440.584260] binder: 669:672 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.584351] binder: 669:672 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.611087] binder: 676:678 ioctl 8010aa01 20000180 returned -22
[ 1440.611138] binder: 676:678 ioctl c0086420 20000080 returned -22
[ 1440.611211] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.611216] binder: 676:678 ioctl 40046207 0 returned -16
[ 1440.612165] binder: 676:678 got transaction with invalid offset (40, min 0 max 40) or object.
[ 1440.612224] binder: 676:678 transaction failed 29201/-22, size 40-8 line 3197
[ 1440.615714] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.616018] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.617790] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.625294] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.625302] binder: 677:681 ioctl 40046207 0 returned -16
[ 1440.626038] binder_alloc: 680: binder_alloc_buf, no vma
[ 1440.626078] binder: 677:681 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.634062] binder_alloc: 680: binder_alloc_buf, no vma
[ 1440.634103] binder: 680:682 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.651554] binder: undelivered TRANSACTION_ERROR: 29201
[ 1440.653400] binder: 683:685 ioctl 8010aa01 20000180 returned -22
[ 1440.653447] binder: 683:685 ioctl c0086420 20000080 returned -22
[ 1440.653500] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.653503] binder: 683:685 ioctl 40046207 0 returned -16
[ 1440.654270] binder_alloc: 680: binder_alloc_buf, no vma
[ 1440.654301] binder: 683:685 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.663498] binder: 684:686 ioctl 8010aa01 20000180 returned -22
[ 1440.665050] binder: 684:686 ioctl c0086420 20000080 returned -22
[ 1440.665122] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.665127] binder: 684:686 ioctl 40046207 0 returned -16
[ 1440.665831] binder_alloc: 680: binder_alloc_buf, no vma
[ 1440.665870] binder: 684:686 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.675824] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.685555] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.688036] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.697077] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.844260] binder_alloc: 690: binder_alloc_buf, no vma
[ 1440.844300] binder: 690:696 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.846572] binder: 693:700 ioctl 8010aa01 20000180 returned -22
[ 1440.847894] binder: 693:700 ioctl c0086420 20000080 returned -22
[ 1440.849004] binder: 692:699 ioctl 8010aa01 20000180 returned -22
[ 1440.849067] binder: 692:699 ioctl c0086420 20000080 returned -22
[ 1440.849193] binder: 691:698 ioctl 8010aa01 20000180 returned -22
[ 1440.849303] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.849309] binder: 693:700 ioctl 40046207 0 returned -16
[ 1440.849338] binder: 691:698 ioctl c0086420 20000080 returned -22
[ 1440.849437] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.849443] binder: 692:699 ioctl 40046207 0 returned -16
[ 1440.850388] binder_alloc: 690: binder_alloc_buf, no vma
[ 1440.850427] binder: 693:700 transaction failed 29189/-3, size 40-8 line 3134
[ 1440.850463] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.850469] binder: 691:698 ioctl 40046207 0 returned -16
[ 1440.851523] binder_alloc: 690: binder_alloc_buf, no vma
[ 1440.851544] binder_alloc: 690: binder_alloc_buf, no vma
[ 1440.851561] binder: 691:698 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.851585] binder: 692:699 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.853440] binder: 689:702 ioctl 8010aa01 20000180 returned -22
[ 1440.853661] binder: 689:702 ioctl c0086420 20000080 returned -22
[ 1440.853815] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.853820] binder: 689:702 ioctl 40046207 0 returned -16
[ 1440.858939] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.858946] binder: 694:701 ioctl 40046207 0 returned -16
[ 1440.859811] binder_alloc: 690: binder_alloc_buf, no vma
[ 1440.859851] binder: 694:701 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.860376] binder_alloc: 690: binder_alloc_buf, no vma
[ 1440.860415] binder: 689:702 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.873211] binder: 695:704 ioctl 8010aa01 20000180 returned -22
[ 1440.873266] binder: 695:704 ioctl c0086420 20000080 returned -22
[ 1440.873328] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.873333] binder: 695:704 ioctl 40046207 0 returned -16
[ 1440.874033] binder_alloc: 690: binder_alloc_buf, no vma
[ 1440.874070] binder: 695:704 transaction failed 29189/-3, size 40-16 line 3134
[ 1440.888878] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.896119] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.896930] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.903855] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.913701] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.914039] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.914131] binder: undelivered TRANSACTION_ERROR: 29189
[ 1440.980583] binder: 705:711 ioctl 8010aa01 20000180 returned -22
[ 1440.980647] binder: 705:711 ioctl c0086420 20000080 returned -22
[ 1440.981716] binder: 705:711 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.981816] binder: 705:711 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.982016] binder: 708:713 ioctl 8010aa01 20000180 returned -22
[ 1440.982181] binder: 708:713 ioctl c0086420 20000080 returned -22
[ 1440.982257] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.982263] binder: 710:712 ioctl 40046207 0 returned -16
[ 1440.983152] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.983158] binder: 708:713 ioctl 40046207 0 returned -16
[ 1440.984236] binder: 710:712 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.984319] binder: 710:712 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.984591] binder: 708:713 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.984679] binder: 708:713 transaction failed 29201/-22, size 40-16 line 3197
[ 1440.992746] binder: 709:715 ioctl 8010aa01 20000180 returned -22
[ 1440.992805] binder: 709:715 ioctl c0086420 20000080 returned -22
[ 1440.992919] binder: BINDER_SET_CONTEXT_MGR already set
[ 1440.992925] binder: 709:715 ioctl 40046207 0 returned -16
[ 1440.994132] binder: 709:715 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1440.995477] binder: 709:715 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.005334] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.008043] binder_alloc: 717: binder_alloc_buf, no vma
[ 1441.008077] binder: 717:718 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.022817] binder: 714:716 ioctl 8010aa01 20000180 returned -22
[ 1441.022874] binder: 714:716 ioctl c0086420 20000080 returned -22
[ 1441.022943] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.022949] binder: 714:716 ioctl 40046207 0 returned -16
[ 1441.023686] binder_alloc: 717: binder_alloc_buf, no vma
[ 1441.023722] binder: 714:716 transaction failed 29189/-3, size 40-8 line 3134
[ 1441.033328] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.033915] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.052283] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.059253] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.064817] binder: 719:720 ioctl 8010aa01 20000180 returned -22
[ 1441.064856] binder: 719:720 ioctl c0086420 20000080 returned -22
[ 1441.064902] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.064905] binder: 719:720 ioctl 40046207 0 returned -16
[ 1441.066629] binder_alloc: 717: binder_alloc_buf, no vma
[ 1441.066669] binder: 719:720 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.070906] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.081366] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.095283] binder: 721:722 ioctl 8010aa01 20000180 returned -22
[ 1441.095333] binder: 721:722 ioctl c0086420 20000080 returned -22
[ 1441.096296] binder: 721:722 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.096386] binder: 721:722 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.105293] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.236597] binder_alloc: 728: binder_alloc_buf, no vma
[ 1441.236637] binder: 728:732 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.243331] binder: 725:731 ioctl 8010aa01 20000180 returned -22
[ 1441.243393] binder: 725:731 ioctl c0086420 20000080 returned -22
[ 1441.243463] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.243468] binder: 725:731 ioctl 40046207 0 returned -16
[ 1441.244364] binder_alloc: 728: binder_alloc_buf, no vma
[ 1441.244404] binder: 725:731 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.246704] binder: 726:733 ioctl 8010aa01 20000180 returned -22
[ 1441.246907] binder: 726:733 ioctl c0086420 20000080 returned -22
[ 1441.246988] binder: 730:734 ioctl 8010aa01 20000180 returned -22
[ 1441.247068] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.247074] binder: 726:733 ioctl 40046207 0 returned -16
[ 1441.247792] binder: 730:734 ioctl c0086420 20000080 returned -22
[ 1441.247919] binder_alloc: 728: binder_alloc_buf, no vma
[ 1441.247957] binder: 726:733 transaction failed 29189/-3, size 40-8 line 3134
[ 1441.248290] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.248296] binder: 730:734 ioctl 40046207 0 returned -16
[ 1441.249112] binder_alloc: 728: binder_alloc_buf, no vma
[ 1441.249151] binder: 730:734 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.256814] binder: 724:737 ioctl 8010aa01 20000180 returned -22
[ 1441.256962] binder: 724:737 ioctl c0086420 20000080 returned -22
[ 1441.257092] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.257098] binder: 724:737 ioctl 40046207 0 returned -16
[ 1441.258050] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.258059] binder: 729:738 ioctl 40046207 0 returned -16
[ 1441.259183] binder_alloc: 728: binder_alloc_buf, no vma
[ 1441.259224] binder: 729:738 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.259311] binder_alloc: 728: binder_alloc_buf, no vma
[ 1441.259348] binder: 724:737 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.266553] binder: 727:736 ioctl 8010aa01 20000180 returned -22
[ 1441.267646] binder: 727:736 ioctl c0086420 20000080 returned -22
[ 1441.267851] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.267857] binder: 727:736 ioctl 40046207 0 returned -16
[ 1441.269706] binder_alloc: 728: binder_alloc_buf, no vma
[ 1441.269744] binder: 727:736 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.270695] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.285932] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.293526] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.307532] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.474591] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.487832] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.647163] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.653213] binder: 742:745 ioctl 8010aa01 20000180 returned -22
[ 1441.653274] binder: 742:745 ioctl c0086420 20000080 returned -22
[ 1441.654287] binder: 742:745 got transaction with invalid offset (0, min 24 max 40) or object.
[ 1441.654377] binder: 742:745 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.657846] binder: 746:748 ioctl 8010aa01 20000180 returned -22
[ 1441.658001] binder: 744:747 ioctl 8010aa01 20000180 returned -22
[ 1441.658070] binder: 746:748 ioctl c0086420 20000080 returned -22
[ 1441.658201] binder: 744:747 ioctl c0086420 20000080 returned -22
[ 1441.658307] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.658313] binder: 746:748 ioctl 40046207 0 returned -16
[ 1441.658388] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.658393] binder: 744:747 ioctl 40046207 0 returned -16
[ 1441.659298] binder: 746:748 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.659385] binder: 746:748 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.660292] binder: 744:747 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.660380] binder: 744:747 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.663646] binder: 740:741 ioctl 8010aa01 20000180 returned -22
[ 1441.663717] binder: 740:741 ioctl c0086420 20000080 returned -22
[ 1441.663791] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.663798] binder: 740:741 ioctl 40046207 0 returned -16
[ 1441.664625] binder: 740:741 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.664718] binder: 740:741 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.668663] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.690345] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.690711] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.692615] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.733559] binder: 750:753 ioctl 8010aa01 20000180 returned -22
[ 1441.733619] binder: 750:753 ioctl c0086420 20000080 returned -22
[ 1441.735150] binder: 750:753 got transaction with invalid offset (0, min 24 max 40) or object.
[ 1441.735244] binder: 750:753 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.741876] binder: 752:754 ioctl 8010aa01 20000180 returned -22
[ 1441.741932] binder: 752:754 ioctl c0086420 20000080 returned -22
[ 1441.742037] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.742042] binder: 752:754 ioctl 40046207 0 returned -16
[ 1441.742888] binder: 752:754 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.742982] binder: 752:754 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.759394] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.759512] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.768108] binder_alloc: 755: binder_alloc_buf, no vma
[ 1441.768146] binder: 755:756 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.791821] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.802810] binder_alloc: 757: binder_alloc_buf, no vma
[ 1441.802849] binder: 757:758 transaction failed 29189/-3, size 40-16 line 3134
[ 1441.828438] binder: undelivered TRANSACTION_ERROR: 29189
[ 1441.876640] binder: 759:765 ioctl 8010aa01 20000180 returned -22
[ 1441.876703] binder: 759:765 ioctl c0086420 20000080 returned -22
[ 1441.877740] binder: 759:765 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.877837] binder: 759:765 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.878429] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.878435] binder: 763:768 ioctl 40046207 0 returned -16
[ 1441.879450] binder: 763:768 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.879546] binder: 763:768 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.879986] binder: 760:767 ioctl 8010aa01 20000180 returned -22
[ 1441.880050] binder: 760:767 ioctl c0086420 20000080 returned -22
[ 1441.880168] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.880174] binder: 760:767 ioctl 40046207 0 returned -16
[ 1441.881577] binder: 760:767 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.881667] binder: 760:767 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.895469] binder: 762:771 ioctl 8010aa01 20000180 returned -22
[ 1441.895553] binder: 764:772 ioctl 8010aa01 20000180 returned -22
[ 1441.895661] binder: 762:771 ioctl c0086420 20000080 returned -22
[ 1441.895842] binder: 764:772 ioctl c0086420 20000080 returned -22
[ 1441.897085] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.897092] binder: 762:771 ioctl 40046207 0 returned -16
[ 1441.897791] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.897798] binder: 764:772 ioctl 40046207 0 returned -16
[ 1441.898282] binder: 761:770 ioctl 8010aa01 20000180 returned -22
[ 1441.898352] binder: 761:770 ioctl c0086420 20000080 returned -22
[ 1441.898427] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.898433] binder: 761:770 ioctl 40046207 0 returned -16
[ 1441.898809] binder: 762:771 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.898897] binder: 762:771 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.899438] binder: 764:772 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.899469] binder: 761:770 got transaction with invalid offset (0, min 24 max 40) or object.
[ 1441.899513] binder: 764:772 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.899574] binder: 761:770 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.917408] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.928357] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.928465] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.933863] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.936207] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.948631] binder: undelivered TRANSACTION_ERROR: 29201
[ 1441.960040] binder: 775:778 ioctl 8010aa01 20000180 returned -22
[ 1441.960092] binder: 775:778 ioctl c0086420 20000080 returned -22
[ 1441.961218] binder: 775:778 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.961312] binder: 775:778 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.963371] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.963378] binder: 773:774 ioctl 40046207 0 returned -16
[ 1441.964332] binder: 773:774 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.964428] binder: 773:774 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.967718] binder: 776:779 ioctl 8010aa01 20000180 returned -22
[ 1441.972841] binder: 776:779 ioctl c0086420 20000080 returned -22
[ 1441.972920] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.972925] binder: 776:779 ioctl 40046207 0 returned -16
[ 1441.973736] binder: 776:779 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.973827] binder: 776:779 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.990246] binder: 780:785 ioctl 8010aa01 20000180 returned -22
[ 1441.990309] binder: 780:785 ioctl c0086420 20000080 returned -22
[ 1441.990560] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.990565] binder: 780:785 ioctl 40046207 0 returned -16
[ 1441.992668] binder: 780:785 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.992756] binder: 780:785 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.994902] binder: 782:787 ioctl 8010aa01 20000180 returned -22
[ 1441.995642] binder: 782:787 ioctl c0086420 20000080 returned -22
[ 1441.995800] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.995805] binder: 782:787 ioctl 40046207 0 returned -16
[ 1441.996888] binder: 782:787 got transaction with invalid offset (40, min 24 max 40) or object.
[ 1441.996987] binder: 782:787 transaction failed 29201/-22, size 40-16 line 3197
[ 1441.998152] binder: undelivered TRANSACTION_ERROR: 29201
[ 1442.003905] binder_alloc: 781: binder_alloc_buf, no vma
[ 1442.003945] binder: 781:784 transaction failed 29189/-3, size 40-16 line 3134
[ 1442.010082] binder: 783:786 ioctl 8010aa01 20000180 returned -22
[ 1442.010136] binder: 783:786 ioctl c0086420 20000080 returned -22
[ 1442.010270] binder: BINDER_SET_CONTEXT_MGR already set
[ 1442.010275] binder: 783:786 ioctl 40046207 0 returned -16
[ 1442.010991] binder_alloc: 781: binder_alloc_buf, no vma
[ 1442.011030] binder: 783:786 transaction failed 29189/-3, size 40-16 line 3134
[ 1442.011877] binder: undelivered TRANSACTION_ERROR: 29201
[ 1442.018938] binder: undelivered TRANSACTION_ERROR: 29201
[ 1442.033686] binder: undelivered TRANSACTION_ERROR: 29189
[ 1442.047026] binder: 788:791 ioctl 8010aa01 20000180 returned -22
[ 1442.047087] binder: 788:791 ioctl c0086420 20000080 returned -22
[ 1442.047157] binder: BINDER_SET_CONTEXT_MGR already set
[ 1442.047163] binder: 788:791 ioctl 40046207 0 returned -16
[ 1442.047922] binder_alloc: 781: binder_alloc_buf, no vma
[ 1442.047961] binder: 788:791 transaction failed 29189/-3, size 40-16 line 3134
[ 1442.049554] binder: undelivered TRANSACTION_ERROR: 29201
[ 1442.060086] binder: 789:792 ioctl 8010aa01 20000180 returned -22
[ 1442.060141] binder: 789:792 ioctl c0086420 20000080 returned -22
[ 1442.060204] binder: BINDER_SET_CONTEXT_MGR already set
[ 1442.060210] binder: 789:792 ioctl 40046207 0 returned -16
[ 1442.060931] binder_alloc: 781: binder_alloc_buf, no vma
[ 1442.060963] binder: 789:792 transaction failed 29189/-3, size 40-16 line 3134
[ 1442.065379] binder: undelivered TRANSACTION_ERROR: 29201
[ 1442.075556] binder: undelivered TRANSACTION_ERROR: 29189
[ 1442.079151] binder: undelivered TRANSACTION_ERROR: 29189
[ 1442.090771] binder: undelivered TRANSACTION_ERROR: 29189
[ 1442.218327] INFO: task init:16489 blocked for more than 120 seconds.
[ 1442.218332]       Not tainted 4.4.125-g38f41ec #21
[ 1442.218334] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1442.218354] init            D ffff88018ed9f718 29272 16489      1 0x00000000
[ 1442.218363]  ffff88018ed9f718 ffff8801d6cb6000 0000000000000000 0000000000000007
[ 1442.218371]  ffff8801d6cb6000 ffff8801db31fdb8 ffff8801db31fde0 ffff8801db31f4d8
[ 1442.218385]  ffff8801db31f4c0 ffff8800b311e000 ffff8801d6cb6000 0000000000000000
[ 1442.218387] Call Trace:
[ 1442.218402]  [<ffffffff8376b82a>] schedule+0x7a/0x1b0
[ 1442.218408]  [<ffffffff8376c023>] schedule_preempt_disabled+0x13/0x20
[ 1442.218414]  [<ffffffff837705e6>] mutex_lock_nested+0x306/0x850
[ 1442.218424]  [<ffffffff81f4f7ea>] ? tty_open+0x4ca/0xee0
[ 1442.218430]  [<ffffffff837702e0>] ? __ww_mutex_lock+0x14f0/0x14f0
[ 1442.218435]  [<ffffffff81f4f478>] ? tty_open+0x158/0xee0
[ 1442.218444]  [<ffffffff814f9d40>] ? kmem_cache_alloc_trace+0x100/0x2b0
[ 1442.218451]  [<ffffffff81f4f7ea>] tty_open+0x4ca/0xee0
[ 1442.218458]  [<ffffffff81f4f320>] ? tty_init_dev+0x430/0x430
[ 1442.218466]  [<ffffffff8152a507>] ? chrdev_open+0xc7/0x4c0
[ 1442.218472]  [<ffffffff81f4f320>] ? tty_init_dev+0x430/0x430
[ 1442.218478]  [<ffffffff8152a66b>] chrdev_open+0x22b/0x4c0
[ 1442.218484]  [<ffffffff8152a440>] ? cdev_put.part.0+0x50/0x50
[ 1442.218492]  [<ffffffff8151881b>] do_dentry_open+0x59b/0xba0
[ 1442.218499]  [<ffffffff8153cfab>] ? __inode_permission2+0x9b/0x240
[ 1442.218506]  [<ffffffff8152a440>] ? cdev_put.part.0+0x50/0x50
[ 1442.218515]  [<ffffffff8151c0e0>] vfs_open+0x110/0x210
[ 1442.218521]  [<ffffffff8153d59e>] ? may_open+0x1ae/0x280
[ 1442.218527]  [<ffffffff8154d373>] path_openat+0x923/0x3940
[ 1442.218535]  [<ffffffff81daf873>] ? depot_save_stack+0x1c3/0x640
[ 1442.218542]  [<ffffffff8154ca50>] ? path_mountpoint+0x830/0x830
[ 1442.218547]  [<ffffffff815508cb>] ? getname_flags+0xcb/0x580
[ 1442.218552]  [<ffffffff81550d99>] ? getname+0x19/0x20
[ 1442.218557]  [<ffffffff8151c96f>] ? do_sys_open+0x21f/0x660
[ 1442.218563]  [<ffffffff8151cddd>] ? SyS_open+0x2d/0x40
[ 1442.218570]  [<ffffffff83779965>] ? entry_SYSCALL_64_fastpath+0x22/0x9e
[ 1442.218579]  [<ffffffff812378f0>] ? debug_check_no_locks_freed+0x2c0/0x2c0
[ 1442.218584]  [<ffffffff81230631>] ? __lock_is_held+0xa1/0xf0
[ 1442.218590]  [<ffffffff81553017>] do_filp_open+0x197/0x290
[ 1442.218596]  [<ffffffff81552e80>] ? user_path_mountpoint_at+0x40/0x40
[ 1442.218602]  [<ffffffff83778e2c>] ? _raw_spin_unlock+0x2c/0x50
[ 1442.218608]  [<ffffffff8157a573>] ? __alloc_fd+0x1e3/0x500
[ 1442.218615]  [<ffffffff8151cab9>] do_sys_open+0x369/0x660
[ 1442.218622]  [<ffffffff8151c750>] ? filp_open+0x70/0x70
[ 1442.218628]  [<ffffffff81f4a2b9>] ? proc_clear_tty+0xd9/0x140
[ 1442.218634]  [<ffffffff83779457>] ? _raw_write_unlock_irq+0x27/0x50
[ 1442.218640]  [<ffffffff8151cddd>] SyS_open+0x2d/0x40
[ 1442.218647]  [<ffffffff83779965>] entry_SYSCALL_64_fastpath+0x22/0x9e
[ 1442.218652] 1 lock held by init/16489:
[ 1442.218667]  #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81f4f7ea>] tty_open+0x4ca/0xee0
[ 1442.218670] Sending NMI to all CPUs:
[ 1442.218896] NMI backtrace for cpu 0
[ 1442.218899] CPU: 0 PID: 487 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #21
[ 1442.218903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1442.218906] task: ffff8800bb2e3000 task.stack: ffff8800bac40000
[ 1442.218909] RIP: 0010:[<ffffffff810c3f87>]  [<ffffffff810c3f87>] flat_send_IPI_mask+0xf7/0x1a0
[ 1442.218912] RSP: 0018:ffff8800bac47cb8  EFLAGS: 00000046
[ 1442.218915] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000
[ 1442.218918] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300
[ 1442.218921] RBP: ffff8800bac47ce0 R08: 0000000000000001 R09: 0000000000000000
[ 1442.218924] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246
[ 1442.218927] R13: 0000000000000003 R14: ffffffff8426f5a0 R15: 0000000000000002
[ 1442.218930] FS:  0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
[ 1442.218932] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1442.218935] CR2: 0000000020000000 CR3: 000000007fc92000 CR4: 0000000000160670
[ 1442.218938] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1442.218941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1442.218943] Stack:
[ 1442.218945]  ffffffff8426f5a0 ffffffff847f0b40 fffffbfff08fdc1c dffffc0000000000
[ 1442.218948]  ffff8801db31bca0 ffff8800bac47d00 ffffffff810b9abb ffffffff839f6dc0
[ 1442.218951]  0000000000000003 ffff8800bac47d60 ffffffff81d11764 ffffffff8141b993
[ 1442.218952] Call Trace:
[ 1442.218955]  [<ffffffff810b9abb>] nmi_raise_cpu_backtrace+0x5b/0x70
[ 1442.218958]  [<ffffffff81d11764>] nmi_trigger_all_cpu_backtrace+0x4a4/0x550
[ 1442.218961]  [<ffffffff8141b993>] ? print_lock+0xab/0xae
[ 1442.218964]  [<ffffffff810b9a60>] ? irq_force_complete_move+0x3b0/0x3b0
[ 1442.218966]  [<ffffffff810b9b54>] arch_trigger_all_cpu_backtrace+0x14/0x20
[ 1442.218968]  [<ffffffff813695ca>] watchdog+0x6fa/0xae0
[ 1442.218970]  [<ffffffff81368f93>] ? watchdog+0xc3/0xae0
[ 1442.218972]  [<ffffffff81190b48>] kthread+0x268/0x300
[ 1442.218974]  [<ffffffff81368ed0>] ? reset_hung_task_detector+0x20/0x20
[ 1442.218976]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[ 1442.218978]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[ 1442.218979]  [<ffffffff83779d95>] ret_from_fork+0x55/0x80
[ 1442.218982]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[ 1442.218986] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 2b 33 17 00 4c 89 e7 57 9d 0f 1f 
[ 1442.218988] NMI backtrace for cpu 1
[ 1442.218990] CPU: 1 PID: 3840 Comm: syz-executor2 Not tainted 4.4.125-g38f41ec #21
[ 1442.218992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1442.218994] task: ffff8801d851c800 task.stack: ffff8801d84c8000
[ 1442.218996] RIP: 0010:[<ffffffff814a04a4>]  [<ffffffff814a04a4>] copy_page_range+0xb94/0x1480
[ 1442.218998] RSP: 0018:ffff8801d84cfa08  EFLAGS: 00000203
[ 1442.219000] RAX: ffff8801d851c800 RBX: 8000000082e00007 RCX: ffffffff814a049e
[ 1442.219002] RDX: 0000000000000000 RSI: 00000000f74ff000 RDI: ffffea00020b801c
[ 1442.219004] RBP: ffff8801d84cfba0 R08: 0000000000000001 R09: ffffffff850ded40
[ 1442.219006] R10: 0000000000000001 R11: 1ffff1003b099f08 R12: ffffea00020b8000
[ 1442.219008] R13: 00000000f74ff000 R14: dffffc0000000000 R15: ffff8801917df7f8
[ 1442.219010] FS:  0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000091a4900
[ 1442.219012] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1442.219014] CR2: 0000000020000000 CR3: 00000001917ee000 CR4: 0000000000160670
[ 1442.219017] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1442.219019] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1442.219021] Stack:
[ 1442.219024]  0000000000000001 0000000000000000 ffffed001665daa4 fffffbfff08fd9f2
[ 1442.219027]  ffff8800b32ed520 1ffff1003b099f63 00000000f7541fff 00000000f7541fff
[ 1442.219029]  ffff8801d98a2018 ffff8800ae46c018 00000000f7542000 00000000f7541fff
[ 1442.219030] Call Trace:
[ 1442.219032]  [<ffffffff8149f910>] ? vm_iomap_memory+0x160/0x160
[ 1442.219034]  [<ffffffff814abc2e>] ? __vma_link_rb+0x20e/0x310
[ 1442.219036]  [<ffffffff8112a1f5>] copy_process+0x4c25/0x6120
[ 1442.219038]  [<ffffffff812378f0>] ? debug_check_no_locks_freed+0x2c0/0x2c0
[ 1442.219040]  [<ffffffff811255d0>] ? __cleanup_sighand+0x50/0x50
[ 1442.219042]  [<ffffffff8112bb11>] _do_fork+0x151/0xe00
[ 1442.219043]  [<ffffffff8112b9c0>] ? fork_idle+0x270/0x270
[ 1442.219045]  [<ffffffff8148c5ae>] ? vmacache_update+0xfe/0x130
[ 1442.219047]  [<ffffffff8112c897>] SyS_clone+0x37/0x50
[ 1442.219049]  [<ffffffff8377b420>] ? entry_INT80_compat+0x90/0x90
[ 1442.219051]  [<ffffffff81006d91>] do_fast_syscall_32+0x321/0x8a0
[ 1442.219052]  [<ffffffff8377b2aa>] sysenter_flags_fixed+0xd/0x17
[ 1442.219057] Code: f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 d9 06 00 00 41 8b 44 24 1c 85 c0 0f 8e 06 03 00 00 e8 e2 11 ec ff f0 41 ff 44 24 1c <e8> d7 11 ec ff f0 41 ff 44 24 18 49 8d 7c 24 08 48 89 f8 48 c1 
[ 1442.219263] Kernel panic - not syncing: hung_task: blocked tasks
[ 1442.219268] CPU: 0 PID: 487 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #21
[ 1442.219271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1442.219277]  0000000000000000 46506aaae2961ac8 ffff8800bac47ca8 ffffffff81d067bd
[ 1442.219283]  ffffffff838831a0 ffff8800bac47d80 dffffc0000000000 7fffffffffffffff
[ 1442.219295]  ffff8801d6cb6448 ffff8800bac47d70 ffffffff8141b46a 0000000041b58ab3
[ 1442.219296] Call Trace:
[ 1442.219305]  [<ffffffff81d067bd>] dump_stack+0xc1/0x124
[ 1442.219312]  [<ffffffff8141b46a>] panic+0x1aa/0x388
[ 1442.219319]  [<ffffffff8141b2c0>] ? percpu_up_read.constprop.45+0xe1/0xe1
[ 1442.219324]  [<ffffffff81d116b8>] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550
[ 1442.219329]  [<ffffffff81d116b8>] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550
[ 1442.219335]  [<ffffffff813695db>] watchdog+0x70b/0xae0
[ 1442.219340]  [<ffffffff81368f93>] ? watchdog+0xc3/0xae0
[ 1442.219347]  [<ffffffff81190b48>] kthread+0x268/0x300
[ 1442.219352]  [<ffffffff81368ed0>] ? reset_hung_task_detector+0x20/0x20
[ 1442.219359]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[ 1442.219366]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[ 1442.219372]  [<ffffffff83779d95>] ret_from_fork+0x55/0x80
[ 1442.219379]  [<ffffffff811908e0>] ? kthread_create_on_node+0x400/0x400
[ 1442.219894] Dumping ftrace buffer:
[ 1442.219923]    (ftrace buffer empty)
[ 1442.219925] Kernel Offset: disabled
[ 1465.291242] Rebooting in 86400 seconds..